๐Ÿ”’ Privacy Document

Privacy Policy

This Privacy Policy explains how ApproveMyVisa collects, uses, stores, shares, and protects your personal information when you use our platform.

Last Updated: June 1, 2026 ยท Version 2.1

1 About This Policy

This Privacy Policy ("Policy") describes how ApproveMyVisa ("we," "us," "our"), a Canadian Registered Corporation, collects, uses, stores, processes, discloses, and protects personal information obtained through our website at www.approvemyvisa.com (the "Platform") and related services.

This Policy applies to all users of the Platform, including visitors, registered users, subscribers, and purchasers, wherever they are located globally.

By accessing or using the Platform in any way, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal information as described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with our Terms of Service, which govern your use of the Platform.

๐Ÿ“ Jurisdiction Note: ApproveMyVisa is operated from Canada and is subject to Canadian privacy law, including PIPEDA and applicable provincial privacy legislation. Users from the EEA, UK, California, and Australia may have additional rights under their applicable local laws, which we endeavour to respect.

2 Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

2.1 Information You Provide Directly

CategoryExamplesHow Collected
Account InformationName, email address, passwordRegistration form
Profile InformationNationality, country of residence, visa type interest, employment statusAccount setup, AI chat
Immigration InformationVisa history, refusal letters, travel history, family details, financial information you choose to shareAI assistant interactions
Payment InformationBilling name, card details (processed by Stripe โ€” not stored by us), transaction recordsPurchase checkout
CommunicationsEmails, inquiries, support requests, feedbackContact forms, email
Content You GenerateVisa questions, uploaded documents, cover letters, checklistsPlatform use

2.2 Information Collected Automatically

CategoryExamples
Usage DataPages visited, features used, time spent, navigation paths, clicks
Device InformationDevice type, operating system, browser type and version, screen resolution
Connection DataIP address, approximate geographic location, internet service provider
Cookie DataSession identifiers, preference cookies, analytics identifiers
Log DataServer logs, error reports, access timestamps, referral URLs

2.3 Information from Third Parties

We may receive information from third-party services including payment processors (Stripe), analytics providers (Google Analytics), and advertising networks providing general audience data.

3 How We Use Your Information

Platform Operation and Service Delivery

  • Creating and managing your account and profile
  • Providing AI-generated immigration information, checklists, and document assistance
  • Processing payments and maintaining transaction records
  • Delivering purchased services and generated content
  • Providing customer support and responding to inquiries

Platform Improvement and Development

  • Analyzing usage patterns to improve AI accuracy and service quality
  • Identifying and fixing technical issues, bugs, and errors
  • Developing new features, tools, and services
  • Training and improving AI models using anonymized and aggregated data

Safety, Security, and Compliance

  • Detecting, investigating, and preventing fraud, abuse, and unauthorized access
  • Enforcing our Terms of Service and other policies
  • Complying with applicable legal obligations and responding to lawful requests

Communications and Marketing

  • Sending transactional communications (receipts, account notifications, service updates)
  • Sending marketing communications about our services (with your consent where required)
  • Conducting surveys and collecting feedback to improve our services

4 Legal Basis for Processing

  • Contract Performance: Processing necessary to provide services you have requested or paid for
  • Consent: Where you have explicitly consented, such as for marketing communications
  • Legitimate Interests: Processing for security, fraud prevention, service improvement, and analytics
  • Legal Obligation: Processing required to comply with applicable legal obligations

Where we rely on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

5 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage, and serve advertising.

Cookie TypePurposeDuration
EssentialRequired for Platform functionality โ€” login sessions, security tokensSession / up to 1 year
AnalyticsGoogle Analytics โ€” understanding how users interact with the PlatformUp to 2 years
AdvertisingGoogle AdSense โ€” serving relevant advertisementsUp to 2 years
PreferencesRemembering your settings and UI choicesUp to 1 year
SecurityPreventing fraud, detecting abuse, maintaining session integritySession

You can control cookies through your browser settings. For Google Analytics opt-out, visit tools.google.com/dlpage/gaoptout.

6 Sharing Your Information

We do not sell your personal information to third parties. We share information only in the circumstances described below:

Provider TypePurposeExamples
Cloud InfrastructureHosting, databases, storageSupabase, Vercel
Payment ProcessingSecure payment handlingStripe
AI ProcessingPowering the AI assistantAnthropic (Claude)
AnalyticsUsage analysis and optimizationGoogle Analytics
AdvertisingAd serving and revenueGoogle AdSense
SecurityDDoS protection, security scanningCloudflare

We may also disclose information when required by law, to enforce our Terms of Service, prevent fraud, or protect user safety. In the event of a business transfer, your information may be transferred as part of the transaction.

