How Chapter Spain handles your information when you use our website, sign in, book a call or manage an application.
Who we are and how to contact us
Chapter Spain operates the website chapterspain.com and its account and application-management service. This policy explains how we handle information through the website and the Chapter Spain iPhone app.
For privacy questions, access or deletion requests, contact vladvibing@gmail.com. If you engage a lawyer through the service, your engagement identifies the legal provider responsible for your application. You can also send a request concerning your case file to that provider.
Information we collect
| When | Information |
|---|---|
| Browsing and security | IP address, browser and device information, request times, security events and essential session identifiers. Appearance preferences are stored when you choose them. |
| Route check | Nationality, current location, work and income information, savings, family size, qualifications and other answers you provide about the proposed application, including the criminal-record screening answer. |
| Accounts and enquiries | Email address, account identifier, authentication information, your name when provided, and questions or messages you send us. |
| Bookings and payments | Appointment time, contact details, booking and payment status, payment amounts and Stripe references. Stripe collects card details on its checkout; our application does not store full card numbers. |
| Your application | Documents and information you submit, which may include passports, addresses, financial and employment evidence, family certificates, insurance, criminal-record certificates, health certificates, signatures and case messages. We also keep review activity, application references and decisions entered into the case. |
| iPhone notifications | An Apple push-notification device token if you allow notifications, and delivery information needed to send account or case alerts. |
Google sign-in
Google sign-in is optional. If you choose it, Google shares your account identifier, email address and verification status, and basic profile information such as your name and profile picture with our authentication provider, Clerk. We use this information to create or recognise your account, verify sign-in, link your account to the correct case and protect access.
We request only the OpenID, email and basic profile permissions. This sign-in connection does not request access to your Gmail messages, Google Drive files, contacts or calendar. We do not sell Google account information, use it for advertising or use it to train AI models.
You can manage the connection in your Google Account connections. Removing the connection does not by itself delete an existing Chapter Spain case; contact vladvibing@gmail.com to request account or case-data deletion.
How and why we use information
| Purpose | Legal basis under the GDPR |
|---|---|
| Answering enquiries, showing a preliminary route result and arranging a call | Taking steps you request before entering a contract, Article 6(1)(b). |
| Providing accounts, agreed application support, case communication and payments | Performing a contract, Article 6(1)(b). |
| Preventing abuse, controlling access, investigating errors and maintaining security | Legitimate interests in running a secure and reliable service, Article 6(1)(f). |
| Accounting records, legal requests and other mandatory records | Compliance with applicable legal obligations, Article 6(1)(c). |
| Optional activities that require your consent | Your consent, Article 6(1)(a), which you may withdraw without affecting earlier lawful processing. |
Basic contact and account information is needed to provide the account or booking you request. Case information is needed for the application work you engage. You may decline to provide it, but we may be unable to provide the corresponding service.
Health information and criminal-record information require additional legal conditions beyond the general bases above. Do not send these records in a general website enquiry. Only provide documents requested for your case; any required consent or case-specific information must be addressed before sensitive records are processed. Providing information for a family member should be authorised by that person or their parent or guardian.
Where information is processed
Our application database and uploaded documents are hosted in Germany. Authentication, payment, email, security and optional document-processing providers may process information in other countries, including the United States. Choosing Google sign-in also involves Google's systems.
International transfers are subject to applicable data-protection requirements. Depending on the provider and destination, safeguards may include an adequacy decision or contractual safeguards such as the European Commission's Standard Contractual Clauses. Contact vladvibing@gmail.com for information about the safeguards applicable to your data.
How long information is kept
Account, enquiry and booking information is kept to provide the requested service, address follow-up questions, maintain security and meet applicable record-keeping or legal-claim requirements. Case and payment records may need to be retained after an account closes where professional, accounting or other legal duties apply.
The service currently has no scheduled automatic deletion of uploaded case files. You can request deletion or a review of continued retention by contacting us. We assess requests against any record-keeping obligations and explain where information must be kept.
Signing out ends the active session; it does not delete your account or case. Disconnecting Google also does not delete the case records you provided separately.
Preliminary results and human review
The route check is preliminary information based on your answers. It does not grant a visa or make the authorities' decision. Where automated document checks are enabled, their findings assist the case reviewer; they do not replace the reviewer's decision or the immigration authority's assessment.
Your privacy rights
Depending on applicable law, you may request access, correction, deletion, restriction of processing or a portable copy of your data. You may object to processing based on legitimate interests and withdraw consent for processing that relies on it. Some requests are subject to legal exceptions.
Send requests to vladvibing@gmail.com. We may need to verify your identity. We aim to respond within one month as required by the GDPR; if a permitted extension is necessary, we will explain it. You can complain to the Spanish data protection authority (AEPD) or the relevant authority where you live or work.
For information obtained from Google, deleting the Google connection and deleting the Chapter Spain account are separate actions. Tell us if you want both the authentication account and the information held in our application reviewed for deletion.
Updates to this policy
We update this notice when the service or our use of personal information changes and show the update date above. We will provide additional notice where a material change requires it.