Visa Compass
Privacy Policy
Last updated: 17 July 2026 · Draft pending legal review
Visa applications are sensitive by nature — passports, photographs, finances, travel plans. This policy explains exactly what we collect, why, who sees it, and how long we keep it. The short version: we collect only what the visa process needs, we never sell your data, and you can delete your account whenever your applications have concluded.
1. What we collect
Account data: your email address, phone number, and preferred language. Application data: the answers and documents a visa application requires — passport details, photographs, travel plans, accommodation, employment, and financial evidence. Saved travellers: profiles you choose to store for family members or clients.
Activity data: sign-ins, uploads, payments, and errors, kept so our support team can help you when something goes wrong. Technical data: request identifiers, IP address, and browser type in our server logs.
2. Why we collect it
To prepare and submit your visa application to the destination authority's official portal, to process your payment, to notify you about status changes, and to support you. We do not use your data for advertising and we never sell it.
3. Who sees it
The destination government's visa portal receives your application data — that is the point of the service. Our payment processor (SSLCommerz) handles your payment; we never see card or wallet credentials. Files are stored on Amazon Web Services. Our staff access your data only to process your application, and every staff access to your documents is logged and auditable.
4. How long we keep it
Activity logs are automatically deleted after 24 months. Draft applications you abandon are removed by our cleanup processes. Completed applications are retained as business records — they document a government submission and a payment.
When you delete your account, your personal identifiers, saved traveller profiles, and credentials are removed immediately, and your email and phone number are freed for future use. Completed application records are kept as described above, no longer linked to an active account.
5. Your choices
You can change your email address or phone number, manage notification preferences, and delete your account — all from your account page, each protected by a verification code. To exercise any other data request, use the Contact page and we will respond promptly.
6. Security
Documents are stored in access-controlled cloud storage and served only through short-lived signed links. Passwords are hashed, verification codes expire in minutes, and staff permissions follow a strict role model with an audit trail.