Privacy policy
Last updated: 23 July 2026
This page is a courtesy summary for English-speaking visitors. The legally binding version of Mandato’s privacy policy is the Spanish one, drawn up under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
The Spanish policy explains which personal data Mandato processes as a data controller (website visitors, callback requests, account holders, billing and support contacts), the purposes and legal bases for each processing activity, the sub-processors we rely on (including Supabase for EU-hosted infrastructure, Stripe, Resend, Anthropic, 360dialog, Netlify and Plausible), international transfer safeguards, retention periods, and how to exercise your GDPR rights or lodge a complaint with the Spanish supervisory authority (AEPD). It also confirms that this website uses no tracking cookies — analytics are aggregate and cookieless. Personal data your law firm processes inside the app is covered by our data processing agreement instead.