Privacy Policy

1. Information We Collect

Account information: Email address provided during sign-up. We store your email to manage your account and send service-related communications. Our authentication provider also collects IP address, device type, and browser information as part of the sign-in process.

Report data: Nationality, destination country, visa type, and your freeform situation description — used to generate your visa brief.

Usage data: Pages visited and report generation events, collected anonymously. This data is not tied to your identity.

Error and performance data: When errors occur, diagnostic information (stack traces, request context, browser version, OS version) is collected for debugging. Server-side operational logs may include anonymized request metadata.

Payment information: Payment is processed by Stripe. We do not store card numbers or full payment details. Stripe may collect billing name and payment method metadata per their privacy policy.

2. What We Do Not Collect

We do not collect passport numbers, date of birth, physical address, or any government-issued identification numbers. We do not store payment card numbers — those are handled entirely by Stripe.

3. How We Use Your Information

• • Generate your visa intelligence brief
• • Send transactional emails (report confirmation, account-related notices)
• • Improve the accuracy and quality of our reports
• • Comply with legal obligations

4. Data Storage

Your data is stored on US-based servers. We use reputable third-party providers for authentication, payments, and data storage — each operating under their own security standards and privacy policies.

5. Data Sharing

We do not sell your personal data. We share data only with service providers necessary to operate VisaScout. These providers process data under their own privacy policies and are not permitted to use your data for other purposes.

• • Anthropic — AI processing (your report data is sent to generate briefs)
• • Clerk — authentication (email, device info, IP address)
• • Stripe — payment processing
• • Supabase — database storage (report data and account records)
• • Web search services — destination and visa type are passed to search queries to gather immigration data
• • Error monitoring services — anonymized error context and stack traces for debugging
• • Server logging services — operational logs and request metadata
• • Anonymous analytics — page-view counts with no personal identifiers

6. Your Rights (GDPR / EEA Users)

If you are located in the EU or EEA, you have the following rights under the GDPR:

• • Access — request a copy of the personal data we hold about you
• • Rectification — request correction of inaccurate data
• • Erasure — request deletion of your account and associated data
• • Portability — request your data in a machine-readable format
• • Restriction — request that we limit processing of your data
• • Object — object to processing based on legitimate interests

To exercise any of these rights, contact us via our contact form. We will respond within 30 days. Anonymized aggregate usage data may be retained after deletion for service improvement.

We retain your data as long as your account is active, plus 30 days after a deletion request is processed.

7. Cookies

We use session cookies required for authentication and anonymous analytics. We do not use advertising cookies or third-party tracking cookies.

We use strictly necessary cookies to manage your authenticated session (Clerk) and protect against automated abuse (Cloudflare). No tracking or advertising cookies are used.

8. Security

All data is encrypted in transit. Access to stored data is restricted and access-controlled. We do not expose user data to the client beyond what is necessary to render your account.

9. Children

VisaScout is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, contact us immediately.

10. Changes to This Policy

We will notify registered users of material changes to this policy via email. Continued use of the Service after changes constitutes acceptance.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• • The right to know what personal information is collected about you
• • The right to request deletion of your personal information
• • The right to opt out of the sale of your personal information

We do not sell your personal information. We do not share your data with third parties for their direct marketing purposes. To exercise your rights, contact us via our contact form.

12. Contact

Privacy questions? Contact us.