Privacy Policy · VisaPermit

1. Who We Are

VisaPermit operates the website visapermit.xyz. This Privacy Policy explains how we collect, use, and protect information about users of our Service.

2. Information We Collect

We collect the following information:

Assessment data: Your answers to the 10-question eligibility questionnaire, including nationality, occupation, education, work experience, English proficiency, savings, job offer status, age, and immigration goal. This data is stored in association with a unique assessment ID.
Email address: Collected at checkout to deliver your Report and any related communications.
Payment information: Handled entirely by Stripe. We do not store your credit card number, debit card number, or any other payment instrument details. See Stripe's Privacy Policy at stripe.com.
Generated Report: Your full visa eligibility Report, stored in our database.
Usage data: Pages visited, browser type, and referrer — collected via server logs for error monitoring and basic traffic analysis only.

3. How We Use Your Information

To generate and deliver your personalised Report.
To send your Report link to your provided email address.
To process payments via Stripe.
To operate and improve the Service.
To detect and prevent fraud or misuse of the Service.

4. Data Retention

We retain your assessment data, Report, and email address for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time by contacting us (see Section 11). We may retain anonymised, aggregated data indefinitely for product improvement purposes.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

Stripe: Your email and order details are shared with Stripe to process payment. See stripe.com/privacy.
Anthropic: Your assessment data is sent to Anthropic's API (where applicable) to generate the narrative portions of your Report. Anthropic processes this data under its own privacy policy.
Resend: Your email address is shared with Resend to deliver your Report link. See resend.com/privacy.
Legal obligations: We may disclose data if required by law or to protect our legal rights.

6. Cookies and Analytics

We use Google Tag Manager (GTM) to help us understand how visitors interact with our website. GTM is only activated after you provide explicit consent via our cookie banner. If you do not consent, no tracking tags are loaded and no analytics data is collected.

Specifically:

No cookies are set by us before you consent.
GTM loads only after you click “Accept All” in the cookie banner.
Rejecting all means no third-party tracking scripts are loaded.
Your consent preference is stored locally in your browser and lasts for 1 year.

We may use basic server log data for error monitoring and essential site functionality regardless of consent.

7. Data Security

We use HTTPS encryption for all data in transit. Payment data is handled by Stripe and is never stored on our servers. Our database is hosted on a server controlled by us with access limited to authorised personnel.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Object to or restrict certain processing.
Data portability, where applicable.

To exercise any of these rights, contact us at the email address below.

9. Cookies

We do not use tracking or advertising cookies. We may use a single essential session cookie to manage your assessment session.

10. International Transfers

If you are located outside the jurisdiction in which our servers are hosted, your data may be transferred internationally. We take appropriate safeguards to ensure such transfers are conducted in compliance with applicable data protection laws.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at the email address provided below. We aim to respond within 30 days.

See also our Terms of Service and Refund Policy.