Privacy Policy

VISA AI ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use visaai.app and any related services (the "Service").

By accessing or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Service.

1. Information We Collect

We collect the following categories of information:

• Account data: name, email address, authentication identifiers (including Google OAuth ID where applicable), and password hashes.
• Assessment data: information you submit through eligibility calculators and questionnaires, such as age, nationality, education, language test scores, work experience, family status, financial details, and uploaded CVs.
• Usage data: pages visited, features used, device type, browser, IP address, approximate location, and timestamps.
• Payment data: processed by our third-party payment provider (Dodo Payments). We do not store full card numbers on our servers.
• Communications: messages exchanged with our AI Coach and support correspondence.

2. How We Use Your Information

We use the information we collect to:

• Provide eligibility assessments, scoring, and personalized immigration roadmaps.
• Authenticate users, manage accounts, and process subscriptions.
• Operate, maintain, secure, and improve the Service.
• Send transactional emails (verification, receipts, account notifications).
• Contact you by email, phone, WhatsApp, or other channels you provide for customer support, onboarding assistance, follow-up on your assessment results, product updates, and to share relevant immigration opportunities.
• Where you would benefit from professional legal guidance, share your contact details and assessment summary with our vetted partner immigration lawyers, consultants, or licensed representatives so they can reach out to assist you. By creating an account, you consent to being contacted by VISA AI and these partners. You may opt out of partner outreach at any time by emailing [email protected].
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract, your consent, our legitimate interests (e.g., service improvement and fraud prevention), and compliance with legal obligations.

4. Sharing and Disclosure

We do not sell your personal data. We share information only with:

• Service providers who process data on our behalf, including cloud hosting, authentication, AI inference (Google, OpenAI), analytics, and payment processing.
• Partner immigration lawyers and consultants we work with to offer professional assistance. We may share your name, contact details, country of interest, and assessment summary so they can contact you about your case. These partners are bound by confidentiality obligations and may only use your data to provide immigration-related services to you.
• Legal and regulatory authorities where required by law, subpoena, or to protect our rights, users, or the public.
• Successors in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

5. International Data Transfers

Your information may be processed in countries other than your country of residence, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

6. Data Retention

We retain personal data only as long as necessary to deliver the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Assessment results are retained for the lifetime of your account; you may delete them at any time from your dashboard.

7. Security

We implement industry-standard administrative, technical, and physical safeguards, including TLS encryption in transit, encryption at rest, role-based access controls, and Row-Level Security on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, as well as the right to data portability and to withdraw consent. To exercise any of these rights, contact us at [email protected].

9. Cookies and Tracking

We use essential cookies for authentication and session management, and analytics cookies to understand usage patterns. You can control cookies through your browser settings; disabling them may affect functionality.

10. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

12. Contact Us

For questions or concerns regarding this Privacy Policy or our data practices, contact: [email protected]