Privacy

You are handing us passports, diplomas, employment records and a detailed account of your career. That is unusually sensitive material, and the way we treat it should be legible to you rather than buried. This page describes what we actually do.

What we collect

• Account data. Email address, and a name if you give one. We use magic links by default, so most accounts have no password.
• Case data. Everything you enter about your education, employment, publications, achievements and proposed endeavor.
• Documents. Files you upload to your evidence vault, and text extracted from them so we can check your record for internal contradictions.
• Assessment history. Your questionnaire answers and the findings produced from them, retained as versions so you can see your record strengthen.
• Access logs. Every view and download of every document, with actor, timestamp, and IP address. This exists to give you a verifiable chain of custody over your own evidence.

If you use the free assessment without an account, we store your answers against an anonymous identifier and no name. You can complete it without giving us an email address at all.

How documents are protected

• Files are stored in a private bucket, encrypted at rest with AES-256, and are never publicly addressable.
• Access is issued as short-lived signed URLs valid for about a minute, generated only after an authorization check.
• Particularly sensitive identifiers, passport numbers, A-numbers, tax and social security numbers, are additionally encrypted at the column level, so they are unreadable even to someone holding a database dump.
• We record a cryptographic hash of every uploaded file, so tampering would be detectable.
• Data in transit is protected with TLS 1.3.

Who can see your case

By default, only you. Beyond that, exactly two other paths exist and both require an act by you.

• Attorneys, only after you accept a proposal. If you choose to use the marketplace, attorneys see a redacted summary with your name, employer, institution and country removed. They gain access to your full case only when you accept one of their proposals, and that moment is logged.
• Recommenders, only for their own letter. Someone you ask for a recommendation receives a single-use expiring link that shows the draft of their letter. They cannot see your evidence vault, your assessment, or any other letter.

Our own staff do not have ambient access to your documents. Support and moderation roles can reach case metadata to help you, but the system refuses to serve them document contents; that restriction is enforced in code and covered by tests, not by policy alone.

Processors we use

We keep this list short deliberately, and we do not sell or rent your data to anyone, ever.

• A cloud host and managed Postgres database, for the application.
• Object storage, for your documents.
• An AI provider, for drafting and assessment. Text you submit for these features is sent to that provider to generate the output. Your uploaded documents are not used to train anyone’s models.
• An email provider, for sign-in links and notifications. Case contents are never put in an email.
• A payment processor, if you subscribe. We never see or store your card number.

Retention and deletion

You can delete any document at any time, and you can delete your entire account from settings. Deleting your account removes your case data, documents, drafts and assessments.

Two things survive deletion, for reasons worth stating: access logs are retained because their whole purpose is to be an immutable record of who touched your evidence, and any anonymous screener statistics already aggregated cannot be traced back to you to remove. If you had an engagement with an attorney, that attorney may retain their own copy of your file under their professional obligations; that copy is theirs and outside our control.

Your requests

Ask us for a copy of your data, a correction, or a deletion, and we will act on it. Depending on where you live you may have additional rights under the GDPR or California law; we apply the same process to everyone regardless.

A note on immigration data specifically

We collect the minimum needed to prepare a petition, and we do not voluntarily share case data with any government agency. If we were ever compelled by valid legal process, we would notify the affected user unless prohibited from doing so.