1. Information We Collect

Information stored on our servers:

Account information: your email address and the login provider you use. If you use “Continue with Google”, Google also provides us with your name and profile picture, and an identifier for your Google account. We use this information only to create and identify your account. We do not request anything else from Google, and in particular not your Gmail, contacts, calendar, or files. We do not sell or share the information Google provides to us. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Premium: for each purchase, what it covers, when it starts and ends, when it was first used, and whether it was refunded or ended. Cards sent to the visayes helper: for each one, the country, the number of travelers, whether it used your free allowance or your Premium, and how far it got on the official site, for example whether every field was filled in, the submit button was clicked, or your submission was confirmed.
Where you first arrived from: the first page you opened on visayes and the address of the website that referred you there. It is saved with your account when you sign up, so that we can see which pages bring people who go on to use visayes. Until you sign up, it is kept only in your browser, and if you do not sign up, it is not sent to us. With Do Not Track on, we do not record it.
Payment records, processed by Stripe, including the IP address your browser used when you opened the checkout page. We retain that address to detect payment fraud and to defend against chargebacks, and we delete it from our records 24 months after the payment.
Draft record: for each entry-form draft, the country, arrival date, and number of travelers, its status, and the time we last sent you a reminder email.
OCR usage audit: for each scan, the time, which provider handled it, and whether it succeeded or failed. Because the provider depends on the passport you select, this record indirectly reflects that selection. It does not contain your passport number, your name, or any image.
Feedback you send: your message, an optional rating, and any contact details you choose to provide. Feedback reaches us as email in our support inbox and is not stored as a record in our database.
Security audit log: we record who performed an action, what the action was, when it occurred, and whether it succeeded. The log covers actions relating to your Premium, your free allowance, or your payments, actions that delete a draft, and security events on your account, such as logins. It contains no form content and no passport data.
Error reports: when an error occurs, our own server records which route failed and technical details of the error. If the error occurs in your browser, your browser sends us the page address and technical details of the error. These reports are designed to describe the fault, not to include your form answers.
Analytics events: which pages you open, where you arrived from, and a limited number of product signals, such as how far you get in an official government entry form and whether the visayes helper is installed. They contain no name, no email address, and no IP address.

Information kept on your device (not stored by us): passport details, your saved passport profile, health declarations (including vaccine documents), and every answer you give while preparing a form, other than the draft record described above. This information is encrypted locally and leaves your device only through the OCR transit and the visayes helper’s form filling described in section 2. Passport details are kept on your device beyond the form you are filling in only if you tick “Keep passport details on this device for next time” while filling in a form, or save a passport on your account page; otherwise, they exist only in the page you are filling in and are cleared when you close it.

visayes is the data controller for the server-side data described in this section. We process account, Premium, and payment data, the record of each card you send to the visayes helper, and your draft records (including reminder emails about your own drafts) to perform our contract with you; OCR images to provide the scan you request; feedback because you choose to send it; security and anti-abuse logs in our legitimate interest in keeping the Service safe; where you first arrived from, in our legitimate interest in understanding which of our pages work (GDPR Art. 6(1)(f)); and the payment IP address in our legitimate interest in preventing payment fraud (GDPR Art. 6(1)(f); see Recital 47) and in defending payment disputes. Data that stays on your device, whether in your browser or in the visayes helper, is not held by us, so we are not in a position to access, correct, or delete it; you control it directly, and section 7 describes how to clear it.

2. How Information Is Transmitted

OCR: your passport photo passes through our service to the OCR provider (see section 4) and is immediately discarded. The recognized text is returned to your browser and added to your local, encrypted draft. We keep no copy of either.
Draft record: while you prepare a form, we record that you have a card in progress for a particular country, together with its arrival date and number of travelers, so that your account page can display it and we can remind you when a submission window opens. Your answers themselves are not sent; they remain in your browser.
Filling in official forms: when you use the visayes helper, the data you have prepared is entered from your device directly into the form fields of the official government website, within your browser. It does not pass through our servers.

3. Limits on Use and Disclosure

We do not sell your data. Other than to the service providers named in section 4, which process it on our behalf, we disclose your data only where the law requires us to, or as described in section 14 if the Service is transferred to a new operator. We do not run advertising, and we do not use third-party analytics. We do not build profiles of you. We do not store your passport details, your health declarations, or your form answers on our servers, and we have no way to read them.

We make no automated decisions about you that have legal effects. Automated limits are in place to prevent abuse, and such a limit can block a request or an account; if this happens to you, email us and a person will review it.

