Privacy Policy

Who we are

Visa Planner (“we”, “us”) operates visa-planner.com, a service that turns publicly available immigration information into personalized relocation checklists. This policy explains what we collect, why, where it lives, and the controls you have. Questions or requests: privacy@visa-planner.com.

What we collect

• Quiz answers — citizenship, destination, purpose of move, approximate annual income and savings, and yes/no flags such as whether you hold a degree or job offer. If you take the quiz without an account, the answers are stored under a random anonymous session ID kept in a secure, httpOnly cookie — not under your name.
• Account data — your email address, and your name if you sign in with Google. We use magic links, so we never see or store a password. If you ask us to email you a plan without signing in, we save that address as an account so you can sign in later; it stays unverified, and receives no further email, until you sign in with it.
• Plan data — the visa you chose, your target move date, checklist progress, and any notes you add to checklist items.
• Vault documents — files you choose to upload (passports, certificates, and similar). These are stored in a private, access-controlled bucket, are never scanned or analyzed by us, and are only retrievable by you through short-lived signed links.
• Purchase records — what you bought, when, the amount and currency, and payment references from our payment processor. We never see or store card numbers, UPI handles, or bank credentials.
• Email events — whether reminder emails were sent to you, so we can honor the one-digest-per-day limit and your unsubscribe choice.

What we deliberately don't collect

No advertising trackers, no third-party marketing pixels, no resale of data to anyone. Analytics (Vercel Web Analytics) are cookieless and aggregate: we can see that a page was visited, not who visited it. We set no tracking or advertising cookies, which is why there is no cookie banner. The few cookies we do use are listed below.

How we use your data

• Rank visa options against your quiz answers.
• Generate your relocation plan and compute due dates from your move date.
• Send transactional email: sign-in links, purchase confirmations, and — only if you keep them enabled — reminder digests for upcoming deadlines and expiring documents.
• Process payments and detect duplicate or failed charges.
• Alert subscribers when a visa rule we track changes materially.

We do not use your data to train AI models, and we do not sell or rent it — full stop.

Where it lives

We use a small set of infrastructure providers, each processing only what their role requires:

• Supabase — database, authentication, and encrypted file storage (your account, plans, and vault).
• Vercel — hosting and cookieless analytics.
• Razorpay — payment processing. Card and banking details go directly to Razorpay and never touch our servers.
• Resend — sending transactional email to the address you gave us.
• Cloudflare — DNS and routing of inbound email to our support inbox.

How long we keep it

• Account, plan, and vault data: for as long as your account exists. Deleting your account removes all of it, including every uploaded document.
• Anonymous quiz sessions: linked to your account if you sign up; otherwise they hold no identifying information.
• Payment records: retained after account deletion where tax and accounting law requires it, and for nothing else.

Your rights & controls

• Delete everything — the account page has a self-serve deletion that removes your account, assessments, plans, and documents immediately. No email exchange required.
• Stop reminder emails — every reminder carries a one-click unsubscribe link that works without logging in, and there is a toggle on your account page.
• Access & correction — everything we hold about you is visible in the product itself (your assessments, plans, documents, and purchases). For an export, or anything you cannot reach, email us.

If you are in the EU/EEA or UK, these controls cover your GDPR rights of access, rectification, erasure, and portability. We answer privacy requests within 30 days.

Children

Visa Planner is not directed at children under 16, and we do not knowingly collect their data. Family members entered on a plan (e.g. “moving with family”) are a yes/no flag, not personal records.

Changes to this policy

If we change this policy in a way that matters — new data collected, a new processor, a new use — we will update the date above and, for material changes, notify account holders by email before the change takes effect.

Contact

privacy@visa-planner.com — for anything in this policy, including data requests.