Privacy policy
Last updated 24 September 2026. Plain English; no legalese.
What we collect
Account details (name, email, phone), passport and application details you enter or scan, documents you upload, eligibility answers, payment records (card details stay with Stripe), and usage data such as pages viewed and chat messages.
Why we use it
To prepare and track your visa application, run automatic document checks, match you with licensed partners you choose, process payments, send service notifications and reminders, and improve the product.
Who can see it
You; vistolane case-team staff processing your file; and, only if your plan and visa category require it, the licensed partner assigned to your case. We never sell personal data or show applicant data publicly.
Where it lives
Encrypted at rest in our Supabase (PostgreSQL) database and private storage bucket in AWS Mumbai (ap-south-1). Document checks and the assistant use AI providers under data-processing terms; your data is not used to train their models.
Your rights
Download or delete your documents from My documents at any time. Email privacy@vistolane.com to access, correct or erase your account data; we respond within 30 days.
Retention
Active files are kept for the life of the application plus 24 months for compliance and appeals, then deleted. Chat and eligibility drafts are deleted after 12 months of inactivity.