Courtesy summary — the Spanish version below is the original and the one that governs.
TrazoFirma collects: your email, the full name and ID number you declare (not verified against any official source), the image of your handwritten signature, the documents you sign and their metadata (title, timestamp, cryptographic hash), your IP address and a brief device/browser summary at signing time, one-time login/reauthentication codes, your terms acceptance, and your language preference. This is used to run your account, generate and stamp your signed documents, and let anyone check a signed document's integrity from the verification code — the full ID number is masked on that public page. Data is processed by our hosting provider (Render, United States) and our email provider (Resend); Google Play Billing processes payments if you buy signatures or subscribe to a monthly plan. You can request access, correction or deletion of your account at any time from the app or at /legal/eliminar-cuenta — see the Spanish text for the exceptions (already-completed signed documents, and their access/IP records, are kept, since third parties already hold copies and altering them would break their cryptographic integrity).