Legal
Privacy and cookie policy
Perú Software Consulting Group S.A.C. processes personal data under Peru's Law 29733 on Personal Data Protection and its regulations. Here is exactly what we do with it.
Draft. This text is pending legal review and is not yet binding. The technical part — what is stored and for how long — has been verified against the system.
Who processes your data
The controller is Perú Software Consulting Group S.A.C., based in Peru. For anything related to this policy, write to contacto@perusoftware.pe.
Data of platform customers
When you create an account we store only what is needed to run and bill the service:
- Name and email address.
- Your password, hashed. We store a cryptographic digest: we do not keep it in plain text and cannot read or recover it.
- The API keys you generate. Also hashed, as SHA-256 digests, alongside a masked preview so you can recognise them in the dashboard. If you lose a key we cannot return it: it has to be revoked and replaced.
- The creation date and last use of each key, so you can spot one that should no longer be active.
Lookup data
Every API call is logged with the value looked up — the tax ID or plate requested —, the key used, the service, the response code and the response returned.
That log exists for three reasons: to count your plan usage, to investigate incidents, and to detect misuse of a key. It is your history and it is available in your dashboard.
For printable HTML records we do not store the generated document, only the fact that it was requested.
Where the data we return comes from
The platform does not create information: it queries public registries of the Peruvian State — SUNAT, the Ministry of Transport and Communications, and MINEM's mining formalisation registry — and returns it in a usable format.
Those registries are public by law. We do not alter their content, and if a value is wrong at the source it will be wrong in our response too: corrections must be requested from the publishing authority.
Cache: how long we keep a response
Some lookups are stored for a while so we do not hit the source on every call:
- MTC certificate and REINFO: up to 30 days.
- Every other lookup goes live to the source and is not cached.
- Printable HTML records are never cached.
Who we share it with
We do not sell or transfer data to third parties for commercial purposes. It is only disclosed when required by a competent authority or a legal obligation.
Providers involved in delivering the service — hosting and infrastructure — process data on our behalf and under our instructions.
Your rights
You may request access, rectification, cancellation or objection regarding your data — the ARCO rights under Law 29733 — by writing to contacto@perusoftware.pe. We will reply within the legal deadlines.
If you believe your request was not handled properly, you may turn to the National Authority for Personal Data Protection at the Ministry of Justice.
Cookies
This site uses no tracking or advertising cookies, and embeds no third-party analytics. The only preference stored in your browser is whether you prefer light or dark mode, in local storage: it never leaves your device and you can clear it from your browser.
The customer dashboard does need a session cookie to keep you signed in. It is strictly necessary and is removed when you sign out.