Privacy policy
Notice: this text has not had a formal legal review. A review is recommended before charging for the service.
Last updated: 2026-10-04.
This policy explains how consultaruc (karvesol) handles your personal data, under Peru’s Law No. 29733, the Personal Data Protection Law, and its regulations.
What data we collect
- Account data: email address and password. The password is stored only as a hash (an irreversible fingerprint), never in clear text.
- Session and security: when you log in we store a session identifier (only its hash), your IP address and your browser. At sign-up we also use a Cloudflare captcha (Turnstile) and a per-IP attempt limit to prevent abuse.
- API keys: we store only the hash of each key, never the key in clear text.
- Usage: for each authenticated call we record the key used, the RUC looked up, the response code, the date and the credits consumed. It is used to measure your quota and show you your usage.
We do not collect data for advertising and this site uses no analytics.
What we use it for
To create and manage your account, authenticate you, measure your usage and limits, send you service emails (verification, password reset, invitations), protect the service against abuse and meet legal obligations. We process your data with your consent at sign-up and because it is necessary to provide the service.
Who we share it with
We do not sell your data. We use providers that process it on our behalf: Railway (hosting and database), Cloudflare (network, site hosting and captcha) and Resend (email delivery). These providers may be outside Peru.
SUNAT data
The taxpayer data the API returns comes from the reduced registry SUNAT publishes. It is not data you give us and we do not modify it.
How long we keep it
We keep your account data while the account exists. You can ask us to delete it by writing to the contact email.
Your rights
You can exercise your rights of access, rectification, cancellation and objection, and ask for information about how your data is processed. Write to consultaruc-legal@karvesol.com from your account email, saying which right you want to exercise. If you believe we did not handle your request, you can turn to Peru’s National Authority for Personal Data Protection.
Security
We apply reasonable measures: passwords and keys stored as hashes, encrypted communications (HTTPS) and access limits. No system is infallible; if we detect an incident that affects you, we will tell you.
Changes
We may update this policy; the date at the top shows the latest version.