Privacy Policy

Last updated: 16 September 2026.

VisaPath (“we”, “us”) is an independent immigration route-matching tool at visapath.xyz. This policy explains what information we handle and your rights. It is not legal advice.

Calculator answers: your answers are sent to our server to calculate your result and are discarded once it is returned; we do not store them. Your result link contains your answers encoded in the address (the part after ?r=), so anyone you share that link with can see them. Analytics, where you allow it, is set up to drop that part of the address.

When you contact us: if you submit a form (the result form, the contact form or a partner application), we receive what you enter — such as name, email, WhatsApp number, nationality, budget range and your message — together with the page you sent it from and how you arrived (for example a referring site or campaign tag), so we can reply and understand which pages help. The legal basis is your consent and our legitimate interest in replying to you. Sensitive matcher answers, such as criminal-record or tax-debt flags, are not included in form submissions.

Who processes enquiries: submissions reach our team through a Lark (Feishu) group notification and, where configured, email delivery services (Web3Forms or Resend). If delivery fails, the submission is kept temporarily in our server logs so it is not lost. The site is served through Cloudflare, which processes technical request data such as IP addresses to deliver and protect it.

Newsletter: if you subscribe, we store your email address with Resend to send occasional updates about rule changes. Every email includes an unsubscribe link, and you can ask us to delete your address at any time.

WhatsApp and partners: contacting us through WhatsApp shares your message and number with Meta/WhatsApp under their own terms. For Portugal enquiries we may refer you to our partner FastNIF, and for Greece enquiries to FastGreece.

Analytics: we use Google Analytics 4 only if you allow it in the cookie prompt. It sets cookies (such as _ga) and processes pseudonymous usage data, including an approximate location derived from your IP address, which Google may process outside the EU. You can change your choice at any time from “Cookie settings” in the footer; declining removes the analytics cookies. We do not run advertising trackers.

Cookies and local storage: apart from analytics cookies you allow, we set no tracking or advertising cookies. The site keeps a few things in your own browser — your cookie choice, your settling-in checklist progress, an assessment in progress, your last three results and when you last read the updates page (you can clear the results from the home page) — which never leave your device.

Retention: enquiries are kept only as long as needed to help you and then deleted; server logs are rotated within about two weeks; newsletter addresses are kept until you unsubscribe.

Your rights (EU/UK GDPR): you may request access, correction, deletion, restriction, objection or portability of your personal data. To exercise these rights, email [email protected]. You may also lodge a complaint with your local data protection authority.

Security and changes: we take reasonable measures to protect information shared with us. We may update this policy and will revise the date above when we do.

Contact: [email protected].