Skip to main content

Privacy

What we collect, why, how long it lives, and how to have it erased. Short, because it is simple.

What we collect

What we never do

Never sell or share your data with marketers. Never pre-tick a marketing consent. Never require contact details to show you a visa answer. Never store passport scans on public URLs — client documents live in private storage with expiring, signed, per-user access.

Documents you send us

Stored privately with encryption at rest, allowlisted formats, size limits and random object keys. Access is per-user and logged. Retention is scheduled: documents tied to completed plans are deleted on schedule, and deletions are recorded in an immutable audit trail.

Your controls

Ask for a copy or erasure of anything tied to your email via the contact form — we verify identity, then act within 30 days. WhatsApp opt-in is separate, explicit and revocable by replying STOP.