Privacy Policy

PlanForVisa ("we," "us," or "our") operates the planforvisa.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Information you provide directly

• Account information: your email address and account identifiers. Sign-in uses a one-time email link rather than a password.
• Questionnaire data: business details, investment information, staffing plans, financial inputs, and other data you enter during the intake process. This may include personal details such as nationality, date of birth, education history, and professional background.
• Payment information: card details are collected and processed by Stripe. We store order records such as the amount, payment status, Stripe checkout identifiers, and payment identifiers, but not your full card number or CVV.
• Communications: emails, support requests, and feedback you send us.

Information collected automatically

• Usage data: pages visited, time spent, clicks, and navigation patterns.
• Device information: browser type, operating system, device type, and screen resolution.
• Cookies and similar technologies: see Section 6 below.

2. How We Use Your Information

• To generate your immigration business plan using the data you provide.
• To enrich your plan with market data from public sources (U.S. Census Bureau, Bureau of Labor Statistics).
• To process payments and deliver your completed plan.
• To communicate with you about your order, revisions, and support requests.
• To understand and improve the service through analytics you consent to, including events associated with your account after sign-in.

We use questionnaire data, business financials, and personal information to provide and operate the service, communicate with you, prevent abuse, and meet legal obligations. Section 4 lists the provider categories that process information on our behalf.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or the UK, we process your data under these legal bases:

• Contract performance: processing your questionnaire data is necessary to deliver the business plan you purchased.
• Legitimate interest: improving our service, preventing fraud, and ensuring security.
• Consent: for optional analytics cookies and marketing communications. You can withdraw consent at any time.

4. How We Share Your Information

We do not sell your personal data. We share information only with:

• Stripe: for payment processing. See Stripe's Privacy Policy.
• Hosting and storage providers: to run the application, store service data, and deliver files. Generated documents are stored in Cloudflare R2 and delivered through time-limited links.
• PostHog:for product analytics, only when you consent to analytics cookies. We send your user ID and email address to PostHog to understand how our service is used. When you consent to cookies, we may also record browsing sessions, including page visits, clicks, scrolling, and interactions. Form inputs are masked in session replay. PostHog processes this data on servers in the United States and recordings are subject to PostHog's privacy practices. See PostHog's Privacy Policy. You can opt out at any time — including session recordings — by withdrawing cookie consent via the settings in the site footer.
• Anthropic: to process questionnaire extraction, plan generation, previews, quality review, revisions, and related plan materials.
• Google Places: to provide address autocomplete when you enter a business location.
• Sentry: for application error monitoring and diagnostics.
• Cloudflare: for file storage and, when you use voice input, speech transcription.
• Resend: to send sign-in links, sample-plan messages, order updates, and delivery notifications.

We may disclose information if required by law, court order, or governmental regulation.

5. Data Retention

We do not currently enforce an automatic deletion schedule. We retain account, questionnaire, plan, order, and communication records while needed to provide the service, maintain transaction records, resolve disputes, prevent abuse, and meet legal obligations. Stripe also retains payment information under its own privacy policy. You may request deletion as described below, subject to records we must keep for legal or operational reasons.

6. Cookies

We use the following types of cookies:

• Essential cookies: required for the site to function (session management, security). These cannot be disabled.
• Analytics cookies: help us understand how visitors use our site. Only set with your consent.

You can manage cookie preferences through the banner shown on your first visit, or through your browser settings.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent for optional processing.

To exercise any of these rights, email us at privacy@planforvisa.com. We will review and respond to your request.

8. Data Deletion Requests

You can request deletion of all your personal data at any time by emailing privacy@planforvisa.com with the subject line "Data Deletion Request." Include the email address associated with your account. We may need to verify your identity and may retain records required for legal or operational reasons.

9. Security

We use TLS for data in transit and time-limited signed URLs for document downloads. No online service can guarantee absolute security. If you believe your account or data may have been compromised, contact us at privacy@planforvisa.com.

10. Children

Our service is not directed to individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of the service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at privacy@planforvisa.com.