What data we use, and why

• Account, contact details, language and authentication.
• Form answers and their change history.
• Documents and photographs you choose to upload.
• Consents, the accepted agreement, IP address and user agent.
• Payments and transaction status; Stripe processes card data.
• Support messages, technical logs, security records and errors.

We use it to authenticate you, save your answers, transfer data onto the PDF, generate and deliver the file, process payments, provide support, prevent fraud, investigate errors, maintain security and meet legal obligations. We do not use your answers to give legal advice or to decide eligibility.

Document processing via OCR or an external model runs only after your specific OCR consent. When it is used, the necessary content may be sent to Anthropic to extract text that you can review and correct. We do not sell your documents, and we do not use this process to issue a legal opinion or an immigration recommendation.

We may share only what is necessary with categories and providers such as Supabase (database, files and authentication), Vercel (hosting), Stripe (payments), Anthropic (consented OCR), Sentry (errors), Resend (email) and Cloudflare Turnstile (abuse prevention). EasyPost may retain historical shipment data from the retired mailing service; it receives no new self-service orders. We also share information where the law requires it or to protect rights and safety.

Application-layer AES-256-GCM encryption covers the sensitive identifiers the system recognises — for example SSN, A-number, passport, receipt number and date of birth — and also the names, phone numbers, email addresses and postal addresses you enter in the form. Other data — country, yes/no answers, and other answers that neither identify a person nor locate a home — is protected by platform encryption and access controls, but not by that additional per-field encryption. Documents you upload are held in access-restricted storage; they are not encrypted field by field. We log certain privileged and security actions; we do not claim that every read of every field is logged.

No system is completely secure. If an incident occurs, we will investigate and notify in accordance with applicable law and our incident process.

We retain data while the account and service are active, and afterwards where reasonably necessary for support, security, fraud prevention, disputes and legal obligations. We do not apply a blanket seven-year promise to all data. A deletion request is reviewed and carried out subject to records we must keep, immutable consents or agreements, payments, security logs, and backups that rotate on their normal cycle.

Your downloadable packet is the one fixed-term exception: the PDF we generate, and the copy of your answers that fills it, are kept for 90 days from generation and then deleted. We email you first. Download and keep your own copy; you can regenerate the packet at no cost while your account is active.

You can request access, export, correction or deletion from settings or by writing to privacidad@tupasolibre.com. We may verify your identity and explain any applicable exception. We do not sell personal information and we do not share data for cross-context behavioural advertising.

We use storage and cookies necessary for authentication, security, language, operation and payments; our providers may use similar technologies for those functions. The service is intended for adults and should not be used by anyone under 18 without a parent or guardian involved.

We will publish material changes with a new date and give the notice applicable law requires. For questions or complaints, write to privacidad@tupasolibre.com.