კონფიდენციალურობის პოლიტიკა

1. Who We Are

Myvisa ("we," "our," or "us") is a company registered in Georgia that develops tools to simplify visa‑application paperwork, such as the U.S. DS‑160 form.

Contact us at [email protected]

2. Information We Collect

Category	Examples	Purpose
Account Data	Name, email, phone number, hashed password, preferred language	Create and manage your VisaForm account
Identity & Travel Data	Passport details, address history, employment/education, social media IDs, travel history, security‑related answers, photo	Auto‑fill official visa forms; schedule consular appointments
Interview Scheduling Data	Confirmation number, payment reference, appointment date/time, DS‑160 barcode	Display upcoming appointments; send reminders
Device & Usage Data	IP address, device model, OS version, crash logs, interaction events	Improve performance, detect fraud, debug issues
Cookies (website)	Session cookies, analytics cookies	Maintain login, measure site traffic

You may choose not to provide certain information, but this may limit core features (e.g., auto‑filling the DS‑160).

3. How We Use Your Data

Form Automation – populate, validate, and store visa forms so you can review, edit, and resubmit quickly.
Interview Booking – submit required details to government portals to reserve an appointment slot.
Profile Re‑use – save your answers securely so future forms can be generated in one tap.
Notifications – send status updates, reminders, and critical alerts.
Customer Support – respond to questions, troubleshoot issues, and verify identity.
Legal & Security – detect fraud, comply with sanctions, and satisfy lawful requests.
Analytics – aggregate usage statistics to improve features (privacy‑enhanced, no full DS‑160 answers).

Legal bases: contract performance, legitimate interests, and (where required) your consent.

4. Sharing Your Data

We do not sell your data. We share it only:

With Consular & Government Websites when you choose to submit a form or book an interview.
With Service Providers (cloud hosting, payments, support, analytics) under strict confidentiality agreements.
With Law‑Enforcement or Regulators when required by law or to protect rights, property, or safety.

5. International Transfers

Our servers are located in the European Union and United States. Transfers are protected under Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. How Long We Keep Your Data

We retain your data for as long as you have an account and we have consent to keep it.

You can delete your account at any time in the App (Settings → Delete Account). Personal data is erased from active systems within 7 days;

7. Security Measures

Encryption in transit (TLS 1.3) and at rest (AES‑256).
Zero‑knowledge password hashing (Argon2).
Role‑based staff access (least privilege).
Annual penetration tests & independent code audits.
Bug‑bounty program for responsible disclosure.

No system is 100 % secure; we cannot guarantee absolute protection.

8. Your Rights

Depending on your location, you may have the right to:

Access a copy of the personal data we hold.
Correct inaccurate or incomplete data.
Delete your data (“right to be forgotten”).
Object to or restrict certain processing.
Port your data to another provider.
Withdraw consent at any time.

Or you can delete your account at any time in the App (Settings → Delete Account).

9. Children’s Privacy

Our Services are not directed to children under 13. If we learn we collected personal data from a child without verified parental consent, we will delete it promptly.

10. Third‑Party Links

Our website may link to external sites we do not control. This policy does not cover their practices; review their privacy statements.

11. Changes to This Policy

We may update this policy from time to time. We will notify you by in‑app message or email at least 7 days before material changes take effect. Continued use after that date means you accept the revised policy.

12. Contact Us

Questions or concerns? Contact us at: [email protected].