Last updated: October 13, 2025
At SamApps, we take the privacy of our users and clients very seriously. This Privacy Policy describes how we collect, use, share, and protect your personal information when you visit our website or use our services.
This policy applies in accordance with the General Data Protection Regulation (GDPR) of the European Union and Spain's Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD).
1. Data Controller
The controller of your personal data is:
2. Data We Collect
We collect different types of information depending on how you interact with our services:
2.1. Information you provide directly:
- • Contact information: name, email address, phone number
- • Project information: details about your development needs, technical requirements, budget
- • Communication information: messages you send us through contact forms or email
- • Payment information: data necessary for billing (processed through secure third-party platforms)
2.2. Information collected automatically:
- • Browsing data: IP address, browser type, pages visited, time spent
- • Cookies and similar technologies: information about your device and preferences (see Cookies section)
- • Usage data: how you interact with our website and services
3. How We Use Your Data
We use the collected information for the following purposes:
- • Service provision: provide and manage our software development, mobile applications, and AI agent services
- • Communication: respond to your inquiries, send project updates, service notifications
- • Marketing: send information about our services and news (only with your prior consent)
- • Service improvement: analyze website usage to improve our offering and user experience
- • Legal compliance: comply with legal and regulatory obligations
- • Security: protect our services against fraud, abuse, and unauthorized access
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- • Consent: when you have given us explicit permission to process your data (e.g., for newsletters)
- • Contract performance: when processing is necessary to provide you with contracted services
- • Legitimate interest: to improve our services, conduct analysis, and protect our rights
- • Legal obligation: when we must process your data to comply with the law
5. Sharing Your Data
We do not sell or rent your personal information to third parties. We only share your data in the following circumstances:
- • Service providers: with companies that help us operate our business (hosting, email marketing, analytics), always under strict confidentiality agreements
- • Payment processors: with secure payment platforms to process transactions
- • Legal requirements: when required by law, court order, or competent authority
- • Rights protection: to protect our legal rights, security, or property
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies to improve your browsing experience. Cookies are small text files stored on your device when you visit our site.
6.1. Types of cookies we use:
- • Essential cookies: necessary for basic website functionality (no consent required)
- • Performance cookies: collect information about how users interact with the site
- • Functionality cookies: remember your preferences and choices
- • Marketing cookies: used to show you relevant content (require your consent)
6.2. Cookie management:
You can manage your cookie preferences through our cookie banner that appears when you first visit the site. You can also configure your browser to reject cookies, although this may affect the site's functionality.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- • Active customer data: for the duration of the contract and up to 6 years afterward to comply with tax and legal obligations
- • Contact data: until you request its deletion or withdraw your consent
- • Marketing data: until you withdraw your consent
- • Cookies: depending on the type of cookie (session or persistent), see our cookie policy
8. Your Rights (GDPR)
Under GDPR and LOPDGDD, you have the following rights regarding your personal data:
- • Right of access: obtain confirmation of whether we are processing your data and access it
- • Right to rectification: correct inaccurate or incomplete data
- • Right to erasure: request deletion of your data ("right to be forgotten")
- • Right to restriction: request restriction of processing of your data
- • Right to data portability: receive your data in a structured format and transmit it to another controller
- • Right to object: object to the processing of your data in certain circumstances
- • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, you can contact us at team@samapps.tech. We will respond to your request within a maximum period of one month.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing of your data violates applicable regulations.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- • SSL/TLS encryption for transmission of sensitive data
- • Restricted access to personal data only for authorized personnel
- • Regular backups and data recovery procedures
- • Security audits and periodic system updates
- • Continuous staff training in data protection
However, no method of transmission over the Internet or electronic storage method is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
10. International Data Transfers
In some cases, we may transfer your personal data outside the European Economic Area (EEA) to service providers located in third countries. When this occurs, we will ensure that:
- • The recipient country offers an adequate level of data protection
- • Appropriate safeguards exist, such as EU-approved standard contractual clauses
- • The provider complies with recognized data protection certifications
11. Minors
Our services are not directed to minors under 16 years of age. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.
12. Changes to this Policy
We may update this Privacy Policy periodically to reflect changes in our practices or for legal or operational reasons. We will notify you of any material changes by posting the new policy on our website. We recommend reviewing this page regularly to stay informed about how we protect your information.
