Privacy policy

Updated on 27 October 2026.

In short: we use your data to help you, to provide the service, to charge for it and to keep it secure. We do not sell personal data or use it for third-party advertising. Part of the work is done by infrastructure and artificial intelligence providers, which we name below.

Features that are being switched on gradually. Some things described here (registration with a demo, sign-in with Google, WhatsApp alerts and the video and photo bank) are being switched on progressively. Until a feature is available, no data is processed through it.

1. Who we are

VisionRemotech (“we”) provides the service described at visionremotech.com: rental of real iPhones with remote control from the browser, a team of editors and assistants who work on them following the customer’s instructions, and Anna, an artificial intelligence system that organises the work on the iPhones.

We are the controller of the data of people who visit the website, write to us, buy the service or use the dashboard (section 2). And we are the processor of the data that appears in our customers’ accounts and iPhones (section 3).

Contact, and to exercise your rights: on WhatsApp at +34 694 27 21 60.

2. What data we process, why and on what basis

Whose	What data	Why	Legal basis
Website visitors	Your IP address and country, which Cloudflare sees when it serves you the page (we do not store them); the language cookie; and aggregate visit data (page, source, browser and performance) measured by Cloudflare Web Analytics, which according to Cloudflare uses no cookies or browser fingerprinting; our own measurement, with no cookies or IP address (the page, the language, the source domain, the time, the scroll and the buttons you press; it measures nothing if your browser asks not to be tracked); and, only if you accept all cookies, usage data measured by Google Analytics (pages viewed, approximate country and device type) with its 2-year cookies.	To serve the site securely, remember your language and know how many people visit us and which buttons they use.	Legitimate interest (security and aggregate statistics). The language cookie is necessary (art. 22.2 of Spain’s LSSI): see the cookie policy. Google Analytics: your consent (art. 6(1)(a) GDPR and art. 22.2 of Spain’s LSSI), which you can withdraw whenever you like.
People who write to us	Your name, your email or WhatsApp number and what you tell us.	To answer you and, if you ask, to prepare an offer.	Steps taken at your request before a contract; legitimate interest in handling your enquiry.
Customers	Name or company name, email, phone, country, plan and number of iPhones, billing details and the confirmation of each payment. We do not store your full card details.	To provide the service, invoice it, collect payment and meet tax and accounting obligations.	Performance of the contract; legal obligation.
Dashboard users (the customer and the people on their team they give access to)	Name, email, password (we only store an irreversible hash, never the password) or, if you choose to sign in with Google, your email, your name and an identifier of your Google account (never its password), a second factor if the account has one, role and account status. Access and activity logs: when you sign in, which iPhone you see and which gestures you make; for what you type we only record how many characters. For sign-in attempts, the IP address is used to limit them and is only left in the service log when an access is limited or denied. For staff, also clock-in and clock-out times and metrics about their work.	To give you access, keep things secure, detect abuse and be able to show who did what.	Performance of the contract; legitimate interest (security and audit).
People who sign up to the dashboard without ordering (demo)	Name, email (we verify it with a code we send you), password (only an irreversible hash) or your Google account, and the IP address of sign-up and sign-in attempts, which is used to limit them. The demo uses sample data: it shows nobody’s data.	So you can see what the dashboard is like and order from it, and to prevent automated sign-ups.	Steps taken at your request before a contract; legitimate interest (security and preventing abuse).
WhatsApp numbers a customer gives us (for their alerts or to review their content)	The number, whether it has said yes or no to receiving messages from us, and when. What that person writes is not stored, only which command it was (yes, no, STOP…); in our internal logs the number is stored with part of its digits hidden.	To send, only to those who have said yes, the alerts or content the customer asked for, and to respect their opt-out.	Your consent (art. 6.1(a) GDPR), which you withdraw by writing STOP; for the first question asking whether you want to receive them, the legitimate interest in respecting your decision.

3. Data in our customers’ accounts and iPhones

When our team or Anna work on a customer’s iPhone, they see and process what is on it: the social media accounts open on that iPhone, their posts, videos, photos, comments and messages, and data about other people who appear there (people who follow, write or comment).

For that data, the customer is the controller and we act on their behalf and on their instructions, as processor (article 28 of the GDPR). We only use it to provide the service to them. If you are a business or professional and need a data processing agreement, ask for it on WhatsApp at +34 694 27 21 60 and we will sign it.

How we work with it:

Our team sees and hears live only the iPhones assigned to it, with the account’s session already open. It does not need your password, and we will not ask you for it by email or WhatsApp.
Anna reads the iPhone screen (screenshots and video), including comments and messages, to decide and carry out the day’s tasks. To do so, it sends those screenshots, videos and texts to artificial intelligence model providers (today, among others, Google, Anthropic, OpenAI, xAI and OpenRouter), which process them on our behalf. Anna can also classify other people’s public profiles (by their name, photo and bio) to decide whom to follow and whom to interact with.
Anna keeps a record of what it does in each account (the actions, the text of the comments and messages it writes and screenshots) and a list of third-party accounts it must not interact with again (their username and an excerpt of the message). If a post fails to publish, it also keeps a short video of the screen for up to 7 days (a few minutes before and a few seconds after) to diagnose the error.
The videos and photos you upload to the dashboard are handled only for you: automated tools check them, strip their metadata (location, device, comments) and regenerate them before they are stored. They are kept for as long as the service lasts and you can delete them at any time from the dashboard.
We do not take decisions based solely on automated processing that produce legal effects on people.
When the service ends, we stop accessing your accounts. You can ask us for a copy of your data and for us to delete the data from your accounts that we hold in our systems; we do so within one month, unless a law requires us to keep it.

