Privacy Policy

PlanForVisa ("we," "us," or "our") operates the planforvisa.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Information you provide directly

Account information: name, email address, and password when you create an account.
Questionnaire data: business details, investment information, staffing plans, financial inputs, and other data you enter during the intake process. This may include personal details such as nationality, date of birth, education history, and professional background.
Payment information: processed securely by Stripe. We do not store your credit card number, expiration date, or CVV on our servers.
Communications: emails, support requests, and feedback you send us.

Information collected automatically

Usage data: pages visited, time spent, clicks, and navigation patterns.
Device information: browser type, operating system, device type, and screen resolution.
Cookies and similar technologies: see Section 6 below.

2. How We Use Your Information

To generate your immigration business plan using the data you provide.
To enrich your plan with market data from public sources (U.S. Census Bureau, Bureau of Labor Statistics).
To process payments and deliver your completed plan.
To communicate with you about your order, revisions, and support requests.
To improve our service based on aggregated, anonymized usage patterns.

We do not use your questionnaire data, business financials, or personal information for any purpose other than generating your business plan. Your data is not shared with third parties for their own use.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or the UK, we process your data under these legal bases:

Contract performance: processing your questionnaire data is necessary to deliver the business plan you purchased.
Legitimate interest: improving our service, preventing fraud, and ensuring security.
Consent: for optional analytics cookies and marketing communications. You can withdraw consent at any time.

We do not sell your personal data. We share information only with:

Stripe: for payment processing. See Stripe's Privacy Policy.
Cloud infrastructure providers: to host and deliver our service. Data is encrypted in transit and at rest.
Technology service providers: that assist in document generation. Questionnaire data is transmitted securely to these providers solely for the purpose of producing your business plan and is not retained by them beyond processing. These providers may process data on servers located in the United States. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection.
Attorney review links: if you generate a shareable link, your attorney can view your plan. You control when to share these links.

We may disclose information if required by law, court order, or governmental regulation.

5. Data Retention

Business plan data: retained for 24 months after your last access, then automatically deleted — this includes your questionnaire responses, generated plan documents, and any stored file URLs. We strongly recommend downloading and saving a copy of your completed plan for your records — you may need it for visa renewals or extensions. You can request earlier deletion at any time.
Account information: retained while your account is active. Deleted within 30 days of account closure or deletion request.
Payment records: retained as required by tax and financial regulations (typically 7 years), managed by Stripe.

6. Cookies

We use the following types of cookies:

Essential cookies: required for the site to function (session management, security). These cannot be disabled.
Analytics cookies: help us understand how visitors use our site. Only set with your consent.

You can manage cookie preferences through the banner shown on your first visit, or through your browser settings.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data ("right to be forgotten").
Export your data in a portable format.
Restrict or object to certain processing.
Withdraw consent for optional processing.

To exercise any of these rights, email us at privacy@planforvisa.com. We will respond within 30 days.

8. Data Deletion Requests

You can request deletion of all your personal data at any time by emailing privacy@planforvisa.com with the subject line "Data Deletion Request." Include the email address associated with your account. We will confirm deletion within 30 days.

9. Security

We protect your data with encryption in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel only. Immigration documents are served through signed URLs — we do not use publicly accessible storage. No personally identifiable information is written to application logs.

10. Children

Our service is not directed to individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website. Continued use of the service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at privacy@planforvisa.com.