Privacy Policy

1. Who We Are

Visaora ("we", "us") operates visaora.io, a platform of free visa and immigration tools plus the paid Intelligence Suite. This Privacy Policy explains what we collect, why, and your choices. Data controller: Visaora — contact: hello@visaora.io.

2. Information We Collect

a) Information you give us

• Newsletter: your email address when you subscribe.
• Contact messages: name, email, and message content when you write to us.
• Purchases: for Intelligence Suite purchases, payment details are processed by our payment processor (e.g., Stripe, PayPal, Freemius); we receive only transaction records, never full card numbers.

b) Information collected automatically

• Analytics data: pages visited, tool usage patterns, device type, browser, approximate location (country-level), and IP address, via cookies — see our Cookie Policy.
• Affiliate cookies: set by affiliate partners when you click tagged links — see our Affiliate Disclosure.

c) What our free tools do NOT collect

Our calculators, counters, and checklists run in your browser. The details you type into them (dates, salaries, travel history) are not transmitted to or stored on our servers. No account or signup is required for any free tool.

Exception: the Visa Readiness Check used by Visaora Agency Leads stores your answers only when you choose to send your result to an agency (see section 11).

3. How We Use Information

• To send the newsletter you subscribed to (with an unsubscribe link in every email).
• To respond to your messages and support requests.
• To deliver purchased Intelligence Suite reports and process transactions.
• To understand which tools and pages are useful, so we can improve them.
• To maintain security and prevent abuse.

4. Legal Bases (GDPR)

• Consent: newsletter signup; analytics and affiliate cookies.
• Contract: processing needed to deliver a purchase you made.
• Legitimate interests: site security, abuse prevention, and product improvement.

5. Sharing of Information

We share data only with service providers who process it on our behalf under contract: hosting, email delivery, payment processing, analytics, and — for paid Intelligence Suite / Case File reports — the AI model provider described in section 12. We may also disclose data where required by law. We do not sell your personal data.

6. Data Retention

• Newsletter email: until you unsubscribe.
• Contact messages: up to 24 months.
• Transaction records: as long as required by tax/accounting law.
• Analytics data: aggregated and retained per the analytics provider's defaults (typically 14 months).
• Intelligence Suite / Case File reports: see section 12 (primary retrieval up to 30 days; technical backup up to 90 days).

7. Your Rights

Depending on your location (including GDPR and similar laws), you may request: access to your data, correction, deletion, restriction, portability, or object to processing; and withdraw consent at any time. Email hello@visaora.io and we will respond within 30 days. You may also unsubscribe from the newsletter in one click.

8. Cookies

We use cookies for preferences, analytics, and affiliate tracking. Full list and controls: Cookie Policy.

9. Children

The Site is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Security & International Transfers

We use reasonable technical and organizational measures to protect your data. Where providers process data outside your country, we rely on standard contractual safeguards.

11. Visaora Agency Leads

This section explains how personal data is handled in Visaora Agency Leads. It applies in addition to the rest of this Privacy Policy. If anything here conflicts with another section, this section applies to Agency Leads.

a) What Agency Leads is

Visaora Agency Leads is software for visa agencies. A subscribing agency gets its own Visa Readiness Check link (visaora.io/check/agency-name/), which it can also share as a QR code or add to its own website. An applicant answers a few questions, sees a readiness score and a list of missing documents, and can then choose to send their result to that agency. Visaora is software only. We are not a visa consultancy, law firm, immigration adviser or government body, and we do not verify agencies. The check gives general guidance only. It is not legal or immigration advice and does not guarantee a visa approval.

Unlike our other free tools, the Visa Readiness Check sends your answers to our servers when you choose to send your result to an agency.

b) Applicant data we collect

When you send your result to an agency, we collect and store:

• Contact details: your full name, WhatsApp or phone number, email address (optional) and planned travel month.
• Your check answers: destination, purpose of the trip, country of residence and how long your residence permit is still valid, nationality, travel history in the last 5 years, job type, monthly salary range, whether someone will sponsor your trip, average bank balance range, whether your salary is paid into that account, and any previous visa refusal.
• Your result: case ID, readiness score, top risks and the number of documents you marked as ready.
• Records of your choices: the date and time you gave consent and agreed to the agency's refund terms, the version of those terms, your language, and whether you chose WhatsApp or email.
• Technical and security data: a one-way coded (hashed) version of your IP address, used to limit abuse and spam. We do not store your IP address in readable form.

We also count anonymous usage events for each agency's link (page views, checks started and completed, and WhatsApp or email clicks). These counts are not linked to your name or contact details.

If you only answer the questions and do not send your result, your answers are not saved to our servers.

c) Legal basis and consent

Before you can send your result, you must tick a box confirming that the agency may use your answers and contact details to contact you about your visa enquiry. We rely on this consent to store your data and pass it to the agency you chose. You can withdraw your consent at any time (see "Your rights" below). Withdrawing consent does not affect processing that happened before you withdrew it.

For agency accounts, we process data to provide the service the agency signed up for (contract) and to keep the service secure and prevent abuse (legitimate interests).

d) How your data is shared with agencies

Your data is shared only with the one agency whose link you used. That agency can see your details in its Visaora agency portal, update your case status, add notes and export its leads. If the agency has turned on email alerts, it also receives a copy of your lead by email. We do not sell your data and we do not share it with other agencies.

Each agency is an independent business. Once an agency receives your data, it decides how to use it and is responsible for its own handling of your data under its own privacy notice and the laws that apply to it, including its refund terms. Please contact the agency directly with questions about how it uses your data.