4. Who else processes your data

We do not sell personal data. To provide the service we use these providers, which process data on our behalf (except the payment provider and the authorities):

Cloudflare: hosts the website, manages the domain and the secure connections to the dashboard and the live video, checks who signs in to the management dashboard (for this it receives users’ emails and sends them a code), measures visits without cookies and checks that whoever signs up is not an automated program (Cloudflare Turnstile, which sees your IP address and technical details of your browser).
Google (Analytics): only if you accept all cookies, it measures visits with the cookies explained in the cookie policy. We have Google signals and data sharing with Google turned off.
Google (sign-in): only if you choose to sign in with your Google account: Google confirms your email and name to us; we do not receive its password.
Artificial intelligence providers (today, among others, Google, Anthropic, OpenAI, xAI and OpenRouter): analyse screenshots, video and text so that Anna can work (section 3).
Connectivity and proxy providers: connect the iPhones to the internet.
WhatsApp (Meta) and CallMeBot: if you write to us there, to alert us about what Anna finds (the alert may include the name of the affected account) and to send alerts to the numbers a customer has given us and that have said yes.
Payment provider: the provider named at the time of payment (today, cryptocurrency payment gateways and, if offered, card payments) collects and processes the payment details directly and is an independent controller of that data, under its own privacy policy. We do not see or store your card details or your wallet keys, only the confirmation of the payment.
Our team of editors and assistants (section 5).
Professional advisers (tax, accounting and legal) and, where the law requires it, the authorities.

5. Transfers outside the European Economic Area

Some of these providers (for example, Cloudflare, Google, Anthropic and Meta) process data outside the European Economic Area, including in the United States. They rely on the transfer mechanisms each of them declares (adequacy decisions or the European Commission’s standard contractual clauses).

In addition, part of our team of assistants may work remotely from outside the European Economic Area, including from countries in Latin America. Each person accesses only the iPhones assigned to them, with their own user, their activity is logged and we can withdraw their access instantly. If you want to know the specific legal safeguards for these transfers, write to us.

6. How long we keep it

Website: the language cookie lasts 1 year. Aggregate visit data is managed by Cloudflare. The data from our own measurement is kept for 400 days. Google Analytics data, if you accept it, is kept for 14 months and its cookies last 2 years.
Contact messages: for as long as needed to handle your enquiry and, if you become a customer, for the duration of the relationship.
Customer and billing data: during the relationship and, afterwards, blocked while liabilities may arise; generally between 4 and 6 years under tax and commercial rules.
Dashboard logs: while the account is active and, afterwards, for as long as needed for security, audit and defence against claims.
Anna’s diagnostic videos: up to 7 days.
Data from your accounts and iPhones, and Anna’s records about them: for as long as the service lasts and, when it ends, until you ask us to delete them (section 3).
Sign-up without ordering: if you sign up and neither order nor sign in again, we delete your account and your data after 30 days (7 days if you have not even verified your email).
WhatsApp numbers for alerts: for as long as the customer keeps them and you keep accepting. If you say no or write STOP, we stop writing to you and only keep the mark of your decision (so as not to ask you again) until you write “ALERTAS ON”.
Videos and photos you upload to the dashboard: for as long as the service lasts and until you delete them; when it ends, until you ask us to delete them (section 3).

7. How we protect it

Dashboard passwords are only stored as an irreversible hash, and accounts can have a second factor (we set it up if you ask).
Access is blocked after several failed attempts and sessions expire after 12 hours.
Assistants and customers see only the iPhones assigned to them, and we can withdraw their access immediately.
Connections from your browser to the dashboard and the live video are encrypted (HTTPS), and our team’s access to the management dashboard is also protected by an access control with a code sent by email.
The audit log of access and changes is chained, which makes it possible to detect if someone alters it.

No system is infallible. If a security breach affected you, we will tell you within the deadlines set by law.

8. Your rights

You can ask us for access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw any consent you have given us, by writing to us on WhatsApp at +34 694 27 21 60. We will reply within one month and, if needed, ask you to prove your identity.

If your data appears in one of our customers’ accounts, your request should go to that customer, who is the controller; if you send it to us, we will pass it on.

If you believe we are not processing your data as we should, you can complain to the Spanish Data Protection Agency (aepd.es).

9. Minors

The service is aimed at professionals and businesses, and at people over 18. We do not knowingly process the data of minors as customers.

10. Changes to this policy

If we change this policy, we will update the date above and, if the change is important, tell you by email or on the website.

11. Contact

If you have any questions, write to us on WhatsApp at +34 694 27 21 60.

Back to home