Privacy Policy

USAVPC is operated by osirisbrain, LLC, a Delaware limited liability company, registered office 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA ("we"). We are the controller of the personal data described here. Contact us about privacy at support@usvisaprocessingcenter.com. This policy covers the USAVPC mobile apps, the informational website, and related support.

The apps keep these on your phone, in the app's private storage, and do not send them to us: the travelers you add (names, relationship, and whether each person is an adult or a minor); passport data read from a photo and confirmed by you (names, passport number, nationality, date of birth, sex, expiry date, and issuing country); trip details; your interview practice (questions, answers, feedback, and history); and the answers you give in the free guide.

The passport photo is read on your phone and deleted as soon as you confirm the data. Like other app data, the data on your phone can be included in your phone's own backup (Apple iCloud or Google), under Apple's or Google's terms. Deleting the app, or deleting your account in the app, erases it from that phone.

The one exception is a plan with human review: for that review, you choose which answers and documents to send from your phone to our reviewers (section 3).

We receive and keep only the data needed to sell and restore a pass and to give support:

• Account (needed only to buy a pass or restore it on another phone): email address, password (handled by our authentication system and never visible to us), language, and the versions of the Terms and this policy you accepted, with the date, language, and source (no IP address). One-time recovery codes are stored only as irreversible hashes.
• Passes: each pass belongs to one traveler. For that, we keep a pseudonymous traveler reference (for example "Traveler 2") with the relationship, whether the person is an adult or a minor, and how you are authorized to manage them. We never receive the traveler's name or passport data.
• Payments: product, amount, currency, status, dates, and payment identifiers from Stripe. We never receive your full card number.
• Human review (only in plans that include it): the answers and documents you choose to send for the review, which can include passport data and other sensitive details, and the reviewer's notes.
• Support and reports: the messages you send us and the texts you report from the app, with the reason, and your account email when you have one. The website contact form collects name, email, an optional WhatsApp number, and your message.
• Security and technical data: security audit events (who did what and when, without IP addresses), rate-limit records that use keyed, irreversible hashes instead of IP addresses, app version and language, and error logs without the content of your preparation.

The camera is used only when you photograph a passport. The text is read on your phone (Apple's Vision framework on iPhone; Google's ML Kit through Google Play services on Android) and the photo is deleted once you confirm the data. On Android, Google may collect anonymous usage and diagnostic data about ML Kit under its own terms; the images stay on your phone.

The microphone is used only if you choose to dictate an answer. Speech is converted to text on your phone; no audio is recorded or sent to us.

The officer's voice in practice comes from audio files that the app downloads from our website; no personal data is sent to fetch them.

We do not use analytics, advertising, or tracking technologies in the apps or on the website. The website sets only the cookies needed for its staff area.

We use personal data only for these purposes:

• To provide what you request (accounts, passes, purchases, restoring a pass, the human reviews you buy, and support): performance of our contract with you.
• Optional automated writing features (section 7): your consent, which you can withdraw at any time.
• Security, fraud and abuse prevention, rate limits, and audit records: our legitimate interests and legal obligations.
• Payments, accounting, taxes, and disputes: our contract with you and our legal obligations.
• Complying with the law and establishing or defending legal claims: legal obligations and legitimate interests.

Passport data, data about minors, and immigration-history answers are sensitive. In the apps they stay on your phone. The only exceptions are what you choose to send for a human review you bought and the text you choose to send with the optional writing features in section 7, both based on your explicit consent. We do not make automated decisions that produce legal or similarly significant effects on you, and we do not profile you for advertising.

Some optional features use DeepSeek, a third-party artificial intelligence service provided by a company based in the People's Republic of China that processes and stores data on servers in China. They are off unless you turn them on: writing the guide in your own words, and extra notes in interview practice.

When you turn them on, the app sends our server, and our server passes to DeepSeek: for the guide, the options you chose (goal, destination, nationality, residence, stage, and immigration-history category, which may include a category such as criminal history) and the text you write; for practice, the question, your answer, and the results of the checks made on your phone. Our server returns the reply to your app and does not store the text. We never send passport images, passport data, the text read from documents, DS-160 answers, or uploaded files; in the apps, passport data never leaves your phone. Before sending, the app and our server block emails, phone numbers, identity, passport, bank, and card numbers, but they cannot detect everything: do not include names or other sensitive details.

