Casita.tax
DRAFT — pending legal review

Privacy policy

What we collect, why we collect it, and your rights under GDPR.

This document was last reviewed by our legal team on 22 June 2026. If you have questions, contact hello@casita.tax.

1. Who we are

Casita.tax is software provided by a UK-registered business. We are the data controller for personal data submitted through the service.

2. What we collect

  • Account data: email, name, hashed password (via our auth provider).
  • Property and owner data you enter: NIE, address, cadastral reference, ownership share, dates.
  • Tax inputs: cadastral values, days owned, prior-year filings.
  • Payment metadata via Stripe (we never see card numbers).
  • Generated .210 files and PDF guides, stored for delivery and your records.

3. Why we collect it

To prepare your Modelo 210, deliver the file to you by email, comply with our legal obligations, and improve the service.

4. Legal basis

Contract (delivering the service you paid for), legitimate interests (security, fraud prevention), and consent (analytics, marketing).

5. Sharing

We use the following processors: Supabase (hosting, database, auth), Stripe (payments), Resend (email delivery). We do not sell your data.

6. Retention

Account and filing data is kept while your account is active and for up to 7 years after, to match Spanish tax recordkeeping norms. You can request earlier deletion at any time.

7. Your rights

Access, rectification, erasure, restriction, portability, and objection. Email hello@casita.tax to exercise any of these.

8. Cookies

We use a session cookie for sign-in and, with your consent, a small set of analytics cookies. See our cookie banner for choices.

9. Contact

hello@casita.tax