What we collect, why, how long it lives, and how to have it erased. Short, because it is simple.
Never sell or share your data with marketers. Never pre-tick a marketing consent. Never require contact details to show you a visa answer. Never store passport scans on public URLs — client documents live in private storage with expiring, signed, per-user access.
Stored privately with encryption at rest, allowlisted formats, size limits and random object keys. Access is per-user and logged. Retention is scheduled: documents tied to completed plans are deleted on schedule, and deletions are recorded in an immutable audit trail.
Ask for a copy or erasure of anything tied to your email via the contact form — we verify identity, then act within 30 days. WhatsApp opt-in is separate, explicit and revocable by replying STOP.