4. Third-Party Service Providers

For services we cannot host ourselves, we use the service providers listed below, under their standard data processing terms and only for the purposes described in this policy. For details, please refer to their policies.

OCR for mainland-China passports: Tencent Cloud OCR (operated in mainland China) · policy. For all other passports: Microsoft Azure Document Intelligence · policy. You can enter your passport details manually at any time instead of scanning; in that case, no image leaves your device.
Payments: Stripe · policy. Stripe processes your card details; we do not receive your full card number.
Authentication: Supabase Auth, and optionally Google OAuth for “Continue with Google”.
Email: Resend, for transactional emails, such as feedback receipts and the reminder email we send when a draft’s official submission window opens. Every reminder email includes a one-click unsubscribe option. Feedback you send is not stored in our database; it is delivered to our support inbox and kept there as email.
Error tracking: GlitchTip, which we host ourselves, so error logs remain on our own server.
Analytics: Umami, which we host ourselves and which does not use cookies.
Cloudflare: our website is served through Cloudflare, so Cloudflare can see the network requests you make to us. Cloudflare also runs the human verification check on our log-in and sign-up pages, stores our off-site backups, and forwards email sent to our support address · policy

This Privacy Policy applies to visayes only. Official government websites and the service providers named above have their own policies. When you are on their websites, their policies apply and this policy does not.

5. Cookies and Similar Technologies

When you log in, we set a strictly necessary session cookie. By default, it expires when you close your browser. If you tick “Remember me” when you log in or sign up, it remains valid until you log out, for up to 400 days. The checkout page, and no other page on this site, loads Stripe’s payment script, which sets its own cookies on this site and reads device and activity signals so that Stripe can detect card fraud. Stripe’s use of those signals is governed by Stripe’s own privacy policy (see section 4).

We do not set analytics cookies or advertising cookies.

Our analytics honors your browser’s Do Not Track setting; when it is on, your visit is not counted at all.

6. Data Storage and International Transfers

Account, Premium, and payment data, the records of cards sent to the visayes helper, and draft records: stored in our database, hosted by Supabase in Singapore. Backups are held on our own server in the United States, with off-site copies stored with Cloudflare.
Passport details, health declarations, and your form answers: on your device only (encrypted), except for the OCR image transit described in section 2.
OCR images: for mainland-China passports, processed by Tencent Cloud in Guangzhou, mainland China. For all other passports, processed by Microsoft Azure Document Intelligence in the Azure region our account uses. Which provider processes your scan depends only on the passport you select.
Analytics events: our own server in the United States.
If you are in the European Economic Area (EEA) or the United Kingdom, your account data is therefore processed outside your country; for such transfers, we rely on our service providers’ standard contractual clauses (SCCs).
If you use visayes from mainland China, your account data (email address, Premium, and payments) and your draft records are stored and processed outside mainland China.

7. Data Retention

We retain account data for as long as your account exists and delete it when your account is deleted. Where you first arrived from is account data, and is deleted with it. By design, two categories of data are retained after your account is deleted. The first is payment records, which show what each payment purchased and whether it was refunded; we and Stripe are required to retain them for as long as the tax and accounting laws that apply to us require. The second is our security audit log, which records that an action occurred (who, what, when, and whether it succeeded) and contains no form content. When your account is deleted, we also remove your account identifier from that log; an entry relating to a payment continues to refer to that payment’s record. The IP address on a payment record is an exception to that tax retention: we delete it from our records 24 months after the payment. We delete feedback emails once they are no longer useful. Analytics events carry no personal data and have no fixed retention period. Data stored locally remains on your device until you delete it or clear your browser storage.

Backups: our database backups contain the account data and draft records described above. They do not contain your passport details, health declarations, or form answers, which are not stored on our servers. Backup copies are destroyed as backups rotate on a short, fixed cycle.

Draft records: for cards you complete, we retain the draft record (country, arrival date, number of travelers) as your trip history. If you delete a draft yourself, that record is deleted from our database. What remains is the record of each time you sent that draft to the visayes helper (section 1), which we use to determine whether you have used your free allowance for that country. That record contains the deleted draft’s identifier and the number of travelers, not your answers.

8. Your Rights

You retain all rights to your information. Data protection laws (including the GDPR, the CCPA, and China’s PIPL) give you the right to:

Access a copy of the data we hold about you.
Delete your account and all associated data (except records we are legally required to retain, such as payment records). If you ask within 7 days of the day you paid for Premium, and that Premium has not been used, we refund it first. See Payment Terms, section 10.
Export your data in a machine-readable format.
Correct inaccurate data.
Object to specific processing, or restrict it.
Withdraw consent where processing is based on consent.

