Introduction and scope
This Privacy Policy explains how eVisas (evisas.com) collects, uses, shares, and protects your personal information when you use our website and mobile app to prepare and submit visa applications. eVisas is operated by TravelRox, Inc., 169 Madison Avenue, STE 2883, New York, NY 10016, USA. eVisas is a private visa-advisory service. We are not a government agency, and we are not affiliated with any government or visa authority. We help you complete and submit visa applications to the relevant authorities. This policy applies only to the eVisas visa-application platform (web and mobile). It is governed by the laws of the State of New York, USA. By using the Service, you also agree to our Terms & Conditions, which govern your use of the platform alongside this policy. If you do not agree with this policy, please do not use the Service.
Information we collect
We collect the following categories of information.
Account data — email address; phone number; password (stored in hashed form; we never see your plain password); email-verification status; language preference; Google and Apple sign-in identifiers; passkey credentials
Applicant and profile data (for you and any dependents you add to an application) — first, middle, and last name; nationality or nationalities; gender; date of birth; place and country of birth; marital status; religion; occupation, job title, and employer; home address; passport number, passport issue and expiry dates, and issuing country
Documents you upload — passport scans; photos; supporting documents (these are stored privately)
Visa application form answers — the full set of responses you provide for each application
Payment data — we use Stripe to process card payments; we do not store your card number; we keep only a Stripe customer or payment reference, plus the amount, currency, and status of each transaction
Technical and usage data — IP address and the approximate country derived from it; browser and user-agent; platform (iOS, Android, or web); device information (model, operating system, screen, timezone, and app version); activity logs, such as sign-in events
Push tokens — if you enable notifications, we collect a push token so we can send them
How we use your information
We use your information to:
Provide and process your visa applications
Verify your identity and assess eligibility
Pre-fill form fields using automated passport OCR (optical character recognition)
Communicate with you, including verification codes, status updates, support responses, and transactional email
Process payments and refunds
Maintain security, prevent fraud, and keep audit records
Comply with our legal obligations
Improve the Service through aggregate analytics
International data transfers
eVisas is based in the United States. Your data is hosted on Amazon Web Services, including data centers in the EU/Ireland region, and is shared with the service providers listed above. These providers may process your data in other countries. Where data is transferred internationally, we rely on appropriate safeguards to protect it.
How we protect your documents
We take measures to keep your documents and account secure:
Uploaded documents are stored in private cloud storage and encrypted at rest using AES-256.
Documents are accessed only through short-lived signed links that expire after about one hour.
Passwords are hashed with bcrypt.
Sessions are maintained using short-lived tokens.
Access is restricted to authorized staff.
Data retention and account deletion
We keep your data while your account is active and for up to 7 years afterward to meet our legal, tax, and audit obligations. You may delete your account in the app. Doing so deactivates and anonymizes your account. Some records tied to your past applications and payments are retained for the retention period described above. You may also request deletion of your uploaded documents by contacting us at support@evisas.com.
Your rights and choices
Depending on your location, you have the rights listed below. You can exercise them through your account settings or by contacting us at support@evisas.com, and you may also lodge a complaint with your local data-protection authority. You have the right to:
Access the personal information we hold about you
Correct or update your information (you can do much of this in your account settings)
Delete your information
Export your information (data portability)
Object to or restrict certain processing, where applicable
Withdraw consent where processing is based on consent
Children's privacy
The Service is not directed to children. You must be at least 18 years old to hold an account. Where an application is for a minor, it must be submitted by a responsible adult who provides that minor's information.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update this page, and where appropriate we will notify you through the Service or by email. Your continued use of the Service after an update takes effect means you accept the revised policy.
Contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at: TravelRox, Inc. 169 Madison Avenue, STE 2883 New York, NY 10016, USA Email: support@evisas.com
