Privacy Policy

Visa Readiness helps you assess how complete and consistent your visa application looks before you submit it. Because visa applications involve some of the most sensitive personal information a person has, this policy is written to be read, not skimmed. The short version: we collect as little as possible, you stay in control of everything you enter, and your information is never sold, never used for advertising, and never used to train AI models without your separate, explicit consent.

1. Who is responsible for your data

The service is operated by the Visa Readiness project ("we"). Contact for all privacy matters, including exercising your rights: privacy@visareadiness.com. Before public launch, the registered operating entity behind visareadiness.com, its postal address, and — where required — its data protection officer must be named here.

2. What this preview version stores — and where

The version you are using is a local preview. Your questionnaire answers and the document details you type in are stored only in your own browser's storage on your own device. They are not transmitted to our servers. Document files you select are read for their name and size only; their contents are not uploaded anywhere — with one exception you control, described next. Clearing the application from the settings screen, or clearing your browser data, permanently removes everything.

2a. Optional AI features — only when you tap the button

Where the operator has configured them, two optional AI features exist, and both are strictly opt-in per use:

• "Read details with AI" on a document sends that one file to our server and on to our AI provider, solely to read the fields for you. The result comes straight back to your screen for review; the file is not stored by us, and every extracted value must be confirmed by you before it counts.
• Interview answer feedback sends your practice answer and your case details to the AI provider, solely to generate the feedback shown to you. It is not stored.
• "Ask about my application" free-form questions send your question and case details to the AI provider, solely to generate the cited answer shown to you. The page's instant answers are computed on your device and send nothing.

If you never tap those buttons — or the operator has not configured them — nothing you enter leaves your device. AI provider processing runs under a data processing agreement that forbids training on your data.

2b. Optional account & cross-device sync

Where the operator has enabled accounts, you can sign in with a one-time email code to save your application to your own private record and continue on another device. This is optional: without signing in, everything stays on your device. What syncs is your answers, the document details you confirmed, and your assessment results — never your document files. Your record is protected by row-level security (only your account can read or write it), and the account page has a "Delete my cloud copy" control that removes it permanently, any time.

3. What the full service will collect, and why

When account-based features launch, we will process, with your knowledge, only what the assessment needs:

• Account data — email address and sign-in credentials, to operate your account (legal basis: contract).
• Application data — questionnaire answers and uploaded documents (which may include your passport, bank statements, employment and school records), to run the readiness assessment you request (legal basis: contract; for special-category or highly sensitive data, your explicit consent).
• Extracted data — structured fields read from your documents, always shown to you for correction before use.
• Outcome data — only if you volunteer it after your real decision, to improve guidance; anonymized before any analysis (legal basis: consent).
• Technical data — security logs (sign-ins, access to your files) kept to protect your account (legal basis: legitimate interest in security).

We practice data minimization: we do not ask for information the assessment does not use, we mask identifiers such as account and passport numbers wherever possible, and sensitive values are not written to application logs.

4. What we never do with your data

• We never sell your personal data, and never share it for advertising.
• We never send your data to any government, embassy or visa authority. Only you submit your application.
• We never use your documents or answers to train AI models without your separate, explicit, revocable consent — using the service is not consent.
• We never make your documents publicly accessible, and never expose direct storage links.

5. AI processing

The full service uses AI models to read documents you upload and to phrase explanations. Where an external AI provider processes data on our behalf, it does so under a data processing agreement that forbids using your data to train its models. Extracted values are always shown to you for review; the readiness score itself is computed by deterministic rules, not by an AI's opinion.

6. How long we keep data

Only as long as it serves you. You can delete any document, any application, or your whole account at any time, and deletion is real deletion — files, database records and derived data, with backup copies expiring on a fixed schedule. Applications left inactive are deleted after a retention period communicated in-product; visa documents are not kept indefinitely merely because an account exists.

7. Security

Data is encrypted in transit and at rest. Documents live in private storage reachable only through short-lived, signed links tied to your session. Access is protected by authentication (with multi-factor authentication available), role-based access controls, rate limiting and audit logging. No staff member browses your documents; any access for support requires your request and is logged.

8. Your rights

Wherever you are, we give you the same rights — aligned with the EU/UK GDPR, Nigeria's NDPA, Ghana's Data Protection Act (2012), Kenya's Data Protection Act (2019) and South Africa's POPIA:

• Access and export a copy of everything we hold about you.
• Correct anything inaccurate.
• Delete individual documents, an application, or everything ("right to erasure").
• Withdraw any consent as easily as you gave it.
• Object to or restrict processing, and complain to your data protection authority.

Exercise any of these from the in-product controls (see Your data rights) or by writing to the contact in section 1. We respond within 30 days.

9. Children

The service is not directed at children. Applications for minors (for example a child's visitor visa) must be managed by a parent or legal guardian using their own account.

10. Changes

If this policy changes in any way that affects your rights or what we collect, we will tell you in the product before the change takes effect, with the previous version available on request.