โœ… We Do Not Sell Your Data. We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing or commercial purposes without your explicit consent.

7 Third-Party Services

The Platform integrates with third-party services that have their own independent privacy policies. Key services include:

8 Data Retention

Data TypeRetention Period
Account informationDuration of account + 2 years after closure
Transaction and payment records7 years (tax and legal compliance)
AI chat conversations and generated content2 years from last account activity
Analytics data (anonymized)Up to 26 months
Security and fraud prevention logsUp to 3 years

Upon account deletion, we will delete or anonymize personal information within a reasonable time, except where retention is required by law. Backup copies may persist for up to 90 days after deletion.

9 Data Security

We implement reasonable technical, administrative, and physical safeguards to protect your personal information. Our security measures include:

  • Encrypted data transmission using TLS/HTTPS protocols
  • Encrypted storage of sensitive data at rest
  • Secure authentication and session management via Supabase
  • Payment card data handled exclusively by Stripe (we do not store card numbers)
  • Cloudflare DDoS protection and web application firewall
  • Access controls limiting data access to need-to-know basis

10 Security Limitations and Liability

No method of data transmission over the internet or electronic storage is completely secure. While we implement reasonable security measures, we cannot guarantee absolute security of your information.

ApproveMyVisa shall not be liable for unauthorized access resulting from cyberattacks, internet transmission failures, or actions of third-party service providers outside our reasonable control. You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately of any suspected unauthorized access.

11 International Data Transfers

ApproveMyVisa operates globally and may transfer, store, and process your personal information in countries other than your country of residence, including Canada, the United States, and other countries where our service providers operate. By using the Platform, you consent to the transfer of your information to countries outside your jurisdiction, subject to the protections described in this Policy.

12 Your Privacy Rights

RightDescription
AccessRequest a copy of the personal information we hold about you
CorrectionRequest correction of inaccurate or incomplete personal information
DeletionRequest deletion of your personal information (subject to legal retention requirements)
PortabilityRequest your data in a structured, machine-readable format where technically feasible
ObjectionObject to processing based on legitimate interests
Withdraw ConsentWithdraw previously given consent at any time

To exercise any of these rights, contact us using the information in Section 18. We will respond within 30 days. We may need to verify your identity before processing your request.

13 Children's Privacy

The Platform is intended for individuals 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please contact us immediately and we will delete such information promptly.

14 Marketing Communications

With your consent where required, we may send marketing communications about our services. You may opt out at any time by clicking the "unsubscribe" link in any marketing email or contacting us directly. Opting out does not affect transactional communications required to operate your account.

15 AI and Automated Processing

The Platform uses AI and automated processing to generate immigration information, checklists, cover letters, and refusal analyses. Your conversations with the AI assistant may be used to generate responses, improve AI accuracy (using anonymized data), and detect misuse.

Important limitations: AI-generated outputs may contain errors or outdated information and are not a substitute for professional legal advice. ApproveMyVisa is not liable for the accuracy of AI-generated content.

16 Google AdSense and Advertising

The Platform uses Google AdSense to display advertisements. Google AdSense may use cookies to serve ads based on your prior visits to this and other websites. You may opt out of personalized advertising by visiting Google Ads Settings. Advertisements are served by Google and subject to Google's Privacy Policy.

17 Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will update the "Last Updated" date when changes are made. For material changes, we will make reasonable efforts to notify you via a prominent notice on the Platform or by email. Your continued use of the Platform after changes constitutes acceptance of the updated Policy.

18 Contact and Privacy Requests

For privacy-related inquiries, data access, correction, or deletion requests, please contact us:

ApproveMyVisa โ€” Privacy Inquiries

Canadian Registered Corporation

Calgary, Alberta, Canada

Email: [email protected]

Subject line: Privacy Request โ€” [Your Request Type]

We aim to acknowledge privacy requests within 5 business days and resolve them within 30 calendar days.

โš ๏ธ ApproveMyVisa is not a law firm and does not provide legal advice. Not a Regulated Canadian Immigration Consultant (RCIC). AI information and document preparation platform only. Canadian Registered Corporation ยท Calgary, Alberta, Canada.