Privacy Notice

1. Who is responsible for your data

The operator named above is responsible for personal data used on this website and in your Nomad Visa Service account and review case. This notice also applies to information about family members or other people that appears in material you provide.

2. What we collect

We collect only what we need to run the service, keep it secure, and meet legal obligations.

• Account details: your name, email address, optional phone number, nationality, country of residence, language, and login or verification records.
• Your case: questionnaire answers, case status, review notes, messages, and information about income or family size that you choose to provide.
• Files you upload and basic file details such as name, type, size, and upload time.
• Order details: chosen plan, amount, currency, payment status, Stripe references, tax, and refund records. Stripe receives card and billing details directly.
• Security and support records.
• Optional analytics data, only when you agree to it.

3. Why we use it

We use your data to provide the service, protect it, and comply with the law.

• To create and protect your account, run the preliminary check, deliver the document review, process payments, and answer support requests.
• To meet tax, accounting, consumer-protection, and other legal duties.
• To prevent fraud and misuse, fix problems, and keep an audit trail.
• For optional analytics only with your consent. You can withdraw that consent at any time.

4. Automated checks

The preliminary check uses fixed rules to highlight possible issues in the answers you give. Document review may also use automated or AI-assisted tools. These tools do not make an immigration decision or provide legal advice. You can correct your answers and ask support to look into an apparent error.

5. Who can receive your data

Only authorized reviewers and administrators can access your case, and only when they need it. Hosting and secure storage providers keep the website and uploaded files running. Stripe processes payments and receives payment and billing data directly.

Resend sends service emails. It receives the email address and message content needed to deliver those emails, but it does not receive your uploaded documents. If you choose Google sign-in, Google receives the data needed for that sign-in. Contracted support may access limited records only when needed to resolve an issue.

Some providers may process data outside your country. Where required, we use an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. You can ask us for current provider and safeguard information.

6. How long we keep data

When you delete uploaded files in the app, we remove access immediately and queue physical deletion. A link issued before deletion can work until it expires, for no more than 10 minutes. Other account and case records are not deleted by that button.

We keep account and case records while needed for the service and then for required tax, accounting, security, dispute, or legal-retention periods. Optional analytics events are deleted after 13 months. Backups expire through the provider's normal protected rotation.

7. Please do not upload

Do not upload criminal-record certificates, medical diagnoses, biometric data, full card details, passwords, or unrelated bank information. If you provide someone else's data, make sure you are allowed to do so and give them this notice where required.

8. Cookies and analytics

We use limited browser storage to remember your language, keep sign-in working, save a short-lived preliminary check, and remember your analytics choice. Optional analytics starts only after consent. You can change that choice in the footer. More technical detail is available in the analytics settings.

9. Security

We use access controls, private storage, short-lived file links, role-based administration, audit logs, and encrypted connections in production. No system is completely risk-free. Uploaded documents are not used to train AI models and are not sent as email attachments.

10. Your rights

Depending on the law that applies to you, you can ask for access, correction, deletion, restriction, portability, or object to processing. You can also withdraw consent. We may need to verify your identity and may keep some data where the law allows or requires it.

You can complain to the Spanish Data Protection Agency (AEPD) or the data-protection authority where you live or work.

11. Changes and contact

If we make a material change to this notice, we will publish a new version date and give extra notice where required. Contact the operator above with privacy questions or requests.