Privacy Policy
Last updated: June 27, 2026
This Privacy Policy describes how VisaMesa, operated by Sargoon Global S.L. ("we", "our", or "us"), collects, uses, and protects your personal information when you use our mobile application and website services.
1. Information We Collect
1.1 Personal Information You Provide
When you use VisaMesa, you may provide us with:
- Identity information (name, document number, nationality)
- Contact information (email address, phone number)
- Registered address information (address, city, postal code)
- Payment information (processed by Stripe)
1.2 Automatically Collected Information
We automatically collect:
- Device information (operating system, app version)
- Usage data (features accessed, errors encountered)
- Authentication data (Google account email for sign-in)
2. How We Use Your Information
We use your information to:
- Process your TIE residency card application
- Book appointments with Spanish government offices
- Pre-fill official forms with your information
- Process payments for our services
- Communicate with you about your application status
- Improve our services and user experience
3. Data Security & Encryption
Client-Side Encryption: Your personal information is encrypted on your device before being transmitted to our servers. We use AES-256-GCM encryption with device-bound keys stored in your device's secure enclave (iOS Keychain / Android Keystore). This means we cannot access your personal information without your device.
Data in Transit: All data transmitted between your device and our servers is protected using TLS/SSL encryption.
4. Data Sharing & Third Parties
4.1 Payment Processing
We use Stripe to process payments. Stripe receives your payment information directly and is governed by Stripe's Privacy Policy.
4.2 Spanish Government Offices
When you use our booking assistance services, you choose when to enter and submit your information on official Spanish government booking sites (e.g., for empadronamiento or cita previa) as part of your TIE application.
4.3 No Data Selling
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Your Rights (GDPR & Spanish Law)
Under EU GDPR and Spanish data protection law, you have the right to:
- Access: Request a copy of your data ("Export My Data" in the app)
- Rectification: Correct inaccurate data through your profile
- Erasure: Delete your account and all data ("Delete My Account" in the app)
- Data Portability: Receive your data in a structured format
- Withdraw Consent: Revoke consent at any time
6. Data Retention
We retain your data only as long as necessary to provide our services or as required by law. When you delete your account, all your data is permanently deleted from our servers.
7. Children's Privacy
Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email.
9. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@visamesa.com