Privacy Policy
Last updated: July 16, 2026
We do not sell your personal data.
1. Who We Are
The VisaWizard is an AI-powered immigration assessment platform that helps individuals evaluate their eligibility for U.S. immigration pathways. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.
2. Information We Collect
- Name and email address provided at sign-up (including via Google OAuth)
- Resume content and professional information you submit for evaluation
- Payment details processed through Stripe (we do not store card numbers)
- Session identifiers to keep you logged in
- Basic usage data such as pages visited and features used
3. How We Use Your Data
- To provide and improve our assessment and evaluation services
- To analyze your resume using automated systems and AI models in order to generate your visa eligibility evaluation
- To process payments and manage your subscription or package
- To send transactional communications related to your account
- To maintain the security and integrity of our platform
4. Cookies
We use essential session cookies required to keep you signed in. With your consent — given through the cookie banner — we also use Google Analytics cookies to understand how the site is used. Analytics cookies are never set unless you accept them, and you can withdraw your consent at any time by clearing this site's cookies in your browser. We do not use advertising cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| _session_id | Maintains your authenticated session | Session (cleared when browser closes) |
| _ga, _ga_* | Google Analytics — anonymous usage statistics (only if you accept analytics cookies) | Up to 2 years |
5. Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Stripe — payment processing. See stripe.com/privacy.
- Google OAuth — optional sign-in via Google. See policies.google.com/privacy.
- Google Analytics — usage statistics, only if you accept analytics cookies. See policies.google.com/privacy.
- AI model providers — we send the contents of your resume to third-party large-language-model providers (currently Google Gemini and/or Anthropic Claude) to generate your evaluation. See Google Gemini API terms and Anthropic's privacy policy.
5a. AI & Automated Processing of Your Resume
Your evaluation is produced by automated systems. When you submit a resume, its contents — which may include personal and professional information (PII) — are sent to one or more third-party AI providers (currently Google Gemini and/or Anthropic Claude) to extract your background and assess it against visa criteria. We ask for your explicit consent to this processing at the point of upload.
We use paid, business-tier provider plans (the Google Gemini API and, where applicable, the Anthropic API) that do not use your submitted content to train their models. The output is an assessment only and is not legal advice. The automated analysis does not make legally binding decisions about you; you may contact us to request human review of any evaluation.
6. Data Sharing
We do not sell, rent, or trade your personal information to any third party. We share data only with service providers necessary to operate our platform (Stripe for payments, Google for authentication) and only to the extent required to deliver those services.
7. Data Retention
We retain your personal data for as long as your account is active. If you request account closure, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes.
Uploaded resume files are handled separately and kept only as long as needed to process them: the file you upload is removed from our processing service shortly after your evaluation is generated (and in all cases within 24 hours), whether the evaluation succeeds or fails. The structured results of your evaluation remain available in your account until you delete them or close your account.
8. Your Rights under GDPR (EU/EEA)
If you are located in the EU or EEA, you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request that we limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at privacy@thevisawizard.com.
9. Your Rights under CCPA (California)
If you are a California resident, you have the following rights:
- Right to Know — request disclosure of personal information we collect and how we use it
- Right to Know We Don't Sell — we do not sell your personal information
- Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights
To submit a CCPA request, contact us at privacy@thevisawizard.com.
10. Data Security
We use HTTPS encryption for all data in transit, enforce strict access controls, and never store passwords in plain text. While we take commercially reasonable measures to protect your data, no method of transmission over the Internet is 100% secure.
11. Children's Privacy
Our service is not directed at children under 13 (or under 16 for users in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@thevisawizard.com.