Mi Parcelita

Privacy policy

Mi Parcelita can be used without an account and with almost no personal data. This page explains what we process when you create an account, subscribe to Pro or use the AI, and how to exercise your rights (GDPR and Spanish LOPDGDD). The Spanish version prevails.

Last updated: 20 October 2026

Data controller

We have not appointed a data protection officer, as it is not required for our activity; for any privacy matter, write to that address.

Without an account: your plan stays in your browser

You don't need to sign up to use the editor. The plan you work on is saved automatically only in your browser (local storage), along with your language choice; it never reaches us. When you look up a plot or the maps load, your browser requests the data directly from the public servers of the Spanish Cadastre, the National Geographic Institute and OpenStreetMap, which receive your IP address as with any website visit.

What data we process, why, and on what legal basis

1. Your account

Data: your email address, an internal ID and technical sign-in data (date, IP address and browser). Why: to send you the sign-in link, keep you signed in, and link AI usage and your subscription to your account. Legal basis: performance of the contract you accept when creating the account (Art. 6(1)(b) GDPR).

2. The AI assistant

Data: how many layouts you have used (the free ones, and this month's on Pro). To generate each layout we send the AI provider the plot geometry, the elements of your plan, any limits you set and the text you write; we do not store that content and we do not send your email. Please don't include personal data in your requests. Why: to provide the service and apply the usage limits. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3. The Mi Parcelita Pro subscription

Data: Stripe customer and subscription IDs, the plan, its status and its renewal or cancellation dates, and the billing details Stripe asks for (name, country and address, VAT number for businesses). Card details are collected and processed directly by Stripe; we never see them. Why: to charge the subscription, issue invoices, handle cancellations, withdrawals and refunds, and meet tax and accounting obligations. Legal basis: performance of the contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c) GDPR).

4. Cookie-less usage statistics

We count anonymously which features are used (for example "plot opened" or "3D view") with Umami, without cookies or storage on your device and without building profiles. These statistics do not record your email or IP address, and nothing is counted if your browser sends "Do Not Track" or "Global Privacy Control". Why: to know what to improve. Legal basis: our legitimate interest in improving the app (Art. 6(1)(f) GDPR), with the least possible impact; you can object by turning on those browser settings.

5. Security and running the website

Our hosting provider temporarily logs technical request data (IP, page, date, browser) to serve the website and protect it from abuse. Fonts are loaded from Google Fonts, which receives your IP address. Legal basis: legitimate interest in running the website securely (Art. 6(1)(f) GDPR).

6. Plans shared by link

If you share a plan by link, we keep a copy of the plan (parcel, elements, entrances, setback and limits; not your project brief), a title and summary, and an image of the view at that moment for the link preview, linked to your account, and count how often it is opened. The image is public to anyone with its address, like the link. Anyone with the link can see it, including where the parcel is; we don't publish it or let search engines index it. Why: so others can see your plan. Legal basis: performance of the contract, at your request (Art. 6(1)(b) GDPR).

7. When you write to us

If you write to us, we use your email address and what you tell us to reply. Legal basis: your request and our legitimate interest in handling it (Art. 6(1)(b) and (f) GDPR).

We do not use your data for advertising, we do not sell it, and we do not make automated decisions with legal effects on you.

How long we keep it

Providers and recipients

We do not share your data with third parties unless required by law. To provide the service we use these providers, which process data on our behalf (processors) under contracts that meet Art. 28 GDPR:

The public map and data services (the Spanish Directorate General for the Cadastre, the National Geographic Institute and the OpenStreetMap Foundation) are not our providers: your browser connects to them directly and each is responsible for its own logs.

International transfers

Some providers are US companies or may access data from the US. In those cases the transfer relies on the provider's certification under the EU-US Data Privacy Framework or, failing that, on the European Commission's standard contractual clauses (Art. 45 and 46 GDPR). You can ask us for more information at contacto@miparcelita.es.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given at any time, by writing to contacto@miparcelita.es from your account's email address and saying which right you are exercising. If we cannot confirm the request is yours, we will ask you to prove your identity. We reply within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD, C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es) or to the authority of your EU country. We would appreciate it if you wrote to us first so we can try to fix it.

Children

Accounts are not intended for children under 14, and you must be an adult to subscribe to Mi Parcelita Pro.

Security

We apply reasonable technical and organisational measures: encrypted connections, database access restricted to the server, passwordless sign-in and the minimum data needed.

Changes to this policy

If we change anything important, we will publish it here with a new date and, if you have an account, let you know by email.