Privacy Policy

1. Information we collect

When you create an account, we collect your first name, email address, a salted password hash, and session records. We never store your plain-text password. When you request a practice report, we process and store the visa category, the answers you submit, and the resulting report with your account. If you contact us, we collect the name, email, topic, and message you provide.

2. How we use information

We use account data to authenticate you, generate and deliver private AI practice reports, secure the service, respond to support requests, and improve the clarity of the practice experience. We do not sell practice answers or account information for advertising profiles.

3. Google advertising, cookies, and similar technologies

When Google advertising code is present on a public USA Vizo page, Google and third-party vendors may place or read cookies in your browser and may use web beacons, IP addresses, or other identifiers as a result of ad serving. Subject to applicable law and your choices, this information may be used to deliver, limit, measure, report on, and personalize advertising. We do not send your practice answers, account credentials, or contact-message content to Google advertising code.

Learn more about how Google uses information from sites and apps that use its services. You can manage Google advertising preferences through My Ad Center.

4. Your advertising privacy choices

For users in the EEA, the United Kingdom, and Switzerland, USA Vizo uses a Google-certified consent management platform where required. The consent message lets you consent, decline consent, or manage options before advertising personalization is used where consent is required. To reopen those choices after consenting, use the Privacy and cookie settings link in the site footer. For applicable U.S. state privacy laws, a Google Privacy & messaging U.S. state message may provide a Do Not Sell or Share control when that message is published for your location. That U.S. opt-out control is separate from the EEA, UK, and Swiss consent-revocation link.

5. Service providers and AI processing

The site is hosted on Cloudflare Pages. Account, session, report, usage-control, and contact records are stored in Cloudflare D1. When an authenticated user requests a report, the visa category and four practice answers are securely sent to OpenAI to generate communication feedback. Our API requests use store: false to disable response storage for later retrieval through the API. This setting is not a model-training control and does not promise that all provider retention is disabled. OpenAI processes request data under its applicable API terms, data controls, and retention policies. Do not enter passport numbers, case numbers, birth dates, addresses, financial account numbers, or other sensitive identifiers.

6. Retention

Account records are retained to provide account access. When a new report is saved, the application keeps the latest 20 reports per account and removes older report records; each retained report includes its submitted answers. Sessions expire after 14 days, but expiry is not automatic deletion of account, answer, report, or session records. Contact messages and usage-control records do not currently have an automatic time-based deletion schedule. Request access, correction, or deletion using the contact form (Account support) or by emailing hello@usavizo.com.

7. Security

Passwords are hashed with PBKDF2 and a unique random salt. Session tokens are random, stored as digests, and sent in Secure, HTTP-only, SameSite cookies. AI provider credentials are stored as encrypted platform secrets and are never sent to the browser. No online service can guarantee absolute security.

8. International users and choices

USA Vizo serves readers in multiple countries. You may request access, correction, or deletion where applicable by contacting us. We may need to verify the request before acting.

9. Children

The service is intended for people old enough to manage their own visa preparation and account. It is not directed to children under 13.

10. Changes and contact

We may update this policy as the service changes. Material changes will be dated on this page. Questions may be sent to hello@usavizo.com.