Skip to content
Citizenship Agents

Privacy Policy

Last updated: September 2026

1. GDPR Compliance

Citizenship.Agents is committed to complying with the European Union's General Data Protection Regulation (GDPR) and applicable data protection regulations in the jurisdictions where we operate. We handle your personal data with the utmost care and transparency.

2. Data We Collect

We collect the following types of data:

  • Personal information: first name, last name, email, phone number
  • Uploaded documents: birth certificates, marriage certificates, death certificates, and other documents required for the process
  • Case information: family tree data, case status, correspondence with communes
  • Usage data: browsing analytics, language preferences, platform interactions

3. Purpose of Processing

We use your data for the following purposes:

  • Service delivery: managing your citizenship case and tracking progress
  • Document management: organizing, reviewing, and tracking your documents
  • Communication: sending notifications about your case status, service updates, and administrative communications
  • AI chat processing: analyzing your queries to provide relevant responses through our AI assistant

4. Third-Party Services

We use the following third-party services to operate the platform:

  • Resend: transactional email and notification delivery service
  • Stripe: secure payment processing. Citizenship.Agents does not store credit card data
  • Cloud storage (S3): secure document storage with encryption at rest
  • AI providers (LiteLLM): chat query processing. Messages are sent in anonymized form
  • PostHog (United States): usage analytics, heatmaps and session recording, only if you choose "Accept". Recordings hide everything you type into forms and the text of your Documents, your family tree and your Case. The data reaches PostHog through our own domain (ciudadaniaitalianaturnos.com); your browser never connects to PostHog directly

5. Data Retention

Your account data is retained as long as your account remains active. You may request deletion of your account and associated data at any time.

The documents you upload are kept for as long as your account exists, including after your case ends. If you ask to delete your account and confirm it, they are erased with the rest of your data on the deletion date.

6. Your Rights

As a user, you have the following rights regarding your personal data:

  • Right of access: request a copy of all your stored personal data
  • Right of rectification: correct inaccurate or incomplete personal data
  • Right of erasure: request the deletion of your personal data
  • Right of portability: receive your data in a structured, machine-readable format
  • Right of objection: object to the processing of your data for specific purposes

7. Cookie Usage

The platform uses the storage it needs to work and, only if you accept, analytics storage:

  • Session cookie (sid): httpOnly cookie used to securely maintain your active session. Deleted upon logout
  • Local storage (localStorage): keeps your language preference, questionnaire progress, your analytics choice and a random visit id for our own statistics. It holds no sensitive personal data
  • Analytics (only with your consent): if you choose "Accept", PostHog stores an identifier in a cookie and in localStorage to recognise your visit and record it. With "Necessary only", or if your browser sends "Do Not Track" or "Global Privacy Control", nothing is stored on your device and no session is recorded

8. Contact

To exercise any of your rights regarding your personal data or to make inquiries about our privacy policy, you can contact us at:

Email: [email protected]