Privacy Policy

1. Who We Are

Savia ("we", "us", "our") provides property intelligence services for foreign buyers in Spain, accessible at saviacasa.com. For privacy matters, contact us at hello@saviacasa.com.

2. Data We Collect

We collect only the data strictly necessary to provide the Service:

• Account data: email address, password (hashed), preferred language, budget range and regions of interest (collected during onboarding).
• Property data: details you enter when generating a report (price, location, type). This data is used solely to generate your report.
• Usage data: anonymised analytics via PostHog (EU servers), including pages visited and features used. No personal identifiers are shared.
• Payment data: handled entirely by Stripe. We do not store card numbers or payment details on our servers.
• Calculator leads: email address and property search parameters you submit on the tax calculator page.

3. How We Use Your Data

• To create and manage your account
• To generate and store your property reports
• To send you the tax estimate you requested (calculator email)
• To process subscription payments via Stripe
• To improve the Service through anonymised analytics

4. Legal Basis (GDPR)

We process your personal data based on:

• Contract performance — to deliver the Service you signed up for
• Legitimate interest — anonymised analytics to improve the product
• Consent — for marketing communications (you may opt out at any time)

5. Data Sharing

We share data only with the following sub-processors, all operating under GDPR-compliant data processing agreements:

• Supabase (EU region) — database and authentication
• Stripe — payment processing
• Resend — transactional email delivery
• PostHog (EU servers, eu.posthog.com) — anonymised analytics
• Vercel — application hosting

We do not sell your personal data to third parties.

6. Data Retention

We retain your account data for as long as your account is active. Reports are stored for 12 months unless you delete them earlier. You may request deletion of all your data at any time by emailing hello@saviacasa.com.

7. Your Rights (GDPR)

As a data subject you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate personal data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, email hello@saviacasa.com. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication (Supabase session) and anonymised analytics (PostHog, cookieless mode where possible). We do not use advertising or tracking cookies.

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance.

11. Contact & Complaints

For privacy questions: hello@saviacasa.com.
You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es.