Visa Scope AI
Legal

Privacy Policy

Last updated: 10 July 2026

1. Introduction

Product Scope Ltd ("we", "us", "our") operates VisaScopeAI, an AI-powered Spanish Digital Nomad Visa assessment service. This privacy policy explains how we collect, use, and protect your personal data when you use our service at visascopeai.com. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Data Controller: Product Scope Ltd (Company No. 14373211)
Registered Office: 7 Bell Yard, London WC2A 2JR, United Kingdom
Contact:

3. What Information We Collect

3.1 Information You Provide

  • Personal details: Full name, nationality, date of birth, current address.
  • Contact information: Email address, phone number (if provided).
  • Employment information: Job title, employer details, income information, employment history.
  • Family information: Dependants, marital status (if relevant to your application).
  • Legal background: Criminal record status, visa history, immigration status.
  • Financial information: Income details, savings information, tax residency.
  • Document information: References to documents required (we do not store the actual documents).

3.2 Payment Information

  • Payment processing is handled by Stripe.
  • We do not store your credit card details.
  • We receive confirmation of successful payments only.

3.3 Technical Information

  • Assessment data: Your responses to the assessment questionnaire (which may include references to documents, but not the documents themselves).
  • Usage data: Interaction data including timestamps and session details.
  • Device information: IP address, browser type, device type (collected by our service providers).

4. How We Use Your Information

4.1 Primary Purposes

  • Visa assessment: Evaluate your eligibility for the Spanish Digital Nomad Visa.
  • Document generation: Create your personalised assessment report and guidance.
  • Service delivery: Provide the assessment service you've purchased.
  • Communication: Deliver results and support responses.

4.2 Legal Basis

  • Contract performance: To deliver the service you've purchased.
  • Legitimate interest: Improving our service, preventing fraud, maintaining system security, and providing support.
  • Consent: For any optional communications you explicitly agree to.

5. How We Share Your Information

5.1 Service Providers

  • JotForm (US): Assessment questionnaire and form data — retained up to 2 years.
  • Airtable (US): Customer records and assessment data storage — retained up to 7 years.
  • Make.com (EU): Workflow automation — retained 30 days.
  • PDF Monkey (EU): Report/document generation — reports deleted shortly after delivery.
  • SendPulse: Email delivery of results and support — follows our deletion schedule.
  • Stripe (EU subsidiary, US parent): Payment processing — retained as required by financial regulations; US transfers protected by Standard Contractual Clauses.
  • Hostinger (EU): Website hosting — minimal data processed.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority.

5.3 We Never

  • Sell your personal data.
  • Use your data for marketing to others.
  • Share with immigration lawyers unless you explicitly request it.

6. International Data Transfers

  • US-based services (JotForm, Airtable): Transfers protected by Standard Contractual Clauses.
  • Stripe (EU/US): EU customers served by the Dublin entity, with US transfers under Standard Contractual Clauses.
  • EU-based services (Make.com, PDF Monkey, Hostinger): Protected under EU/UK GDPR.
  • All transfers comply with UK GDPR requirements.

7. Data Retention

7.1 Assessment Data

  • Customer records (Airtable): 7 years.
  • Assessment questionnaire responses (JotForm): up to 2 years.
  • Workflow data (Make.com): 30 days.

7.2 Documents & Communications

  • Generated PDF reports: temporarily stored for delivery and then deleted.
  • Support emails and cases: retained for 12 months, then permanently deleted.
  • Payment records (Stripe): retained as required by financial compliance.

7.3 Early Deletion

You may request early deletion of your data, subject to legal retention requirements.

8. Your Rights

You have the right to:

  • Access: See what data we hold.
  • Portability: Receive your data in a machine-readable format.
  • Rectification: Correct inaccurate information.
  • Erasure: Request deletion (subject to legal requirements).
  • Restriction: Limit use of your data.
  • Object: Object to processing based on legitimate interest.
  • Withdraw consent: For any consent-based processing.

To exercise your rights, contact . We will respond within one month. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

9.1 Technical Measures

  • Encrypted transmission (HTTPS/TLS).
  • Access restricted to authorised staff.
  • Enterprise-grade secure infrastructure.
  • Regular patching and updates.

9.2 Organisational Measures

  • Data Processing Agreements with providers.
  • Regular staff privacy/security training.
  • Incident response procedures.
  • Ongoing review of privacy practices.

10. Cookies and Tracking

Our website itself sets no advertising or tracking cookies. We use a privacy-friendly, cookieless analytics beacon that does not identify individual visitors, so no cookie consent banner is required. Essential functionality (such as secure payment via Stripe) may rely on cookies set by those providers when you use them.

11. Third-Party Services

All service providers are contractually required to:

  • Process data only under our instructions.
  • Apply appropriate security measures.
  • Notify us of breaches.
  • Support your data protection rights.

12. Changes to This Policy

We may update this policy. The "Last updated" date shows the current version. Significant changes will be highlighted via email or a website notice.

13. Age Restrictions

Our service is for adults (18+) who can legally enter into employment contracts. Age verification is indirectly enforced through Stripe's payment process. We do not knowingly collect data from minors.

14. Contact Us