Visadify

Last updated: September 11, 2026

This Privacy Policy explains how Visadify collects, uses, stores, retains, and shares information when you use the Visadify website, dashboard, services, and Visadify, our Chrome and Microsoft Edge extension. It also explains the choices available to you and how to contact us.

By using Visadify, you acknowledge this policy. Where applicable law requires consent, we will request it before collecting or using the relevant information.

Information We Collect

Account, contact, and authentication information

When you create or use a Visadify account, we collect information such as your name, email address, password or authentication-provider identifier, account preferences, organization membership, and authentication and security events. We do not receive or store your third-party authentication provider password.

If you sign in through Google or another supported provider, that provider shares the account information needed to authenticate you, such as your name, email address, and provider account identifier.

Migration and profile information

Visadify is designed to organize visa and migration work. Depending on the features you use, you may provide information including:

Date of birth, nationality, identity details, passport or identity-document information, and contact details.
Visa history, travel history, education, employment, English-test results, skills assessments, relationships, household-member information, and other migration-profile details.
Uploaded documents, document metadata, extracted information, case details, questionnaires, tasks, journeys, messages, community posts, and other information you choose to store or share.
Agency client, case, quote, invoice, consultation, and payment information where you use those services.

Some migration information and documents may be sensitive personal information. Only provide information that is necessary for your use of Visadify and only share it with an agency, collaborator, or community audience when you intend to do so.

Information collected automatically on the website

When you use the website, we may collect your IP address, browser and device type, operating system, pages or features used, approximate access times, referring pages, error information, and security or fraud-prevention signals. We use cookies and similar technologies for authentication, security, session management, preferences, analytics, and essential service operation. See our Cookie Policy for more information.

Visadify browser extension

Visadify has one purpose: after you choose to use it on a webpage, it helps match eligible fields on a visa or migration form to information in your Visadify profile and can fill the matched fields for your review. It does not submit applications and does not fill passwords, payment fields, one-time passwords, CAPTCHA, multi-factor authentication, or file-upload controls.

What the extension collects and processes

The extension does not passively monitor your browsing. It accesses the active page only after you open the extension and choose an action such as detecting a form, viewing profile data, filling a field, or using the assistant. When you choose to inspect a page, the extension may process and send to Visadify:

The page URL or origin, page title, and limited visible page text.
Form-field metadata such as field labels, control types, required state, options, and field locations.
The current value of an eligible form field when needed to match or display a mapping. The extension filters common password, payment, one-time-code, CAPTCHA, token, and file-upload fields, but no automated filter can recognize every sensitive field on every website. Do not use the extension on a page if you do not want its eligible form content processed.
The Visadify profile subject, case, or household member you select, together with the profile information that you are authorized to view or use.
Your assistant questions and, if you leave the option enabled, limited page context consisting of the page title, a sanitized URL, and limited visible page text.

The extension may also collect operational records such as the selected site origin, a form signature, the number of fields analyzed, mapping choices, fill-success or failure results, profile-view events, and the date and time of these actions. These records help provide the feature, protect accounts, troubleshoot errors, and maintain an audit trail.

The extension does not collect your general browsing history, mouse movement, keystrokes, passwords, browser cookies, payment credentials, or files. It reads the active tab URL as needed to identify the page you selected; it does not read a list of pages you have visited.

How extension data is used

We use extension data to:

Identify eligible fields and match them to approved Visadify profile fields.
Show you the profile information you selected and fill only the fields you approve or request.
Provide the optional assistant and answer questions using your messages, selected Visadify profile context, and optional page context.
Save mappings that you ask the extension to remember for the same site and form, so future matching can be faster.
Record security, access, usage, billing, and audit events; enforce agency permissions; prevent abuse; and maintain the extension and services.

Profile data displayed in the extension is limited by the sharing permissions on the relevant Visadify profile, agency relationship, and case. If you use the extension while connected to an agency, agency staff may be able to access the profile or case data that you have authorized them to access under that relationship.

Extension storage and retention

The extension stores its short-lived authentication token and extension-session identifier in Chrome or Edge session storage so it can communicate securely with Visadify. Selected profile values, page snapshots, and page content are held in extension memory while needed and are not written to persistent extension storage. Signing out clears the extension session data, and server sessions expire or may be revoked from Visadify settings.

For form analysis, Visadify stores limited operational metadata and the mapping result associated with your account, session, and selected site. The complete page snapshot is not stored as a form-analysis database record after processing, although limited page or form information may be processed temporarily by our service providers as described below. Saved mappings remain until you delete them, revoke the extension session, delete your account, or we delete them in accordance with our retention practices.

Assistant conversations are saved to your Visadify account when the assistant feature saves them and remain until you delete them or delete your account. Security and audit records may be retained for as long as reasonably necessary to protect the service, investigate abuse, resolve disputes, and meet legal or regulatory obligations.

