Privacy Policy

What we collect

Account details (name, email, phone), passport and application details you enter or scan, documents you upload, eligibility answers, payment records (card details stay with Stripe), and usage data needed to run the service.

Why we use it

To prepare and track your visa application, run automatic document checks, match you with licensed partners you choose, process payments, send service notifications and reminders, and improve the service. We do not sell personal data.

Who can see it

You; Vistolane case-team staff processing your file; and, only if your plan and visa category require it, the licensed partner assigned to your case. Service providers (hosting, payments, messaging, email) process data under contract and only on our instructions.

Where it lives

Encrypted at rest in our Supabase (PostgreSQL) database and private storage bucket in AWS Mumbai (ap-south-1), and in transit over TLS 1.2 or higher.

Your rights

Download or delete your documents from My documents at any time. Email info@vistolane.com to access, correct or erase your account data; we respond within 30 days.

Retention

Active files are kept for the life of the application plus 24 months for compliance and appeals, then deleted. Chat and eligibility drafts are deleted after 12 months of inactivity.

SMS messaging

Vistolane Private Limited collects your mobile number and SMS consent when you opt in to text updates. We use them only to send messages about your account and visa applications.

Mobile opt-in data and consent will not be shared with any third parties or affiliates for marketing or promotional purposes.

Mobile numbers and consent records are shared only with the service providers that deliver our messages (for example our SMS carrier) and never with partners or other third parties. Reply STOP at any time to withdraw consent; see the SMS terms at vistolane.com/terms.

Contact

Data protection questions: info@vistolane.com, Vistolane Private Limited, WeWork DLF Forum, Cyber City, Phase III, Gurgaon, Haryana 122002, India.

The privacy policy in plain language

Vistolane handles the most sensitive documents a traveller owns, so the policy above is written to be checked against practice. The data collected is the minimum needed to prepare and track a visa application: account and contact details, the passport and application details you type or scan, the documents you upload, your eligibility answers and payment records, of which card numbers are held only by Stripe. Usage data is collected to run the service and is governed by the cookie choices you make in the banner, which can be changed at any time from the footer.

Your file is seen by you, by the Vistolane case-team staff working on it and, only where your plan and visa category require it, by the licensed partner assigned to your case. Hosting, payment, messaging and e-mail providers process data under contract and on instruction. Everything is encrypted at rest in Supabase in the AWS Mumbai region and in transit over TLS 1.2 or higher. Nothing is sold, and marketing messages are sent only with the consent you give in the banner or your account.

You can download or delete your documents from My documents at any time, and e-mail info@vistolane.com to access, correct or erase account data within 30 days. Active files are retained for the life of the application plus 24 months for appeals and compliance, then deleted; eligibility drafts and chat history are deleted after 12 months of inactivity. The policy applies under India's DPDP Act and the GDPR for residents of the European Economic Area and the United Kingdom.