Privacy Policy

Your privacy is fundamental to this service. This policy explains what we collect, why, and how it is protected — in compliance with India's Digital Personal Data Protection Act 2023 (DPDP Act) and GDPR principles.

1. Data we collect

• Identity: Full name (as on passport), email, WhatsApp phone number.
• Passport scan: Front-page image/PDF, uploaded by you.
• Payment metadata: Razorpay transaction ID and amount. We never see your card number.
• Technical: IP address, browser type, timestamps — used only for security and rate-limiting.

2. Why we collect it

• To submit your visa application to UAE ICP.
• To send you visa status updates over WhatsApp and email.
• To prevent fraud, abuse, and bot submissions.
• To comply with Indian tax and regulatory obligations.

3. How long we keep it (auto-purge)

• Passport scans: automatically deleted within 24 hours of visa issuance.
• Visa PDF: retained for 6 months in case you need to redownload it.
• Transaction records: retained for 8 years per Indian tax law.
• Marketing data: we do not collect any.

4. Security

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Passport scans are stored in a private, encrypted bucket with signed-URL access only.
• Access is limited to ICP-verified processing agents, with audit logging on every read.
• Infrastructure is hosted on SOC 2-audited providers (Vercel, Supabase).

5. Sharing

We share your passport scan and basic details only with UAE ICP for visa processing. We do not sell, rent, or share data with marketers, advertisers, or any third party.

6. Your rights under DPDP Act 2023

• Request a copy of your data.
• Request correction of inaccurate data.
• Request deletion (subject to legal retention).
• Withdraw consent at any time.

To exercise these rights, email our Grievance Officer at grievance@visa.digitalshijil.com. We respond within 30 days as required by law.

7. Cookies

We use only essential cookies required for the site to function. No tracking cookies. No third-party advertising cookies.

8. Children

The service is intended for users 18 and above. We do not knowingly collect data from minors without parental consent.

9. Changes

If we change this policy materially, we will notify active users by email.