Extension permissions and website access

The extension requests browser permissions needed for its single purpose:

activeTab and tabs to identify the active page that you selected.
scripting to inspect eligible form controls and fill approved values on the selected page after you request it.
sidePanel to display the Visadify interface.
identity to complete the secure Visadify sign-in flow.
storage to store the short-lived extension session in browser session storage.

Website access is requested only for a site that you choose to inspect. You can deny that access or remove it through your browser’s extension settings. If you deny access, form detection and filling will not work on that site, but the other parts of the extension may remain available.

How We Use Information Generally

We use information to:

Provide, operate, secure, maintain, and improve Visadify and its browser extension.
Create and manage accounts, organization relationships, cases, journeys, documents, quotes, invoices, consultations, and payments.
Provide customer support and send service, security, account, transaction, and product communications.
Process payments, subscriptions, credits, refunds, and related accounting.
Provide personalized migration organization features and, when you request them, AI-assisted matching, chat, summaries, or recommendations.
Enforce permissions and sharing choices, investigate misuse, prevent fraud, and protect the rights, safety, and security of Visadify and its users.
Comply with legal obligations and respond to lawful requests.

We do not use Visadify page or profile data for advertising, sell it, or use it to build an advertising profile. We do not sell personal information.

When We Share Information

We share information only as described below and only to the extent reasonably necessary for the stated purpose.

Service providers

We use trusted service providers that process information on our behalf, including providers for:

Hosting, databases, application monitoring, security, and cloud infrastructure.
File and document storage, including S3-compatible storage such as Cloudflare R2 where configured by Visadify.
Email delivery and customer communications, such as Resend where configured.
Payments and billing, including Stripe. Stripe processes payment details under its own privacy policy; Visadify does not store complete card numbers.
AI processing, including OpenAI or Google services depending on the model and configuration selected for the relevant feature. For extension form matching or assistant requests, the provider may receive the relevant form context, page context, messages, and selected profile context needed to produce the response. Page content is treated as untrusted data and is not used as instructions by Visadify.

These providers may access information only to perform services for Visadify, under contractual or other appropriate safeguards, and are not authorized to use it for their own unrelated advertising purposes.

Agencies, collaborators, and other users

If you use Visadify with an agency or collaborator, we share the profile, documents, cases, messages, questionnaires, and other information that you or an authorized administrator make available under the relevant permissions. A public post, journey, agency profile, or other public content may be visible to other users or visitors as described when you publish it. We do not expose private cases, invoices, documents, messages, or client information through public pages.

Legal, safety, and business transfers

We may disclose information if required by law, subpoena, court order, or legal process; to protect users, the public, or Visadify; to investigate fraud or security incidents; or in connection with a merger, acquisition, financing, reorganization, or sale of some or all of our assets. We will require appropriate confidentiality and data-protection safeguards where applicable.

International Processing

Visadify and its service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers, which may include contractual protections, consent, or another lawful transfer mechanism.

Data Retention

We retain information for as long as necessary to provide the services, operate the account, maintain security and audit records, resolve disputes, enforce agreements, and meet legal, tax, accounting, or regulatory requirements. The retention period depends on the type and sensitivity of information, why it was collected, and whether the information is needed for an active case or agency relationship.

When information is no longer required, we delete it, anonymize it, or securely isolate it where deletion is not immediately possible. Backups and legal or security records may remain for a limited additional period before being deleted or overwritten.

Security

We use reasonable technical and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include HTTPS/TLS in transit, access controls, authenticated and permission-checked API requests, short-lived signed links for private files, session expiration and revocation, audit logging, rate limiting, and security monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Choices and Rights

Depending on your location, you may have the right to:

Access, correct, or request deletion of your personal information.
Request portability of information you provided to us.
Object to or restrict certain processing.
Withdraw consent where processing is based on consent.
Change profile-sharing permissions or disconnect an agency relationship.
Revoke extension sessions from Visadify settings, remove saved mappings, or remove the extension from your browser.
Disable optional page context in the Visadify assistant before sending a question.

Some information may need to be retained for legal, security, billing, audit, or legitimate operational reasons. We may also need to verify your identity before completing a request. To exercise a right or ask a privacy question, contact us using the details below.

Children

Visadify is not intended for children under the age required by applicable law. We do not knowingly collect personal information from children in violation of applicable law. Contact us if you believe a child has provided information to us.

Changes to This Policy

We may update this Privacy Policy when our services, data practices, or legal requirements change. We will update the date at the top of this page and, where appropriate, provide additional notice or request consent for material changes.

Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or want to report a concern about Visadify, contact us at:

Email: support@visadify.com

Address: 328 Swanston St, Melbourne VIC 3000, Australia