Privacy Policy

When you use VisaBud, we collect:

• Email address — to create and manage your account
• Visa type, nationality, income, location — your wizard answers for personalization
• Document metadata — filenames of documents you upload (not the files themselves)
• Payment information — processed securely via Stripe (we don't store card details)
• Usage data — which pages you visit, how long you spend on each section

• To generate your personalised visa checklist, timeline, and risk assessment
• To send you email confirmations of your account and purchases
• To improve VisaBud (analyse which visa types are most used, etc.)
• To detect and prevent fraud or security breaches

We take your privacy seriously:

• All data is encrypted in transit (HTTPS/TLS)
• All data is encrypted at rest (AES-256)
• We use Supabase, a secure PostgreSQL provider, for data storage
• Payment information is processed exclusively via Stripe (PCI DSS Level 1 compliant)
• We never store your payment card details

If you're in the EU, UK, or other GDPR-covered regions, you have the right to:

• Access — request a copy of all data we hold about you
• Correction — correct inaccurate or incomplete data
• Deletion — request deletion of your account and data (right to be forgotten)
• Portability — receive your data in a portable format
• Object — object to certain types of processing

To exercise any of these rights, email hello@visabud.co.uk with your request. We'll respond within 30 days.

• Your account data is retained for as long as your account is active
• If you request deletion, we remove all personal data within 30 days
• Payment records are retained for 7 years (required by UK tax law)
• We may retain anonymised, non-personal data for analytics

• We use session cookies to keep you logged in
• We use analytics cookies (from Vercel/Supabase) to understand how users interact with VisaBud
• You can disable cookies in your browser, though this may affect functionality

We use the following third-party services:

• Supabase (PostgreSQL hosting) — Privacy Policy
• Stripe (payment processing) — Privacy Policy
• Vercel (application hosting) — Privacy Policy

These services may collect usage data as described in their own privacy policies. We recommend reviewing them.

We may update this privacy policy from time to time. We'll notify you by email if there are significant changes. Continued use of VisaBud after updates means you accept the new policy.

If you have questions about this privacy policy or our data practices:

Email: hello@visabud.co.uk

We'll respond within 7 business days.