Privacy policy
Alveo mobile app · last updated: August 2026
This policy describes the processing of personal data within the Alveo mobile app. The web client areas of each of the group's services have their own policy, specific to their activity.
Data controller
Compro en España Servicios Inmobiliarios S.L. — CIF B98989932, Calle Purissima 5 – 33, 46001 Valencia, Spain.
Contact for any question or request to exercise your rights: rgpd@alveo.co.
Data processed
| Data | Why | Legal basis |
|---|---|---|
| Email address | To identify you and send you the single-use sign-in code | Performance of the contract |
| Your file data | To show you the progress of your file, the documents expected from you and your exchanges — as they already exist at the service concerned | Performance of the contract |
| Technical logs | Service security and abuse prevention. Email addresses are masked in them. | Legitimate interest |
What the app does not do
- No advertising, no advertising trackers, no profiling.
- No sale or sharing of your data for commercial purposes.
- No access to your contacts, your location or your photos.
- No automated decision-making producing legal effects concerning you.
Recipients
Your data does not leave the Alveo group, apart from the technical processors strictly necessary for the operation of the service:
- Vercel Inc. — hosting of the app and its services.
- Brevo (Sendinblue SAS) — sending the sign-in code by email.
- The Alveo group services of which you are already a client, queried solely to build your personal space.
Retention periods
- Sign-in codes: a few minutes, they are never stored.
- Sign-in session: 30 days, renewed at each sign-in.
- File data: retained by the service concerned according to its own policy, and according to the applicable legal obligations (in particular anti-money laundering).
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. Write to rgpd@alveo.co — a reply reaches you within one month.
Deleting your account: the app offers “Delete my account” in its Settings. The request is passed on to our teams and handled within 30 days; you may cancel it during that period by writing to the address above. Some data may be retained beyond that period where the law requires it. The full procedure — from the app or in writing — is set out on the Delete your account and your data page.
You may also lodge a complaint with the Spanish supervisory authority, the AEPD (aepd.es).
Security
Signing in uses a single-use code sent by email: no password is stored by the app. Traffic is encrypted in transit, internal services authenticate to each other with a shared secret, and email addresses are masked in the technical logs.