Your data — including sensitive identity, financial and family information — is only ever collected, stored and shared to move your application forward. We ask for your permission before sharing it, encrypt everything sensitive, and protect it in line with applicable data-protection law.
01Who we are
GoldenVisaX (“GoldenVisaX”, “we”, “us”, “our”) operates the GoldenVisaX platform — a secure service for creating, submitting, managing and tracking Citizenship by Investment (CBI) and Golden Visa / residence-by-investment applications across the programmes we support.
For the purposes of the EU General Data Protection Regulation (GDPR) and other applicable laws, GoldenVisaX is the data controller for the personal data described in this policy. Our contact details are in section 16.
02Scope and platforms
This policy applies to all personal data we process through:
- our website at goldenvisax.com, including the application wizard and your client dashboard;
- our Android app (distributed via Google Play); and
- our iOS app (distributed via the Apple App Store).
We collect the same categories of data across all three, and the data you enter is synced to the single case file tied to your account, so you can continue on any device.
03The data we collect
We collect the information you provide as you move through the application wizard, plus a limited amount of technical data. We only ask for what a given programme actually needs.
a. Information you give us
| Category | Examples (from the wizard steps) |
|---|---|
| Account & contact | Email address (verified by one-time code) and mobile phone number (verified by SMS). |
| Identity & personal details | First and last name, date of birth, country of residence, passport nationality, and long-term permanent-residence status. |
| Eligibility & financial profile | Investment budget, application goal, source of funds and background information used for eligibility and due-diligence / risk screening, and your chosen investment option (donation, real estate or bonds). |
| Family & dependants | Details of any spouse, children or parents you add to the application — their name, date of birth and nationality — so we can price and screen them for the programme. |
| Identity documents | Passport and other supporting documents you upload to your encrypted document vault. |
| Payment information | Records of the reservation retainer and programme invoices. Card and bank details are entered directly with our payment providers — see section 6. |
| Communications | Messages, notes and support requests you exchange with us or your assigned agent. |
b. Information collected automatically
- Device & technical data: IP address, device and browser type, operating-system version, app version, and a device identifier used to keep you signed in and secure your session.
- Usage data: which pages and wizard steps you view and interact with, and diagnostic / crash logs, so we can keep the service reliable.
- Cookies and similar technologies — see section 14.
04Mobile app permissions
Our Android and iOS apps request certain device permissions only when you use the feature that needs them, and only with your consent. You can decline or later revoke any of these in your device settings; some features may then be unavailable.
- Camera — to photograph or scan your passport and supporting documents for upload to your vault.
- Photos / files / storage — to let you select existing documents to upload.
- Notifications — to alert you about verification codes, case progress and payment status. You may turn these off at any time.
- Network access — required to sync your application securely with your account.
We do not access your contacts, precise location, microphone, health data, or your photo library beyond the specific files you choose to upload. Photos and documents you capture in the app are used only for your application and are not used for advertising.
05How we use your data
- To create and secure your account and verify your email and phone number.
- To recommend the programmes you qualify for and calculate your full costs.
- To run eligibility, due-diligence and risk checks required by the programmes.
- To prepare, submit, manage and track your application and your dependants’ applications.
- To process the reservation retainer and programme payments.
- To communicate with you, provide support and send service and case updates.
- To keep the platform safe, prevent fraud and abuse, and meet our legal, regulatory and anti-money-laundering (AML/KYC) obligations.
We do not sell your personal data, and we do not use your identity or document data for advertising.
06Who we share your data with
Delivering an application means passing your information to the professionals and authorities who process it. We share your data — including the relevant sensitive data — only with your permission and only with the parties needed for your chosen programme:
- Lawyers and law firms representing and advising on your case;
- Government authorities and licensed / authorised agents of the programmes you apply to;
- Real estate developers where your investment option is a qualifying property;
- Banks and financial institutions for account opening, escrow and source-of-funds verification;
- Due-diligence and background-check firms that carry out the mandatory vetting; and
- Payment providers that securely process your card, bank-transfer or other payments.
We also use trusted service providers (for cloud hosting, encrypted storage, email and SMS delivery) who process data strictly on our instructions under confidentiality and data-processing agreements. We may disclose data where required by law or to protect our legal rights. Some of these recipients are chosen by, or specific to, the programme you select; we tell you who they are before you proceed.
Because these recipients are part of the licensed programme process, sharing with them is necessary to deliver the service you request. You can withdraw your consent at any time (section 11), though this may mean we can no longer progress your application.
07Encryption and security
Protecting your data is fundamental to how the platform is built:
- All sensitive data is encrypted. Identity documents in your vault and other sensitive fields are encrypted at rest, and all traffic between your device and our servers is encrypted in transit (TLS/HTTPS).
- Passwordless, verified access using one-time email codes and SMS verification, with session controls to protect your account.
- Access controls so that only the specific parties involved in your case, and authorised staff, can see your information on a need-to-know basis.
- Data-protection by design — we collect the minimum necessary, and we protect your data in line with applicable data-protection rules, including the GDPR.
No system can be guaranteed 100% secure, but we maintain organisational and technical safeguards appropriate to the sensitivity of the data and will notify you and the relevant authorities of a qualifying data breach as required by law.
08Legal basis for processing
Where the GDPR applies, we rely on: consent (which you can withdraw) — including your explicit consent for special-category and sensitive data and for sharing with the parties in section 6; performance of a contract to deliver the service you request; legal obligation (for example AML/KYC and record-keeping); and our legitimate interests in securing and improving the platform, balanced against your rights.
09International transfers
Citizenship and residence programmes are international by nature, so your data may be transferred to authorities, agents, developers, banks and firms located outside your country and outside the European Economic Area. Where we transfer personal data internationally, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or your explicit consent for a specific programme.
10How long we keep your data
We keep your data for as long as your account is active and your application is in progress, and afterwards only as long as necessary to comply with legal, regulatory, tax and anti-money-laundering record-keeping obligations, or to resolve disputes. When no longer required, data is securely deleted or anonymised.
11Your rights
Subject to applicable law, you have the right to: access your data; correct inaccurate data; delete your data (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with your data-protection authority — in Hungary, the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
To exercise any right, contact us using the details in section 16. We respond within the timeframe required by law.
12Deleting your account and data
You can request deletion of your account and associated personal data at any time — no sign-in required — by:
- using our account closing & data deletion request page;
- using the account-deletion option in the app or your dashboard; or
- emailing [email protected] from your registered address with the subject “Delete my data”.
We will delete your data, except where we are legally required to retain certain records (for example AML/KYC and financial records), which we will hold securely for the required period and then delete.
13Children
The platform is intended for adults (18+). We do not knowingly allow anyone under 18 to create an account. Where a child is added as a dependant on an application, their data is provided and consented to by a parent or legal guardian solely for that application.
14Cookies, SDKs and analytics
Our website uses strictly necessary cookies to keep you signed in and secure your session, and limited analytics to understand and improve how the service is used. Our apps use standard software development kits (SDKs) for secure sign-in, crash reporting and notifications. We do not use these for cross-app advertising tracking. You can control cookies in your browser and notifications in your device settings.
15Changes to this policy
We may update this policy from time to time. When we make material changes we will update the “last updated” date above and, where appropriate, notify you in the app or by email. The current version always governs.
16How to contact us
For any question about this policy or to exercise your rights, contact our data-protection team:
Data controller
GoldenVisaX PlatformAnkerköz 2-4, Budapest 1061, Hungary
Email: [email protected]
WhatsApp: +36 70 550 4957