To exercise these rights, email support@visayesapp.com. Before we act on a request, we will ask you to send it from the email address associated with your account. If you ask us to delete your account within 7 days of the day you paid for Premium, and that Premium has not been used, we refund it first and then delete your account (Payment Terms, section 10); we complete closures within 14 days. We respond within 30 days, or sooner if the law where you live requires it. If a request is complex, we may extend that period once, by no more than that law allows and in no case by more than two months; before the first deadline passes, we will tell you in writing that we need more time and why. You also have the right to lodge a complaint with the data protection authority where you live.

9. Information About Fellow Travelers

If you prepare forms for fellow travelers, their information is handled in the same way as yours: their passport details, health declarations, and answers remain on your device. You must have their permission, or the permission of their guardian (see our Terms of Service).

If you believe that someone has entered another person’s data without permission, contact us and we will help. That person’s details remain on the device on which they were entered, in your browser and, if you send the card to it, in the visayes helper, and are deleted under the same rules as your own.

10. Children’s Privacy

visayes accounts are for adults aged 18 or over. We do not knowingly collect children’s data on our servers. A traveler profile for a minor, such as your child’s entry form, is entered under a guardian’s authority and remains encrypted on your device, subject only to the OCR transit described in section 2.

11. Data Breach Notification

If a data breach affects your personal data, we will notify the relevant supervisory authority within 72 hours of becoming aware of it where required (GDPR Art. 33) and, where the law requires it, will notify affected users without undue delay (GDPR Art. 34).

12. Data Security

We protect the data we hold with technical and organizational measures appropriate to the risk. Data on your device is stored there in encrypted form. Connections to our service are encrypted. On our servers, we keep only the minimum data described in section 1, protected by access controls.

Your passport details, health declarations, and form answers are kept on your device and are not sent to our servers, apart from the OCR transit in section 2, which we do not store. Accordingly, we hold no such data that we could hand over to anyone.

No security measures are perfect. That is why we do not keep your passport details on our servers in the first place.

13. The Browser Extension

The visayes helper is a browser extension that you install yourself. It fills in the official government entry form on the official government website, in front of you. This Privacy Policy applies to it, and this section describes everything it does with your data.

Information it stores. The visayes helper stores only the entry-form information that you choose to send to it from visayes: the travelers’ passport details, their answers about the trip, and the arrival date. It does not read information from the page you are viewing, and it does not collect information about your browsing activity.

Where it is stored. This information is stored in encrypted form in the visayes helper’s own storage on your computer and is not transmitted elsewhere.

Retention period. Once a card is submitted, that traveler’s answers and passport number are erased immediately. The traveler’s name is kept so that the visayes helper can show you who has finished. A card is erased in full a few days after you send it to the visayes helper, whether or not you used it. A small number of bookkeeping records are kept after the card is erased, so that the same trip is not counted twice, so that the visayes helper can show you how far along a group is, and so that a late confirmation from the official site is still recognized. They contain no passport details and no form answers beyond the arrival date of the trip you were preparing; each is deleted once it is stale or replaced, and they remain in the visayes helper’s storage on your computer.

Information transmitted from your device. The visayes helper sends a brief progress report to our servers when it finishes filling in a card, when you click the submit button on the official site, and when the official site confirms your submission. Each report identifies the card and the step reached; it contains none of your form data. We use these reports to record how far the card got and to determine whether your free allowance or your Premium has been used.

Information that is never transmitted. The visayes helper contains no analytics and no usage tracking. Its diagnostic log is written to your own browser storage and is not sent to us. We do not sell or share anything the visayes helper holds, because we do not receive it. Our use of information received from the visayes helper adheres to the policies of each store that distributes it, including the Chrome Web Store User Data Policy and its Limited Use requirements.

Removal. Uninstalling the visayes helper removes the data it holds on your computer. You can also delete an individual card from the visayes helper’s panel or from your account page.

14. Changes to This Policy and Contact Information

We may update this Privacy Policy. We will announce material changes by email or by in-product notification; your continued use of the Service after such notice constitutes acceptance of the updated policy.

If the Service is transferred to a new operator, the account and payment data described in section 1 would pass to that operator. We will give you notice before this happens so that you can delete your account first.

This policy is written in English. If a translation we offer differs from the English version, the English version applies. This never limits the rights the law where you live gives you.

visayes is operated by the visayes team. You can contact us at support@visayesapp.com.