PRIVACY POLICY

1. Information We Collect

We collect information necessary to facilitate travel authorizations, process applications, and improve our services. We distinguish between data provided by Travelers (End-Users) and data received from Partners (Agencies/Corporates).

A. Information You Provide Directly

When you use our Services to apply for a visa, ETA, or travel authorization, or interact with our support tools, we may collect:

• Identity Data: Full name, date of birth, gender, nationality, and residency.
• Travel Document Data: Passport details (number, issuance/expiry dates), national ID numbers, and uploaded copies of passports or IDs.
• Biometric Data: Facial images extracted from passport scans, used solely for identity verification or government submission requirements.
• Trip Data: Travel itinerary, arrival/departure dates, flight numbers, accommodation details, and purpose of travel.
• Contact Data: Email address, phone number, and physical address.

B. Information Provided by Partners (B2B)

If your application is managed by a Travel Agency, OTA, or Corporate Travel Manager using YourVisa.ai, we receive your data directly from them. In these instances, we process your information in accordance with our agreement with that Partner.

C. Automatically Collected Information

When you interact with our platform, we may automatically collect:

• Device & Usage Data: IP address, browser type, operating system, device identifiers, click paths, and access times.
• AI Interaction Data: Inquiries made to our automated assistants, system responses, and language preferences.

2. How We Use Your Information

We do not sell your personal data. We use the information we collect to:

• Provide the Services: Determine visa requirements, prepare and submit applications to government authorities, and track application status.
• Process Transactions: Facilitate payments for government fees and service charges.
• Security & Safety: Verify identity, detect fraudulent activity, and protect the integrity of our platform.
• Communicate: Send application updates, deliver approved travel documents, and respond to support requests.

3. Legal Basis for Processing

Depending on your location, we process personal data under the following legal bases:

• Contractual Necessity: Processing is required to fulfill your request for travel documentation services.
• Consent: You provide consent when uploading documents or agreeing to our Terms of Service.
• Legal Obligation: We are required to comply with government border control regulations and financial record-keeping laws.
• Legitimate Interest: To improve our services, prevent fraud, and ensure network security.

4. Payment Information and Security

To protect your financial information, we utilize third-party payment processors that adhere to industry security standards.

• No Storage of Full Card Details: We do not store full credit card numbers, CVV codes, or magnetic stripe data on our internal servers.
• Secure Processing: Payment data is transmitted directly to payment processors via encrypted connections.
• Compliance: We select payment providers that maintain Payment Card Industry Data Security Standard (PCI-DSS) compliance.
• Transaction Records: We retain limited payment information (e.g., transaction IDs, billing country, last 4 digits) only as needed for tax compliance, refunds, and dispute resolution.

5. AI and Automated Tools

We utilize Artificial Intelligence (AI) and optical character recognition (OCR) technologies to assist in interpreting travel rules, extracting data from documents, and validating applications.

Disclaimer: AI tools are provided for informational and assistance purposes. While we strive for accuracy, automated outputs may not reflect real-time changes in government policy. Final decisions regarding visa issuance and entry are made solely by the respective Government Authorities.

6. How We Share Information

We share your data only as reasonably necessary to provide the Services or as required by law:

• Government Authorities: We submit your personal and travel data to the immigration, border control, or consular authorities of your destination country as part of the application process. Once data is submitted to a government entity, it becomes subject to that government's privacy and retention policies.
• Partners: If you applied via a travel agency, corporate portal, or integration partner, we share application status and results with that entity.
• Service Providers: We engage third-party vendors for services such as cloud hosting, payment processing, and customer support. These vendors are authorized to use your data only as necessary to provide these services to us.
• Legal Requirements: We may disclose information if required by a subpoena, court order, or law enforcement request, or to protect our rights and safety.

7. International Data Transfers

Due to the nature of international travel services, your data must be transferred globally.

• Transfer to Governments: Your data will be transferred to the government systems of your destination country to process your visa or travel authorization.
• Cross-Border Processing: Our servers and service providers may be located in jurisdictions outside your country of residence. We implement appropriate safeguards, such as standard contractual clauses, where required for cross-border transfers.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:

• Service Delivery: Retaining application data until the travel date and a reasonable period thereafter for support.
• Legal Compliance: Retaining financial and transaction records as required by tax and accounting laws.
• Data Minimization: We endeavor to minimize the storage of raw identity document scans once the necessary data has been extracted and the application process is complete, unless otherwise requested by the user or Partner.

9. Your Rights

Depending on your jurisdiction, you may have specific rights regarding your personal data, which may include the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (subject to legal retention requirements).
• Restrict or Object to certain processing activities.
• Withdraw Consent where processing is based on consent.

To exercise these rights, please contact us at privacy@yourvisa.ai. Please note that we may require identity verification before fulfilling certain requests.

10. For Agencies & Corporate Partners

If you are a Travel Agency, OTA, or Corporate Client using our platform to process applications for your customers or employees:

• Data Processing Role: In the context of our agreement, you generally act as the Data Controller, and Voyzo Inc. acts as the Data Processor.
• Partner Obligations: You represent and warrant that you have obtained all necessary consents and legal bases to collect and share the End-User's personal data with us for the provision of the Services.
• Data Isolation: We implement logical separation measures designed to ensure that data associated with your account is not accessible to other agency partners.

11. Security Measures

We implement technical and organizational measures designed to protect your personal data from unauthorized access, loss, or misuse. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no internet-based service can be guaranteed to be 100% secure, and we cannot ensure or warrant the absolute security of any information you transmit to us.

12. Children's Privacy

Our Services are not intended for use by children under the age of 18 acting independently. We process data of minors only when submitted by a parent, legal guardian, or authorized travel agent for the purpose of a family or group travel application.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page indicates when the latest revisions were made. Your continued use of the Services after such changes constitutes your acceptance of the updated policy.

14. Contact Information

If you have questions or concerns regarding this Privacy Policy or our data practices, please contact us: