Privacy Policy

1. Information we collect

When you create an account, we collect your first name, email address, a salted password hash, and session records. We never store your plain-text password. When you request a practice report, we process the visa category and answers you submit and store the resulting report with your account. If you contact us, we collect the name, email, topic, and message you provide.

2. How we use information

We use account data to authenticate you, generate and deliver private AI practice reports, secure the service, respond to support requests, and improve the clarity of the practice experience. We do not sell personal information or use practice answers for advertising profiles.

3. Cookies

We use an essential HTTP-only session cookie for authenticated accounts and a first-party preference cookie to remember that you acknowledged the cookie notice. The current site does not install advertising or analytics cookies.

4. Service providers and AI processing

The site is hosted on Cloudflare Pages. Account, session, report, usage-control, and contact records are stored in Cloudflare D1. When an authenticated user requests a report, the visa category and four practice answers are securely sent to OpenAI to generate communication feedback. We ask OpenAI not to store the API response for model improvement through the API request setting, but OpenAI may process request data under its applicable API terms and policies. Do not enter passport numbers, case numbers, birth dates, addresses, financial account numbers, or other sensitive identifiers.

5. Retention

Account records are kept while the account remains active. Sessions expire after 14 days. Contact messages and practice reports are kept only as long as reasonably needed for the service, security, and support. Daily AI usage counters are used to limit abuse. You may request deletion by emailing privacy@usavizo.com.

6. Security

Passwords are hashed with PBKDF2 and a unique random salt. Session tokens are random, stored as digests, and sent in Secure, HTTP-only, SameSite cookies. AI provider credentials are stored as encrypted platform secrets and are never sent to the browser. No online service can guarantee absolute security.

7. International users and choices

USA Vizo serves readers in multiple countries. You may request access, correction, or deletion where applicable by contacting us. We may need to verify the request before acting.

8. Children

The service is intended for people old enough to manage their own visa preparation and account. It is not directed to children under 13.

9. Changes and contact

We may update this policy as the service changes. Material changes will be dated on this page. Questions may be sent to privacy@usavizo.com.