1. Who we are
Consular AI is a visa intelligence platform that analyses your personal and financial information against documented embassy decision patterns to produce a probabilistic visa readiness assessment. References to "we", "us", or "Consular AI" in this policy refer to the operators of getconsularai.com.
2. What we collect
We collect the following categories of information:
- Account information: Your name and email address when you register.
- Assessment answers: Employment status, financial position, travel history, purpose of travel, and ties to your home country — provided through our wizard.
- Uploaded documents: Bank statements, employment letters, admission letters, or other supporting documents you choose to upload. These are stored encrypted in Supabase Storage.
- Payment information: We use Flutterwave to process payments. We do not store your card details — Flutterwave handles all payment data directly.
- Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. Used for security and performance monitoring only.
3. How we use your data
- To generate your visa readiness assessment and advisory report.
- To improve our machine learning model — using anonymised, aggregated outcome data only.
- To send transactional emails: account confirmation, password reset, and assessment completion.
- To process your payment and maintain your billing history.
- To respond to support requests you submit.
4. What we never do
- We never sell your personal data to any third party.
- We never share your data with embassies, visa application centres, travel agents, or immigration authorities.
- We never use your data for advertising or profiling beyond the assessment service.
- We never submit your application on your behalf — you remain solely responsible for your visa application.
5. Data storage and security
Your data is stored in Supabase (hosted on AWS infrastructure in the EU region). All data is encrypted at rest and in transit using TLS 1.2+. Uploaded documents are stored in private, access-controlled storage buckets — only you and our processing system can access them.
Row-level security policies ensure that your case data, documents, and assessment results are accessible only to your authenticated account.
6. Your rights
- Access: You can view all your assessment data in your dashboard at any time.
- Deletion: You can delete your account and all associated data by contacting us at support@getconsularai.com. We will complete deletion within 30 days.
- Correction: If any data we hold about you is incorrect, contact us and we will correct it.
- Portability: You can request an export of your case data in JSON format at any time.
7. Cookies
We use only essential cookies required for authentication (Supabase session token) and basic analytics (page views, no personal identifiers). We do not use advertising cookies or third-party tracking pixels.
8. Changes to this policy
We may update this policy from time to time. Material changes will be notified to your registered email address at least 14 days before taking effect. Continued use of Consular AI after that date constitutes acceptance of the updated policy.