Privacy Policy
What VisaQ collects, why we need it, who we share it with, and how you get it deleted.
1. Information We Collect
Account information: name, email, phone, and a hashed password. We verify your email with a one-time passcode (OTP).
Profile and travel information: date of birth, nationality, gender, passport number, passport ID number, passport expiry date, profile photo, and billing address. Passport numbers and IDs are encrypted at rest.
Traveller information: if you apply for family members or dependents, we collect the same categories of information for each traveller.
Documents: passport bio page, photographs, bank statements, bookings, and deposit slips you upload, stored with our document provider, Cloudinary.
Payment information: card details are entered directly on our payment gateway’s hosted checkout page — VisaQ never receives or stores your full card number. We send the gateway your name, email, phone, billing address, and payment amount/reference only.
Notification data: a device push token, if you enable push notifications.
We do not use third-party analytics, advertising, or crash-reporting SDKs.
2. How We Use Your Information
To create and manage your account; prepare, submit, and track visa applications, including sharing information with the relevant embassy or immigration authority; process payments; send service communications and, if you opt in, promotional messages; maintain security and prevent fraud; and comply with legal obligations.
3. Who We Share Your Information With
Embassies, consulates, and immigration authorities (to process your application); Cloudinary (documents/photos); our payment gateway provider (payment details, not passport data or documents); Expo (push notifications); and our email providers (transactional email). We do not sell your personal data or share it with advertisers or data brokers.
4. Data Security
Passport numbers are encrypted at rest. Passwords are hashed. Access is authenticated using secure API tokens. Payment webhook messages are verified using signature checks. Authentication and OTP endpoints are rate-limited. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
Uploaded documents not attached to a submitted application are automatically deleted after 7 days. Documents attached to a submitted application, along with your account, traveller, and payment records, are retained while your account is active. If you request deletion, we will delete your account and associated data except where we must retain certain records (e.g., for accounting or legal compliance). Deletion is permanent and cannot be undone.
6. Your Rights and Choices
You can access or update most of your profile information directly in the app, and manage notification preferences, including opting out of promotional messages, at any time. To request deletion or a copy of your personal data, contact support@visaq.lk — we will verify your identity and respond within a reasonable time.
7. Children’s Data
The Service is intended for use by adults who create and manage an account. An account holder may submit personal data, including passport information, about a minor dependent traveller as part of a family application. By submitting a minor’s information, you confirm you are the minor’s parent or legal guardian, or otherwise authorized to act on their behalf, and consent to VisaQ processing that data to prepare and submit the application. We do not knowingly allow minors to create their own VisaQ accounts.
8. International Data Transfers
Because our service providers may process data outside Sri Lanka, your information may be transferred to and processed in other countries. We work with providers that maintain appropriate safeguards for personal data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@visaq.lk.
These are the same terms shown inside the VisaQ mobile app.
Questions?
support@visaq.lk
or WhatsApp.