You can check the status of your case on the agency's status page using your case ID and phone number. The status page shows the status only, not your answers, documents or personal details.

e) The WhatsApp and email workflow

Agency Leads does not use the WhatsApp Business API and Visaora does not send WhatsApp messages. When you tap "Send to WhatsApp", your own WhatsApp app opens with a message already written to the agency's number. The message includes your case ID, name, phone number, email (if given), destination and trip purpose, nationality, residence and permit validity, score, top risks, travel month, and the refund terms you agreed to. You can read the message before you send it, and it is only sent if you send it yourself. If you choose "Send by email", your own email app opens with the same summary in the same way.

Messages sent through WhatsApp are handled by WhatsApp (Meta) under its own terms and privacy policy, and emails are handled by your and the agency's email providers. Any later conversation on WhatsApp or email is between you and the agency.

f) Agency account data

For agencies that use Agency Leads, we collect and store:

• Agency and contact details: agency name, contact person's name, email address, WhatsApp number, city and country, website or Instagram, main destinations, and, where provided, licence number, office address, logo and brand colour, and refund terms.
• Portal login: a user account and password for the agency portal. Passwords are stored in hashed form.
• Plan and billing records: plan, billing cycle and subscription status. Paid plans are sold through our payment processor, Freemius, which processes payment details under its own privacy policy. We receive records such as the Freemius user, licence, plan and subscription IDs and the billing email. We never receive full card numbers.
• Usage reports: lead and usage totals used for the agency's portal and monthly email report.

g) How long we keep Agency Leads data

• Applicant leads: 12 months from the date you sent your result, unless you ask us to delete them earlier or the agency deletes its account.
• Agency account data: for as long as the agency account is active, and then up to 12 months after the account is closed.
• Billing and transaction records: as long as required by tax and accounting law.
• Anonymous usage counts: up to 24 months.

When an agency account is deleted, its leads and usage counts are deleted with it. Copies an agency has already received by WhatsApp, email or export are kept by the agency under its own policies.

h) Your rights

You can ask us to access, correct or delete your Agency Leads data, or withdraw your consent, by emailing support@visaora.io. Please include your case ID and the phone number you used so we can find your record. We will respond within 30 days. If you withdraw consent or ask for deletion, we will delete your lead from our systems and from the agency's portal. Because each agency is responsible for its own copies (for example, WhatsApp chats or exported files), please also contact the agency directly. You also have the other rights listed in section 7.

i) Security

We protect Agency Leads data with reasonable technical and organisational measures. Leads are visible only to the agency whose link you used and to Visaora administrators. Agency portal access requires a login. We hash IP addresses, limit repeated submissions and use spam checks. Check pages are not indexed by search engines. No method of storage or transmission is completely secure.

12. Visaora Intelligence Suite and Case File

This section explains how personal data is handled when you use Visaora Intelligence Suite tools (RiskScan, DocScan, TimeScan, CoverScan, RecoveryScan) or the Visaora Case File bundle. It applies in addition to the rest of this Privacy Policy. If anything here conflicts with another section, this section applies to those products. Agency Suite white-label reports for agencies follow the same report-generation rules; agency client data held in Agency Leads is covered by section 11.

a) What these products are

Intelligence Suite and Case File are paid informational analysis tools. They compare the facts you enter with published government requirements for a visa category and produce a scored report, document notes, timing notes, a cover-letter draft you can edit, and — where you disclosed a refusal or overstay — recovery-oriented checklists. Visaora is software only. We are not a law firm, licensed immigration adviser or government body. Reports are informational analysis, not legal or immigration advice, and do not guarantee any visa outcome. Before a full report unlocks, you must confirm that you understand this.

b) What we collect for a scan or Case File

When you run a paid scan or Case File, we process the structured answers you submit in the intake, which may include:

• Destination country and visa category, nationality, country of residence (and UAE residence details when you provide them), age, employment type and occupation.
• Income and bank-balance figures you type, trip length, purpose and travel date, family / property / travel-history answers, and a document checklist (have / missing / unsure).
• If you choose to answer them: previous visa refusal or overstay details in your own words, and any free-text notes you add.
• Technical session data needed to unlock and retrieve the report (a random session token; Freemius licence / transaction identifiers after purchase).

We do not collect passport images, national ID scans, or other identity document uploads for these tools. For the optional bank-statement helper inside CoverScan, a CSV export is parsed in your browser; only computed risk flags are sent to our servers — not the raw statement file.

c) Processing by Anthropic (Claude)

To generate the written analysis in a paid report, we send the structured intake facts (and category reference lists we attach) to Anthropic’s Claude API, which processes that data as our processor under Anthropic’s commercial terms and privacy policy. We do not use that content to train our own models. Anthropic’s handling of API data is governed by Anthropic; see Anthropic’s documentation and privacy policy for processor details.

d) How reports are stored and how long we keep them

• Primary report: after generation, your report is stored on our servers keyed by a random session token so you can unlock it, re-open it, download a PDF, or email the PDF to yourself. The primary retrieval window is up to 30 days, after which the live report expires and is deleted.
• Technical backup: a backup copy of the same report may be retained up to 90 days for support and failed-delivery recovery, then expires.
• Purchases: payment is processed by Freemius (and its payment partners). We receive transaction / licence records, never full card numbers. Those records are kept as required by tax and accounting law.

No Visaora account is required to buy or unlock an Intelligence Suite report. We do not sell your applicant or report data.

e) Legal basis

We process this data to deliver the product you purchased (contract) and to keep the service secure and prevent abuse (legitimate interests). The unlock acknowledgement records that you understand the report is informational analysis only.

f) Your rights

You can ask us to access or delete a report we still hold by emailing support@visaora.io. Include any licence key, purchase email, or session details you have so we can find the record. We will respond within 30 days. You also have the other rights listed in section 7, where they apply.

13. Changes

We may update this policy. Material changes will be posted here with a new "last updated" date.

14. Contact

Privacy questions: support@visaora.io.