Privacy Policy

1. Data controller

The data controller for personal data is:

ValorSME
E-mail: valorsme@proton.me

2. Data collected

When using the service, we may collect the following data:

Identification data: e-mail address (if voluntarily provided).

Simulation data: company registration number, revenue, EBITDA, net debt, and valuation parameters entered into the tool. This data is stored locally in your browser (localStorage) and is not transmitted to our servers, except for company lookups which query official government registry APIs.

Payment data: transactions are processed by Stripe, acting as a sub-processor. We never store your banking details. Stripe is PCI-DSS Level 1 certified.

3. Purposes of processing

The data collected is used for:

Providing the business valuation service (legal basis: performance of contract), processing payments and delivering PDF reports (legal basis: performance of contract), and improving the service (legal basis: legitimate interest).

4. Data retention

Simulation data is stored only in the user's browser and is deleted when the user clears their browser data.

Payment data is retained by Stripe in accordance with their legal and regulatory obligations. Invoices are retained for the period required by applicable accounting regulations.

5. Sub-processors

We use the following sub-processors:

Vercel Inc. (website hosting - United States), Stripe Inc. (online payments - United States, PCI-DSS certified), Official company registries (company identification by registration number).

6. International data transfers

Some of our sub-processors (Vercel, Stripe) are based in the United States. These transfers are governed by appropriate safeguards, including standard contractual clauses where applicable.

7. Your rights

Under applicable data protection laws, you have the following rights:

Right of access, rectification, and erasure of your personal data. Right to data portability. Right to object to and restrict processing. Right to withdraw your consent at any time.

To exercise your rights, contact us at: valorsme@proton.me

If you have a complaint, you may contact your local data protection authority.

8. Cookies and trackers

ValorSME does not use advertising cookies or third-party behavioural trackers. Our hosting provider Vercel may set an anonymous audience analytics cookie (Vercel Analytics) to measure website traffic. This cookie does not personally identify visitors.

localStorage is used solely to save your simulation parameters and results on your device. This data does not leave your browser.

9. Security

We implement technical and organisational measures to protect your data: HTTPS encryption (TLS 1.3), no server-side storage of simulation data, and certified sub-processors (PCI-DSS for Stripe).

10. Changes

We reserve the right to modify this privacy policy. In the event of a substantial change, a notification will be displayed on the website. The last updated date is shown at the top of this page.