Legal Notice
This is an informative English translation of the Spanish original. If there is any discrepancy, the Spanish version prevails.
TRIBUTAI SOLUTIONS, S.L.
CIF B88695895
Punto PAE
Ministry of Industry
Data in the EU
European infrastructure
Transparent AI
AI Act compliant
Table of contents
1Identifying Details of the Owner
In compliance with article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), users are informed of the following details of the website owner:
TRIBUTAI SOLUTIONS, SOCIEDAD LIMITADA
Tax ID (CIF): B88695895
Registered office: CL. General Vives, 56, 2 Pta. D, Oficina 201, 35007 Las Palmas de Gran Canaria
Support and enquiries: soporte@tributai.es
Data Protection Officer (DPO), for data protection and GDPR rights only (Art. 15-22): dpo@tributai.es
Legal and contractual matters: legal@tributai.es
Website: https://www.tributai.es
Commercial register: Las Palmas Commercial Register
Note: Until the limited company is formally incorporated, the activity is carried out by its founders as individuals registered under the self-employed scheme (RETA).
2Activity and Services
tributAI is a technology platform for tax assistance that uses artificial intelligence to help self-employed people and small businesses manage their tax obligations.
The services provided include:
- AI-assisted tax queries: Answers generated by artificial intelligence (Claude by Anthropic) for guidance only.
- Processing of registrations: Handling of Form 036 and RETA registration through the CIRCE system, supervised by a certified PAE technician.
- Periodic tax returns: Preparation of periodic tax returns, which the user reviews and files at the AEAT e-office with their own digital certificate.
- Electronic invoicing: Issuing and managing invoices in line with Spanish regulations.
Important: tributAI is NOT an administrative agency, nor a registered tax advisory firm, nor does it provide legal representation before the AEAT. Official procedures (CIRCE) are carried out under the supervision of an Entrepreneur Service Point (PAE) certified by the Ministry of Industry, Trade and Tourism.
3Use of Artificial Intelligence
In accordance with Regulation (EU) 2024/1689 (AI Act), the user is informed that:
- tributAI uses an artificial intelligence system based on the Claude model (Anthropic) to generate answers to tax queries.
- tributAI is classified as a limited-risk AI system under Annex III of the AI Act. Tax advice is not a high-risk category.
- AI-generated answers are for guidance and information only and do NOT constitute binding professional tax advice.
- All official procedures before the authorities (AEAT, TGSS, CIRCE) are reviewed and supervised by qualified staff before they are submitted.
- The user may at any time request human intervention to review any AI recommendation.
4Conditions of Use
Access to the website is free of charge, except for the cost of the Internet connection. Use of the Platform’s services is subject to the Terms and Conditions.
The user undertakes to use the website and the services in accordance with the law, morality, public order and these terms. Misuse of the website may lead to access being withdrawn or suspended.
5Intellectual and Industrial Property
All the contents of the website (texts, images, logos, trademarks, graphics, design, source code, software and AI algorithms) are the property of tributAI or its licensors and are protected by Spanish and international intellectual and industrial property law.
The "tributAI" brand and the associated logo are trademarks pending registration. Reproducing, distributing or using them without express authorisation is prohibited.
Users who enter data or documents into the Platform keep all rights over them, granting tributAI a licence limited exclusively to providing the contracted services.
6Personal Data Protection
The processing of personal data is governed by our Privacy Policy, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
The use of cookies on the website is detailed in our Cookie Policy, in accordance with article 22 of the LSSI-CE.
To exercise your GDPR rights (access, rectification, erasure, restriction, portability, objection and not to be subject to automated decisions — Art. 22), write to the DPO at dpo@tributai.es or use the rights request form.
Data Processors and Providers (Art. 28 GDPR)
To provide the service we share data with the following processors, all under a data processing agreement in accordance with Art. 28 GDPR:
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Google Cloud Platform (GCP) | Hosting (Cloud Run), storage (Cloud Storage), key management (Cloud KMS HSM), secrets management (Secret Manager) | EU (europe-west1, Belgium) | SCC + EU-US DPF |
| MongoDB Atlas | Document database | EU (Frankfurt) | SCC |
| Redis (Upstash) | Distributed cache, temporary sessions, rate limiting and ephemeral storage | UE | SCC |
| Stripe Payments Europe Ltd. | Payment and subscription processing | Ireland + USA | SCC + EU-US DPF |
| Google Cloud (Vertex AI) with Anthropic’s Claude model | Conversational AI model for the tax assistant | EU (eu multi-region and, as a fallback, europe-west1, Belgium) | No training on your data |
| Google Vertex AI + Vision API + Document AI | Document OCR, data extraction and document processing | EU / USA | SCC + EU-US DPF |
| SendGrid / Twilio | Sending of transactional emails and notifications | USA | SCC + EU-US DPF |
| Cloudflare | CDN, denial-of-service mitigation and Turnstile anti-bot | Global (EU preferred) | SCC + EU-US DPF |
| FingerprintJS | Anti-fraud detection and device fingerprinting (self-hosted) | UE | SCC |
| MaxMind GeoLite2 | IP geolocation for security geo-fencing and suspicious logins | USA | SCC + EU-US DPF |
| Google OAuth2 | Authentication and social login | USA | SCC + EU-US DPF |
| Microsoft Azure AD | Authentication and login with a Microsoft account | EU / USA | SCC + EU-US DPF |
| Google Analytics GA4 + Google Tag Manager | Aggregated web analytics (only if you consent to analytics cookies) | USA | SCC + EU-US DPF · Pending activation in production |
The full list of processors, their privacy policies and our Standard Contractual Clauses are provided in response to an access request (Art. 15 GDPR) at dpo@tributai.es.
Geolocation attribution: this service includes GeoLite2 data created by MaxMind, available at https://www.maxmind.com.
7Anti-Money Laundering
In accordance with Law 10/2010, of 28 April, on the Prevention of Money Laundering and Terrorist Financing (Art. 2.1.m — tax advisers as obliged entities), tributAI implements measures to identify and verify its users (KYC).
This includes:
- Identity verification by means of an official document (DNI/NIE) during the registration process.
- Retention of the identification documents for a minimum of 10 years after the business relationship ends.
- Duty to cooperate with SEPBLAC in the event of suspicious transactions.
8Limitation of Liability
tributAI does not guarantee uninterrupted availability of the website or the absence of errors. In particular:
- AI-generated answers are for guidance only and may contain inaccuracies. The user must verify the information before acting on it.
- tributAI will not be liable for decisions taken by the tax authorities.
- tributAI will not be liable for damage arising from incorrect information provided by the user.
- tributAI’s liability is limited to the amount paid by the user in the 12 months before the event.
9Third-Party Links
The website may contain links to third-party sites (AEAT, Social Security, CIRCE, etc.). tributAI accepts no responsibility for the content, privacy policies or practices of those websites.
10Applicable Law and Jurisdiction
This Legal Notice is governed by Spanish law, in particular:
- Law 34/2002, of 11 July, on Information Society Services (LSSI-CE)
- Regulation (EU) 2016/679 General Data Protection Regulation (GDPR)
- Organic Law 3/2018 on Personal Data Protection (LOPDGDD)
- Royal Legislative Decree 1/2007 — General Law for the Defence of Consumers and Users (LGDCU)
- Regulation (EU) 2024/1689 laying down harmonised rules on AI (AI Act)
- Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing
To resolve any dispute, the parties submit to the jurisdiction of the Courts and Tribunals of Las Palmas de Gran Canaria, unless the applicable consumer regulations impose the consumer’s home court.
EU online dispute resolution platform: https://ec.europa.eu/consumers/odr