Privacy Policy

Last updated: June 2026

This policy explains what data VisaPathFinder collects when you use visapathfinder.com, why we collect it, and how to remove it.

What we collect

When you generate a report, we store:

• Your intake answers: the questions you answered in the wizard (target countries, goal, current immigration status, nationality, current country, age band, education, years of experience, role, employer, awards/publications/press signals, household size, etc.).
• Your CV text (only if you uploaded one): the extracted text content. We do not store the original PDF or image file.
• The generated report: the ranked visa list, fit scores, narrative text, and metadata.
• Your email address from Stripe (only after payment): Stripe forwards the email you used at checkout. We store it on the evaluation record so we can identify you if you contact support. We do not send marketing emails.
• A hashed IP (SHA-256, truncated to 16 hex characters) for per-IP rate limiting. We do not store raw IP addresses.

That is the full list.

What we do not collect

• We do not require an account, password, or phone number.
• We do not ask for passport scans, visa numbers, or sensitive immigration documents.
• We do not track you across sites with third-party advertising cookies.
• We do not use analytics tools that set persistent identifiers in the browser.

How we use it

• To generate the report: the intake and CV text are sent to Anthropic's Claude API to produce the narrative portion of the report. Anthropic's privacy policy applies to that transit.
• To process payment: Stripe handles checkout. We never see your card details.
• To rate-limit abuse: the hashed IP lets us cap repeat requests from the same source.
• To support you: the Stripe email lets us find your record if you write to support.

Who we share with

We do not sell your data. We share it only with the providers we need to operate the service:

• Anthropic (United States): runs the language model that writes the report narrative. Receives your intake + CV text at generation time.
• Stripe (United States): processes payment.
• Neon (United States): hosts our PostgreSQL database where the evaluation row lives.
• Vercel (United States): hosts the application.

Each of these has their own privacy policy and security posture. We send only the minimum data each needs to do its job.

We do not share your data with USCIS, UKVI, IRCC, the Department of Home Affairs, or any other immigration authority.

How long we keep it

By default we keep the evaluation row indefinitely so your bookmark URL keeps working.

You can delete it at any time, immediately and irreversibly, at the deletion URL printed at the bottom of your results page (/pathfinder/[id]/delete?token=...). This removes the intake, CV text, report, email, and hash from our database. After deletion, your bookmark URL stops working.

Stripe retains payment records for its own legal compliance purposes; we cannot delete those on Stripe's behalf.

Your rights

Depending on where you live (EU/UK GDPR, California CCPA, etc.), you have one or more of the following rights:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete the data (which you can also do yourself via the deletion URL above).
• Object to certain processing.
• Portability: receive an export of your data.

Email privacy@visapathfinder.com with your evaluation ID to exercise any of these rights. We respond within 30 days.

Security

• All traffic to and from visapathfinder.com is over HTTPS.
• The Neon database and Stripe both store data encrypted at rest.
• We hash IPs (one-way SHA-256) before storing them.
• We follow a least-privilege model for production credentials.

We are a small operation and do not claim formal SOC 2 or ISO 27001 certification. We hold ourselves to the same hygiene as those standards but without the auditor signoff.

Children

VisaPathFinder is for adults considering immigration. We do not knowingly collect data from anyone under 16. If you believe we have, email privacy@visapathfinder.com and we will delete it.

Changes to this policy

We will update the "Last updated" date at the top of this page when we change anything. If a change materially affects how we handle existing data, we will surface a notice on visapathfinder.com.

Contact

Privacy questions, data requests, or complaints: privacy@visapathfinder.com.