Last updated: 27 de octubre de 2026
Privacy for individuals
This is an English translation, for your information, of the parts of Aproba's Política de privacidad that apply to individuals, under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). If the two texts differ, the Spanish version prevails.
Who is responsible
- Controller: ExpatfrancesCKNA07 S.L. (Aproba), NIF B22993539, Avenida Mediterráneo, 14 — 08380 Malgrat de Mar (Barcelona), España.
- Privacy contact: aproba.software@gmail.com
What we do with your details
- People looking for a law firm (Aproba as controller): if you are an individual and ask us to put you in touch with an immigration law firm («A professional»), we process your name, your phone, your email if you give it, your province and the procedure you need, with your consent, only for that: passing your request to a law firm in your area and replying to you. They are not used for anything else and they are not sold.
- People who use our paid tools (Aproba as controller): if you use «Fill in your EX online», «Your tasa, without mistakes» or «How's my application going?», the details you type or that we read from the photo of your passport or your TIE are used only to prepare your document at that moment. Aproba does not keep them: they stay in your browser tab until you close it (with the payment only an encrypted fingerprint remains of your date of birth —or of your procedure and its date in the report— and, in the fee and the letter, of your NIE or passport, so that it covers one person only). For your fee, your details go to the official generator of the Policía Nacional or of the Sede de Administraciones Públicas, which is the one that issues it. The photo is read by Anthropic's AI, our provider, and Aproba does not keep it. The payment and the invoice (your name and your email) are handled by Stripe, which also acts as processor here. To improve these tools we count, anonymously and in aggregate, the steps taken in them (for example «opened the tool» or «clicked pay») with Vercel Web Analytics: no cookies, nothing stored in your browser and none of your details; Vercel computes a temporary fingerprint of the visit that it forgets within 24 hours (legitimate interest, GDPR art. 6.1.f).
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Request from an individual looking for a law firm: name, phone, email (optional), province, procedure and, if written, a message. | Putting them in touch with an immigration law firm in their area and replying to them. | Consent (art. 6.1.a), which can be withdrawn at any time. |
| Data of whoever uses a paid tool: those of their form, their fee or their letter (identity, address, contact), the dates of their application and, if uploaded, the photo of their passport or TIE; the payment data, at Stripe. | Preparing the document requested (form, fee in their name with the official generator, report or letter) and charging for it; issuing the invoice. | Performance of the contract (art. 6.1.b) and legal obligation (art. 6.1.c). |
How long we keep them
- Requests from individuals looking for a law firm: 12 months from the request, or until you withdraw your consent; then they are deleted.
- Documents an individual prepares (form, fee, report, letter): Aproba does not keep them (neither the details nor the photo; Anthropic applies its own retention periods). Stripe keeps the payment and the invoice for the tax periods.
Who receives them
No data is passed to third parties except by legal obligation or, for an individual who asks us to, to the immigration law firm we pass the request to, which handles it as controller to assist them. The providers that act as processors (with a contract under GDPR art. 28), where they are and the safeguards for transfers outside the European Economic Area are listed in sections 5 and 6 of the Spanish policy.
Your rights
You can exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw the consent you gave, by writing to aproba.software@gmail.com, saying which right you want to exercise and attaching a document that proves your identity.
If you think the processing does not comply with the rules, you can file a complaint with the Agencia Española de Protección de Datos (AEPD) (C/ Jorge Juan, 6, 28001 Madrid).