Last updated: August 17, 2026
This Privacy Policy explains how Universal Reason Inc. (“VisaBook,” “we,” “us,” “our”), located at 75 E 3rd St, Sheridan, WY 82801, collects, uses, and protects your information when you use visabook.co and related services (the “Service”). For our GDPR-specific disclosures (legal bases, subprocessors, international transfers), see our companion Data Processing & GDPR Compliance page.
Account information: name, email, and authentication details (via Email, Google, or Magic Link sign-in through OpenAuth).
Profile information: date of birth, nationality, citizenship(s), declared residency/residencies, work type, occupation, and yearly income — all provided by you to power personalized visa search and checklists.
Dependent information: if you add a spouse, child, or other dependent to your account, we collect similar information about them as you provide it.
Documents: passports, bank statements, employment letters, and other files you upload, whether classified by type or shared casually (e.g., in AI Chat) before classification.
Case information: the destinations and visas you’re pursuing, checklist progress, and a snapshot of your qualifying details at the time each case is created (so later profile edits don’t retroactively change an already-started case).
Payment information: handled entirely by Stripe, Inc. We do not receive or store your full card number; we retain only what Stripe provides us for account/subscription management (e.g., subscription status, last four digits of a card, billing history references).
Usage information: search queries, pages visited, in-app navigations, approximate time on site, bounce behavior, traffic source, and country of origin, used for first-party product analytics and to understand demand across destinations and visa types.
AI Chat and Document Validation interactions: the questions you ask and documents you share with our AI Consultant.
We do not sell your personal information. We do not share your Profile or Documents with immigration agencies or any third party for their own marketing purposes. (VisaBook’s Agency Marketplace feature, which would involve sharing case information with a licensed immigration agency you choose to engage, is not part of the current Service and will have its own explicit consent flow if and when it launches.)
We process your information based on: performance of our contract with you (providing the Service you signed up for), your consent (e.g., optional PostHog product analytics), and our legitimate interests (such as first-party service analytics, improving the Service, and preventing fraud), balanced against your rights. See our Data Processing & GDPR Compliance page for the specific legal basis attached to each processing activity.
We use Claude, an AI model, accessed through Amazon Bedrock, under a Data Processing Agreement with Amazon Web Services. Standard Bedrock API calls are processed without being used to train underlying models. Depending on configuration and model version, some data may be retained by our infrastructure providers for a limited period for operational purposes (e.g., abuse monitoring) — we configure the strictest retention settings available consistent with providing the Service.
We also use the following categories of sub-processors:
A full, current sub-processor list is maintained on our Data Processing & GDPR Compliance page.
Some information you provide — nationality, citizenship, immigration status, and documents like passports — is inherently sensitive. We handle it with particular care: encrypted storage, access controls limited to what’s needed to provide the Service, and we do not use it for advertising or share it with data brokers. Where a jurisdiction’s law treats certain categories (e.g., data revealing racial or ethnic origin, or biometric data) as requiring heightened protection or explicit consent, we obtain that consent before the relevant processing.
We retain your Profile, Documents, and Case information for as long as your account is active, plus a reasonable period after account deletion to comply with legal obligations or resolve disputes. Documents you share but never classify or link to a Case (e.g., a photo dropped into AI Chat) are subject to a shorter default retention window and may be automatically deleted if left unclassified and unlinked. You can request earlier deletion at any time (see Section 8).
VisaBook and its sub-processors may process your information outside your home country, including in the United States and the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers. See our Data Processing & GDPR Compliance page for jurisdiction-specific detail.
Depending on your location, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion; request a copy of your data in a portable format; object to or restrict certain processing; and, where applicable, lodge a complaint with a data protection authority.
To exercise any of these rights, contact us at info (at) visabook (dot) co. We will respond within the timeframe required by applicable law.
California residents: you have rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information (which includes passport numbers and financial account details under California law). We do not sell or share your personal information as those terms are defined under California law.
VisaBook is not directed at children, and we do not knowingly collect information directly from anyone under 18. A minor’s information may appear only as a Dependent Profile managed by a parent or guardian’s own account, and a minor does not independently create or control a VisaBook account.
We use authentication/session cookies, referral-attribution cookies, and — only after you opt in through the cookie banner — PostHog product analytics cookies or local storage. Separately, VisaBook uses limited first-party analytics without cookies or persistent local storage: a temporary tab-scoped session identifier in session storage, page views, navigations, approximate time on site, bounce behavior, country of origin, traffic source, and a daily-rotating HMAC IP signature. If you sign up or sign in, the current tab session may be linked to your account so we can show the page you arrived on and the pages visited in that signup session. We do not store raw IP addresses. PostHog helps us understand page views, clicks, and feature usage; it is not used for advertising or retargeting. For signed-in users, we send the account ID and email as person properties to connect PostHog usage across sessions. We do not sell data collected through cookies, local storage, or first-party analytics. See our Cookie Policy to review or change your PostHog choice.
We use industry-standard measures to protect your information, including encryption at rest and in transit and access controls limiting who can view Documents and Profile data. No system is perfectly secure, and we encourage you to use a strong, unique password and enable any additional account protections we offer.
We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date, and for material changes, provide additional notice.
Universal Reason Inc. 75 E 3rd St, Sheridan, WY 82801 info (at) visabook (dot) co