DeepSeek processes this data under its own terms and may keep it under its own policies; we cannot delete data held by DeepSeek. You can use the whole Service without these features. We also used DeepSeek, once, to translate our own general content (never your personal data) into the app languages.

We share the data we receive only with:

• Hosting and database: a private server we control in Boston, Massachusetts, United States, running Supabase software. An earlier copy of our database remains with Supabase, Inc. (United States) until our infrastructure migration is complete.
• Netlify, Inc. (United States): website and API hosting.
• Stripe, Inc. (United States): payments. Stripe receives your email, an account reference, the product, and the amount.
• DeepSeek (People's Republic of China): only the optional features described in section 7.
• Apple and Google: app distribution, the on-device features of their operating systems, and your phone's backups, under their own terms. If you contact us through WhatsApp, WhatsApp's terms apply.
• Our authorized personnel: for support, reports, payments, security, and the human reviews you buy. They see only what you send them; they cannot see what is on your phone. Access to review files is recorded in an audit log.
• Authorities, courts, or professional advisers when the law requires it or to protect rights and safety, and a successor in a merger, acquisition, or sale of assets, subject to this policy.

We are a United States company. The data we receive is stored and processed in the United States, and, only if you turn on the optional features in section 7, the text described there is processed in China. These countries may not offer the same level of protection as your own. We rely on your consent for these transfers and on contractual and technical safeguards, as permitted by the law that applies to you.

We keep personal data only as long as needed for the purposes above:

• Data on your phone: until you delete it, the app, or your account.
• Account, pseudonymous travelers, and passes: until you delete your account.
• Payment records: after you delete your account, we keep them without your account data, with their payment identifiers, for as long as accounting, tax, fraud-prevention, and dispute obligations require.
• Support requests and reports: up to 180 days while open and 30 days after they are resolved.
• Human review files: until the review is complete and up to 90 days after, then deleted; you can delete them sooner.
• Text sent with the optional writing features: our server does not store it.
• Earlier website data: until September 27, 2026 the website offered preparation tools that stored data on our servers. Those tools are retired; what remains is deleted on the schedules announced when it was collected (Interview practice sessions: 180 days after they start; Schengen dossiers: 365 days after their last update; study or work cases: 3 years) or when you delete your account.
• Deletion records: a minimal record (an internal identifier and counts) to complete and prove a deletion.

You can delete your account in the app (Settings, Delete account); the website explains how to request it without the app. Deletion is permanent: we delete your account, pseudonymous travelers, passes, human review files, consents, support requests, recovery codes, and most security records about you, and the app erases its data on that phone. Payment records are kept as described in section 10. Data on another phone or in a phone backup must be deleted there. Deleting your account does not delete data that Stripe must keep or data already sent to DeepSeek.

You can download a copy of the data we hold from Settings (Export my data). The data on your phone is already in your hands.

We use encrypted connections (HTTPS with HSTS), database access restricted to our servers, hashed recovery codes, rate limits, two-step verification for staff, and audit logs. On your phone, the operating system's encryption protects the app's data: keep your phone locked. No system is completely secure. If a security incident affects your personal data, we will notify you and the authorities as the law requires.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your data; to object to or restrict certain processing; to withdraw consent at any time without affecting earlier processing; to appeal our decision; and to not be discriminated against for exercising these rights. Use the in-app tools or write to support@usvisaprocessingcenter.com. We may need to verify your identity and will answer within the time the law requires (generally 30 days). You may also complain to your data protection authority.

Examples of authorities: Brazil (ANPD), Mexico (the federal data protection authority), Colombia (SIC), Peru (ANPD), Argentina (AAIP), India (Data Protection Board), the Philippines (NPC), Indonesia, Vietnam, Thailand (PDPC), Türkiye (KVKK), and, in the United States, your state attorney general. Residents of California: we do not sell or share personal information for cross-context behavioral advertising, and we use sensitive personal information only to provide the Service you request.

Accounts are only for adults (18 or older, or the age of majority where you live). A parent or legal guardian may add a minor as a traveler on their phone, is responsible for that information, and may exercise the minor's rights. We do not knowingly collect personal data directly from children. If we learn that a minor opened an account, we will delete it.

We may update this policy. If a change is material, we will show the new version in the app or on the website and, where required, ask you to accept it before you continue. The date of the current version appears at the top of this page.

osirisbrain, LLC, 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. Email: support@usvisaprocessingcenter.com.