Privacy Policy

Last updated: August 25, 2026

We connect you with immigration attorneys — that is part of what this service does.

Law firms in our partner network may receive your evaluation and CV so they can contact you about representation. You can opt out at any time from your privacy settings and keep using everything else. See section 6a.

1. Who We Are

The VisaWizard is an AI-powered immigration assessment platform that helps individuals evaluate their eligibility for U.S. immigration pathways. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

  • Name and email address provided at sign-up (including via Google OAuth)
  • Resume content and professional information you submit for evaluation
  • Payment details processed through Stripe (we do not store card numbers)
  • Session identifiers to keep you logged in
  • Basic usage data such as pages visited and features used

3. How We Use Your Data

  • To provide and improve our assessment and evaluation services
  • To analyze your resume using automated systems and AI models in order to generate your visa eligibility evaluation
  • To process payments and manage your subscription or package
  • To send transactional communications related to your account
  • To maintain the security and integrity of our platform

4. Cookies

We use essential session cookies required to keep you signed in. With your consent — given through the cookie banner — we also use Google Analytics cookies to understand how the site is used. Analytics cookies are never set unless you accept them, and you can withdraw your consent at any time by clearing this site's cookies in your browser. We do not use advertising cookies.

Cookie Purpose Duration
_session_id Maintains your authenticated session Session (cleared when browser closes)
_ga, _ga_* Google Analytics — anonymous usage statistics (only if you accept analytics cookies) Up to 2 years

5. Third-Party Services

We use the following third-party services, each with their own privacy policies:

5a. AI & Automated Processing of Your Resume

Your evaluation is produced by automated systems. When you submit a resume, its contents — which may include personal and professional information (PII) — are sent to one or more third-party AI providers (currently Google Gemini and/or Anthropic Claude) to extract your background and assess it against visa criteria. We ask for your explicit consent to this processing at the point of upload.

We use paid, business-tier provider plans (the Google Gemini API and, where applicable, the Anthropic API) that do not use your submitted content to train their models. The output is an assessment only and is not legal advice. The automated analysis does not make legally binding decisions about you; you may contact us to request human review of any evaluation.

6. Data Sharing

We share your data in two situations:

  • Service providers necessary to operate our platform (Stripe for payments, Google for authentication, and the AI providers described in section 5a), and only to the extent required to deliver those services.
  • Immigration law firms in our partner network, so that they can review your evaluation and contact you about representing you. This is a core part of what our service does, and it is described in full in section 6a.

We do not share your data with recruiters, advertisers, data brokers, or anyone else for any other purpose, and we never sell it to the general market.

6a. Sharing Your Evaluation with Immigration Law Firms

Connecting you with immigration attorneys is part of what this service is for. When you create an account you are asked to tick a box, separate from your acceptance of our Terms, agreeing that we may share your evaluation and the CV you upload with immigration law firms in our partner network, so that those firms can review your case and contact you about representing you. Law firms pay us a subscription fee to take part in the network. Agreeing is required to open an account, and you can withdraw it immediately afterwards — see "How to opt out" below.

You do not have to select a firm — participating firms may review your evaluation and reach out to you directly. If you would rather we did not share your information with law firms at all, you can opt out at any time and still use the rest of the service; see the end of this section.

What we share. A firm in the network may receive:

  • your name and the email address on your account;
  • the visa category you were evaluated for;
  • your full evaluation — every criterion, the reasoning, the strengths and weaknesses identified, and the supporting evidence we matched;
  • the resume or CV file you uploaded, exactly as you uploaded it;
  • the details we extracted from that CV — including your phone number and any contact details it contains, your field of expertise, employment history, education, publications, patents, awards, professional memberships, media coverage, and compensation figures where your CV states them.

Your password and your payment details are never shared.

We do not recommend attorneys, and we take no share of your legal fees. Firms pay us a flat subscription fee to take part in the network. That fee does not depend on whether you become a client or on what you pay the firm, and we receive nothing from your engagement of any attorney. We do not endorse or vouch for any firm — you are always free to choose your own attorney, inside the network or outside it, and you are under no obligation to respond to any firm that contacts you.

What the firm does with your data is up to the firm. Once your information is sent, the law firm handles it as an independent business, under its own privacy policy and its own professional and ethical obligations as a legal practice. It is no longer under our control. We are not responsible for how the firm stores, uses, or discloses it. If you want to know what a firm does with your data, or want the firm to delete it, you will need to contact that firm directly.

