Privacy Policy

What we collect

Account details (name, email), the information you provide during intake, and the documents you upload (which may include identity and financial documents such as passports and bank statements). We also collect basic usage analytics that do not contain your document contents.

How we use it

To help you prepare your visa application: structuring your information, verifying documents, and generating a readiness assessment and supporting drafts. We do not sell your personal information. We do not use your documents to make decisions about you.

Where it is stored

Your data is stored with our infrastructure providers (including Supabase) under access controls and encryption. Where required, data for users in a given region is kept within that region. Documents are processed only to provide the service.

Retention and deletion

You can export or delete your data at any time from your profile page. We honor data-subject rights under PIPEDA (Canada) and the GDPR (EU/UK), including access, correction, and erasure, subject to limited legal retention exceptions.

The VisaAI Portal Assistant (Chrome extension)

This section was updated on 2026-10-15 to describe version 0.1.7 of the extension. It is pending owner and legal review.

The optional browser extension works only on Canada’s IRCC online portal (canada.ca and cic.gc.ca pages); no other government portal is supported. It enters nothing until you have approved the answers for your application in VisaAI and started the fill from your application’s submission page, and it ignores any fill that was not started with that approval. It then checks the portal page open in the tab you are using: if any expected field is missing, nothing is entered. Only when every expected field is present does it enter your approved answers, and it reads each field back to check that what was written matches what you approved.

The contents of the portal page are not sent to VisaAI. The extension sends data to VisaAI only over its connection to our servers, and sends: the one-time approval you gave; a single-use session token that connects it to your VisaAI session, and, if the connection drops, a resume token our servers issued to reconnect it (kept only in memory while the side panel is open); which IRCC page is open (the page’s path, without the application numbers in its address); for each expected field, whether it exists on the page (yes or no); and for each field it entered, whether it matched, the reason if it did not, and a one-way (SHA-256) hash of the value it read back. The approval it receives from VisaAI, and each instruction to enter a field, contain the answers you approved (for example your name, date of birth and passport number). Until you open the extension’s side panel, that hand-off — the session token, the VisaAI server and portal addresses, and the approval — is kept in your browser’s local extension storage; it is deleted when the side panel reads it, and in any case after 5 minutes.

To enter your approved answers the extension selects answers (radio buttons and check boxes) and adds table rows with the form’s own Add and Save buttons. It never presses “Save and continue” or any button that leaves the page, and never uploads files, signs, pays, or submits your application. Signature, payment and submission are always yours to do. You can remove it at any time from your browser’s extensions page; nothing in your VisaAI account depends on it.

Contact

For privacy requests, contact us through the in-app support channel.