Arraigo logoArraigo

Privacy Policy

Last Updated: March 25, 2026

1. Data Controller

Arraigo is the data controller responsible for your personal information. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and Spanish Ley Orgánica de Protección de Datos (LOPD-GDD).

2. What We Collect

When you use our form autofill service, we may process the following personal data:

  • Full name (first name, surnames)
  • Passport or national ID number
  • NIE number (if applicable)
  • Date and place of birth
  • Nationality
  • Current address in Spain
  • Contact details (phone number, email)
  • Family member details (spouse, children) if filling family-related forms

We collect only the data strictly necessary to generate the government PDF document you have requested.

3. How We Use Your Data

Your personal data is used exclusively for one purpose: generating the official Spanish government PDF form you have requested. We do not use your data for marketing, profiling, analytics, or any other purpose.

4. Data Retention

Guest Mode (No Account): Your data is processed in memory only. The moment your PDF is generated and downloaded, all personal data is immediately and permanently deleted from our servers. We retain zero personal information from guest sessions.

Account Mode: If you create an account, your data is stored securely using AES-256 encryption. This allows you to quickly autofill future forms without re-entering your details. Your data is retained until you delete your account, at which point all personal information is permanently erased within 48 hours.

5. Third Parties

We do not sell, rent, or share your personal data with any third parties. Our site contains affiliate links to vetted partner services (such as expat health insurance or tax advisors). Clicking these links takes you to external sites subject to their own privacy policies. We may receive a commission at no extra cost to you.

We use PostHog for anonymous analytics (page views, feature usage). No personally identifiable information is sent to analytics services.

6. Your Rights (GDPR)

Under the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, contact us at privacy@arraigo.com.

7. Contact Us

For privacy-related inquiries: privacy@arraigo.com