Privacy Policy
Last updated: 7 September 2026
Who we are
Visado is run by Logan Murphy (TO BE COMPLETED), the data controller for the information described here. For anything in this policy, including a request about your own data, write to hello@getvisado.com.
What we collect
Only what the service needs to build and remember your timeline:
- Your account. Email address and password. The password is hashed by our authentication provider and is never visible to us.
- Your answers. Which country you apply from, your course start date, course length, chosen consulate, and optionally your arrival date.
- Your progress. Which steps and checklist items you have ticked. We store the identifier of the step only.
- How you found us. If you arrived through a partner or campaign link, the code from that link.
- Which offers you use. When you view or click through to a partner service, we record that it happened, so that we can be paid and can check partners are reporting honestly.
What we never collect
We do not ask for or store your documents, photographs, passport or identity numbers, or the result of any criminal record check. Ticking a step records that you marked it done and nothing about the outcome. We do not handle card details: if you ever pay for a service through the app, the payment is taken by Stripe and the card number never reaches us.
We do not use advertising or tracking cookies, we do not run third-party analytics, and we do not sell or share your data with anyone for their own marketing.
Why we are allowed to hold it
- To provide the service you asked for. Your account, answers and progress exist because that is what the app does. Without them there is no timeline.
- Our legitimate interests. Keeping the service secure, and knowing which partner offers are actually used, which is how a free app pays for itself. We keep this to counts and identifiers rather than anything revealing.
- Your consent. Only for non-essential cookies, which stay off unless you turn them on.
Where your data is held
Your account and timeline are stored in Supabase, on AWS in Ireland (eu-west-1). The application itself runs on Vercel, in the United States (Washington DC), which means pages are rendered outside the UK and EEA. Vercel is certified under the EU-US Data Privacy Framework and its UK Extension, which is the safeguard relied on for that transfer.
The companies we rely on, and what each one sees:
- Supabase stores the account and timeline data listed above, and sends account emails such as password resets.
- Vercel hosts the application and processes requests as they pass through.
- Anthropic receives the text of a question if you use the in-app assistant, and only then. It is not given your account or your timeline.
- Stripe handles the payment if you ever book a service through the app.
How long we keep it
Your account data stays until you ask us to delete it, and deleting your account removes your answers, progress and referral record with it. Records of bookings are kept for as long as tax and accounting rules require, normally six years, because we are obliged to keep them.
Your rights
Under UK GDPR you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Email hello@getvisado.com and we will respond within one month. There is no charge.
If you think we have handled your data badly, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We set one essential cookie to keep you signed in, and store your cookie choice in your own browser. That is all. Nothing here follows you to other sites.
Children
The service is meant for people applying to study abroad and is not aimed at children under 16. If you are under 16, please ask a parent or guardian to set up and manage the account.
Changes
If we change this policy we will update the date above, and if the change is significant we will tell account holders by email rather than quietly editing the page.