Privacy policy

Information used by the application service

The application-assistance flow can collect passport and identity details, passport scans, photographs, dates of birth, parent information, addresses, salary, contact details and travel plans. This information is used only to prepare, review and process the traveler’s requested visa-assistance service.

Draft storage in this build

Until a production Firebase project is configured, form fields are stored in the browser’s local storage and document files are stored in the browser’s IndexedDB for draft recovery on that device. They are not transmitted by this build. Anyone with access to the same browser profile may be able to access the saved draft, so travelers should use a private device and clear site data after use.

When Firebase is configured, the application uses an authenticated user identifier, Cloud Firestore and Cloud Storage. Access must be restricted by deployed security rules so one authenticated session cannot access another application’s records or files.

Documents and file names

Uploaded files are stored under randomly generated file identifiers. Passport numbers, full names and dates of birth are not used in storage paths. Application records contain document metadata rather than base64-encoded files, and the service does not create public download URLs.

Analytics and logging

Public information pages use the Google Ads tag for advertising measurement. The tag is disabled on the application, payment and staff-administration routes. Sensitive form values, passport data and document information are not sent to advertising, analytics or error-reporting platforms. This build does not log form answers to the browser console.

External services

The website links to Brazilian government and government-authorized services. Information submitted directly to those external sites is governed by their own privacy notices.

Retention and deletion

Before production launch, the operator must state how long drafts, documents, paid applications and support records are retained, how deletion requests are handled and which legal obligations may require longer retention.

Contact

Replace this section before launch with the operator’s legal contact name, email address, postal address and any data-protection contact required by applicable law.