PRIVACY POLICY

Last updated: [insert date]

VisaSL (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website and services. It also explains your rights in relation to that data.

This policy applies to all personal data processed through VisaSL, regardless of whether you use the website anonymously or through a registered account.

1. Personal data we collect

We collect personal data that users voluntarily provide when using our services. This may include age, marital status, educational background, professional background, language abilities, financial capacity ranges, and other information relevant to visa eligibility assessment. Where users choose to create accounts, subscribe to services, make payments, communicate with us, or interact with service providers, we may also collect contact details such as email address and phone number.

In addition, we automatically collect certain technical information such as IP address, browser type, device information, operating system, login records, timestamps, and usage data. This information is collected to ensure security, functionality, and service improvement.

2. Visa scoring data and AI processing

Information entered into the visa scoring tool is processed to generate indicative results and summaries. Both raw input data and derived summaries may be stored. Users may request deletion of raw input data at any time. Summarised data may be retained where reasonably necessary for system integrity, analytics, and service improvement.

Where users choose to access AI-based insights, a summary of their visa scoring data is processed using artificial intelligence systems, including third-party AI services such as the ChatGPT API. AI processing is automated and informational in nature. The data shared for this purpose is not intended to directly identify individuals.

3. Identification, anonymization, and pseudonymization

VisaSL uses internal identifiers such as user IDs to operate its systems. While we take steps to minimize personal identification, most stored data is pseudonymized rather than fully anonymized. This means that the data is protected and separated from direct identifiers, but may still be considered personal data under applicable laws.

4. Purpose of processing

We process personal data only for legitimate and defined purposes. These include providing visa scoring and AI insight services, operating accounts and subscriptions, processing payments, improving platform performance, maintaining security, preventing misuse, communicating with users, and complying with legal obligations.

5. Legal basis for processing

Where applicable under data protection laws, personal data is processed based on user consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating and improving the platform in a secure and responsible manner.

6. Marketing communications

Where users have provided consent, we may send marketing or promotional communications via email or messaging services. Transactional communications related to services, payments, or account activity may be sent regardless of marketing preferences. Users may withdraw consent for marketing communications at any time.

7. Cookies and similar technologies

VisaSL uses cookies and similar technologies to ensure website functionality, security, session management, analytics, and service improvement. Non-essential cookies are used only where consent is provided. Users may manage cookie preferences through browser settings or our cookie notice.

8. Sharing of personal data

We do not sell personal data. Personal data may be shared only where necessary to operate the website and services, including with hosting providers, payment processors, AI service providers, analytics services, and essential WordPress plugins. Such sharing is limited to what is reasonably required and subject to appropriate safeguards.

9. International data transfers

Personal data may be processed or stored outside Sri Lanka, including in countries where our service providers operate. We take reasonable steps to ensure that such transfers are subject to appropriate data protection measures.

10. Data retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Users may request deletion of personal data, subject to legal and operational limitations.

11. Data security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. However, no online system can be guaranteed to be completely secure.

12. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal data, as well as the right to withdraw consent. Requests may be made using the contact details below.

13. Children’s data

VisaSL is intended for individuals aged eighteen (18) years and above. We do not knowingly collect personal data from children.

14. Contact

For privacy-related inquiries or requests, please contact:
[insert contact email]