Sending your evaluation does not make the firm your lawyer. No attorney–client relationship is created by a firm receiving your information. See our Terms of Service, section 7a.

We keep a record of your consent — when it was given, which version of these terms it was given under, and which firms received your information — so that both you and we can confirm afterwards what was shared and with whom. You may ask us at any time which firms have received your data.

How to opt out. You can stop sharing at any time, for any reason, from your privacy settings page while signed in — it takes effect immediately and needs no explanation. You can also email us at ay.thevisawizard@gmail.com if you prefer. Opting out does not limit your access to the rest of the service. Two honest limits: opting out stops future sharing, and it cannot recall information already sent — we cannot delete a copy held by someone else, so you would need to contact that firm directly.

7. Data Retention

We retain your personal data for as long as your account is active. If you request account closure, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes.

Uploaded resume files are handled separately and kept only as long as needed to process them: the file you upload is removed from our processing service shortly after your evaluation is generated (and in all cases within 24 hours), whether the evaluation succeeds or fails. The structured results of your evaluation remain available in your account until you delete them or close your account.

Information shared with a law firm is an exception to all of the above. The retention periods on this page describe what we do with your data. They cannot apply to a copy held by a law firm that received it under section 6a — that firm keeps its own records under its own policies and its professional obligations, and deleting your account here does not delete anything there. If you want a firm to delete its copy, contact the firm directly; we will tell you which firms received your information.

8. Your Rights under GDPR (EU/EEA)

If you are located in the EU or EEA, you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — request that we limit how we use your data
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where we rely on your consent, withdraw it at any time, without affecting processing already carried out

Sharing your evaluation with law firms (section 6a). This deserves a specific note:

  • We rely on your consent as our lawful basis, given by a separate tick when you register, recorded with the date and the version of this section you agreed to. You can withdraw it at any time without giving a reason, and withdrawing it does not affect your access to the rest of the service.
  • A resume and a personal statement can reveal sensitive information such as health, ethnicity, religious or political affiliation, or trade union membership. Where that is the case, we rely on your explicit consent to share it.
  • Firms in the network may be located outside the EU/EEA, including in the United States, which may not offer the same level of data protection as your home country.
  • Once your data reaches a firm, that firm is an independent controller. A request to us to erase or restrict your data does not bind them. We will tell you which firms received your data so you can approach them directly.
  • If you would prefer your data was never shared with law firms, opt out before uploading a CV — that is the cleanest way to ensure nothing is ever passed on.

To exercise any of these rights, contact us at ay.thevisawizard@gmail.com. You also have the right to lodge a complaint with your local supervisory authority.

9. Your Rights under CCPA (California)

If you are a California resident, you have the following rights:

  • Right to Know — request disclosure of personal information we collect and how we use it
  • Right to Delete — request deletion of the personal information we hold about you
  • Right to Correct — request correction of inaccurate personal information
  • Right to Opt Out — direct us to stop sharing or selling your personal information (see below)
  • Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights, and opting out of law-firm sharing will not limit your access to the service

Do Not Sell or Share My Personal Information. We do not sell your personal information to data brokers, advertisers, or the general market, and we do not use it for cross-context behavioural advertising. However, we share your evaluation and CV with immigration law firms that pay us a subscription fee to take part in our network, as described in section 6a. Because those firms pay us, California law may treat that disclosure as a "sale" or "share" of personal information, and we tell you so plainly rather than rely on a technicality.

You have the right to opt out. Use the switch on your privacy settings page, or email ay.thevisawizard@gmail.com with the subject "Do Not Sell or Share My Personal Information". We will stop sharing your information with law firms, and you can continue using the rest of the service exactly as before. We do not knowingly sell or share the personal information of consumers under 16.

A request to delete reaches the information we hold. It does not reach a copy already held by a law firm — see sections 6a and 7.

To submit a CCPA request, contact us at ay.thevisawizard@gmail.com.

10. Data Security

We use HTTPS encryption for all data in transit, enforce strict access controls, and never store passwords in plain text. While we take commercially reasonable measures to protect your data, no method of transmission over the Internet is 100% secure.

11. Children's Privacy

Our service is not directed at children under 13 (or under 16 for users in the EU/EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at ay.thevisawizard@gmail.com.