Privacy policy

Effective October 11, 2026 · Version 2026-10-11

1. Who is responsible2. What we collect3. Why we use it (and legal bases)4. Who we share it with5. International transfers6. How long we keep it7. Security8. Your rights9. Cookies and local storage10. Children11. Changes12. Contact

1. Who is responsible

VisaPass (operating company to be named), Business address to be published before online checkout opens (“VisaPass”, “we”) is responsible for the personal data described here. Privacy questions and requests: hello@visapass.store.

2. What we collect

• Identity and passport data: names, date and place of birth, sex, nationality, passport number and dates, occupation.
• Travel details: destination, dates, address at destination, purpose of trip.
• Documents and photos you upload (passport bio page, photo, bookings).
• Contact details: email and phone.
• Order and payment data from Whop, our payment platform: name, email, amount, plan, payment reference and card brand / last four digits. We never receive your full card number.
• Account and service records: sign-in times, IP address, browser / device information (user agent), pages viewed in your account, form saves, uploads, downloads, your acceptance of our Terms, emails we send you and their delivery status, and status changes on your order.
• Messages you send us.

3. Why we use it (and legal bases)

• To provide the service (contract): prepare, review, submit and track your application and deliver the result.
• Security, fraud prevention and proof of service (legitimate interests): protect accounts, detect misuse, and show that the service was ordered and delivered, including when responding to a payment dispute.
• Legal obligations: tax, accounting and lawful requests.
• Service messages: order emails and updates. We do not send marketing without your consent.

4. Who we share it with

• The issuing government authority, through its official channel: that is the purpose of the service.
• Whop and its payment processors, to take payment, handle refunds and, if a dispute is opened, to review the records of the service you received.
• Our hosting and email providers, under confidentiality and data-processing terms.
• Professional advisers, and authorities where the law requires it.

We do not sell your personal data or share it for cross-context behavioral advertising.

5. International transfers

VisaPass (operating company to be named) operates from the United States and the authorities we submit to are in other countries. Where data protection law requires it, we use appropriate safeguards (such as standard contractual clauses) for transfers.

6. How long we keep it

• Application data and uploaded documents: up to 12 months after your order is completed, then deleted (sooner on request if no longer needed).
• Delivered documents: available in your account for 12 months.
• Order, payment and service records (including activity logs, emails sent and acceptance records): 3 years, for accounting, legal claims and payment disputes, which can be raised long after purchase.

7. Security

All traffic is encrypted with TLS. Uploaded documents are stored outside the public website and are only available to you and authorized staff after sign-in. Sign-in links are single-use and expire; passwords are stored as one-way hashes. No method is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires.

8. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law), you can ask to access, correct, delete or receive a copy of your data, object to or restrict some uses, and withdraw consent. California residents can also ask what we collect and disclose, and will not be discriminated against for exercising their rights. Email hello@visapass.store; we will verify your request and reply within the time the law requires (usually 30 to 45 days). We may keep records we must retain by law or need to defend legal claims. You can also complain to your data protection authority.

9. Cookies and local storage

We use one essential cookie to keep you signed in to your account. The apply form saves your progress in your own browser (local storage) until you finish. We do not use advertising cookies or third-party trackers.

10. Children

The service is not directed at children under 16. A parent or legal guardian may apply on behalf of a minor traveler.

11. Changes

We will post updates here and change the version and effective date above. Material changes will be shown to you at your next sign-in.

12. Contact

VisaPass (operating company to be named) · Business address to be published before online checkout opens · hello@visapass.store