Privacy Policy

This policy explains what personal data Spain Amigo collects, why, and what choices you have about it. It applies to everyone who uses the Service, whether on the free plan or a paid tier.

• Account data — your email address, and a name if you choose to provide one.
• Uploaded documents — the photos or PDFs of letters you upload, the text extracted from them, and the AI-generated analysis of each one.
• Usage data — how many letters you’ve analysed this month, and basic activity needed to run the free/paid tier limits.
• Payment data — handled entirely by Gumroad. We receive confirmation of your purchase and a licence key, not your card details.

Solely to provide the Service back to you: reading your letters, generating their analysis, tracking deadlines you’ve been shown, remembering your letter history so you can look things up later, and managing your account and subscription tier.

Your letters, their extracted text, and their analysis are never used to train any AI model. They’re sent to our AI providers solely to generate your analysis in the moment, the same way a request to any API works, and aren’t retained by those providers for training purposes under our agreements with them.

We use a small number of third-party services to run Spain Amigo, each processing only what they need to do their job:

• Mistral AI — reads the text out of your uploaded document (OCR)
• Anthropic — generates the plain-English analysis and, where relevant, a draft reply
• Vercel — hosts the application and stores uploaded files
• Neon — hosts the database (your account and letter records)
• Resend — sends your sign-in and account emails
• Gumroad — processes payments and issues licence keys

We don’t sell your data, and we don’t share it with advertisers — Spain Amigo doesn’t run ads.

Your letters and account data are kept for as long as your account is active, so your history stays searchable. If you delete your account, we delete your documents and personal data within a reasonable period, except where we’re required to keep certain records (e.g. payment records) for legal or accounting reasons.

Data is encrypted in transit (HTTPS) and at rest. Access to your account is via a one-time emailed link rather than a password, which removes an entire category of password-related risk. Access to the underlying systems is limited to what’s needed to operate the Service.

If you’re in the EU/EEA or UK, you have rights under GDPR (and equivalent rights elsewhere) to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email us — we’ll respond within a reasonable time and without charge in normal circumstances.

Some of our service providers are based outside the EU/EEA (for example, in the United States). Where that’s the case, we rely on the safeguards those providers offer for international transfers, such as standard contractual clauses.

We use only the minimal cookies needed to keep you signed in and remember your session — no advertising or cross-site tracking cookies.

Spain Amigo isn’t intended for anyone under 18. We don’t knowingly collect data from children.

We may update this policy from time to time. Significant changes will be communicated by email where reasonably possible.

Questions, or want to exercise a data right? Email wearegamechangers@outlook.com.