Privacy policy
Last updated: 1 August 2026
This page is a courtesy summary for English-speaking visitors. The legally binding version of Mandato’s privacy policy is the Spanish one, drawn up under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
The Spanish policy explains which personal data Mandato processes as a data controller (website visitors, callback requests, account holders, billing and support contacts), the purposes and legal bases for each processing activity, the sub-processors we rely on (Supabase for the EU-hosted database, Railway for application hosting, Anthropic and Melious for the AI features, Resend, 360dialog, Stripe, Netlify, Plausible and Google), international transfer safeguards, retention periods, and how to exercise your GDPR rights or lodge a complaint with the Spanish supervisory authority (AEPD). On cookies: this website uses no advertising or profiling cookies. Basic audience measurement runs on Plausible, which is cookieless and always on; Google Analytics cookies are set only if you accept them in the banner, and never if you decline. Personal data your law firm processes inside the app is covered by our data processing agreement instead.