Privacy Policy

VisaReady operates the website at visaready-eb2.pages.dev and the supporting API. The entity responsible for processing your personal data under this policy is the legal seller / controller operating VisaReady. For any privacy request, use the contact route at the end of this policy.

Open item: the legal controller entity, registered address, and tax position must be added here before public launch.

VisaReady is designed so that photo image analysis happens on your device.

• Your selected visa-photo format and the fact that you used the tool (for the service and for modest analytics).
• An email address only if you choose to provide it, for a receipt and order recovery.
• Order, payment-status (not card number), entitlement, and download information.
• Device / browser / technical logs and privacy-safe analytics events.

Uploaded photo bytes: image analysis (face detection, quality heuristics, cropping) runs in your browser using on-device technology. VisaReady does not currently send or store uploaded photo bytes on its servers. If this changes or a human-review or support upload path is added, this policy will be updated; check the effective date.

To unlock your clean download after payment without a re-upload, a small session blob is stored in your browser's sessionStorage for the current tab. It is tied to the session and cleared when the tab closes. It is not transmitted to our servers and is not part of analytics.

This is necessary for the download flow, not a marketing technology. No consent is required for it, but you should be aware that closing the tab clears it.

Payments are processed by third-party providers — currently Stripe (cards/Link), and for Vietnamese currency flows MoMo and VNPay — according to their own terms and privacy policies. VisaReady receives only the order and payment-confirmation information needed for fulfilment, refunds, fraud prevention, and accounting. VisaReady does not store raw card details.

We log limited, privacy-safe events (for example, a format was selected, a processing run completed, a checkout was opened). These events do not include your photo bytes, thumbnails, EXIF/GPS metadata, face landmarks, or derived biometric templates.

• Contract: providing the service and processing your order.
• Legal obligation: maintaining order, receipt, and tax records.
• Legitimate interests: security, fraud prevention, and modest analytics, balanced against your privacy.
• Consent: any optional analytics or marketing that requires it, separately and in advance.

For users whose personal data is processed in Vietnam, this notice serves as the pre-processing information required under relevant Vietnamese data-protection rules, and consent is obtained where that is the applicable basis.

• Browser session photo blob: the current tab session (cleared on close).
• Order and payment references: retained as needed for tax and accounting law and refund handling.
• Support correspondence and security logs: retained per an internal retention schedule.
• Analytics: kept only as long as needed and aggregated where possible.

Because we do not store your uploaded photo bytes server-side, there is no server-held image to delete. Where legal records apply, we retain only what the law requires.

Where applicable you have rights to access, correct, delete, restrict, object to, portability of your data, withdraw consent, and lodge a complaint. To exercise them, email the privacy contact below; where required we verify identity and respond within the period the law in your jurisdiction allows (generally one month for EEA/UK requests).

For privacy, data, or security questions or to make a request, email: privacy@visaready.app. If you are in the EEA/UK and remain concerned you may contact your local data-protection supervisory authority.