Privacy Policy

1. Introduction

VisaSettle (“VisaSettle,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, application, and related services (collectively, the “Services”).

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What Information We Collect

2.1 Information You Provide

• Account Information: username, email address, and authentication credentials necessary to access your account.
• Profile Information: any additional details you choose to add to your profile.
• Google Drive Content: where you connect a Google Drive account, we may access file names, folder structures, document metadata, and other information necessary to provide organisational features within the Services. Your original documents remain stored in your Google Drive account.
• Payment Information: if you subscribe to Premium, payment details are processed by our third-party payment processor. We do not store full credit card numbers.
• Communications: information you provide when you contact our support team.

2.2 Information Collected Automatically

• Usage Data: pages visited, features used, time spent on the Services.
• Device Information: browser type, operating system, IP address, and device identifiers.
• Cookies: as described in our Cookie Policy.
• Analytics Information: We use Google Analytics to understand how users interact with the Services and improve platform performance.

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide, maintain, and improve the Services;
• To process your subscription and manage your account;
• To communicate with you about your account, including service updates and support responses;
• To send you marketing communications (with your consent, which you may withdraw at any time);
• To detect, prevent, and address technical issues, fraud, or abuse;
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal information is:

• Performance of a contract: to provide the Services to you;
• Consent: where you have given consent (e.g., for marketing);
• Legitimate interests: to improve our Services and ensure their security.

5. Disclosure of Your Information

We may share your personal information with:

• Service Providers: third-party vendors who help us operate the Services (e.g., cloud hosting, payment processing, analytics). These providers are contractually bound to protect your information;
• Google Services: if you choose to connect Google Drive, Google Docs, or Google Calendar, we access information from those services only to provide the functionality requested by you.
• Legal Compliance: if required by law, regulation, or legal process, or to protect our rights, property, or safety;
• Business Transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

6. Google Drive Storage

VisaSettle is designed to work with user-connected Google Drive accounts. Original visa documents, supporting evidence, and other files remain stored within the user's Google Drive account.

VisaSettle does not generally host, store, or maintain copies of users' original documents on its own servers.

Users are responsible for maintaining access to their Google Drive account and for managing backups of their documents.

VisaSettle accesses Google Drive information only with your explicit authorisation and only to provide the functionality requested by you.

VisaSettle does not use user documents, Google Drive content, or personal information to train general-purpose artificial intelligence or machine learning models.

Users acknowledge that VisaSettle is not a backup service. Users are solely responsible for maintaining backup copies of their documents and data. VisaSettle shall not be responsible for any loss, corruption, deletion, or unavailability of data, whether caused by third-party services, system failures, or other circumstances beyond our control.

VisaSettle's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

VisaSettle only requests access to Google user data that is necessary to provide the functionality requested by the user. We do not sell Google user data. We do not use Google user data for advertising purposes. We do not transfer Google user data to third parties except as necessary to provide and maintain the Services or as required by law. Google user data is accessed solely for document organisation, file management, reminders, and related platform functionality.

7. Cross-Border Data Transfers

Your personal information may be stored and processed in Australia or in other countries where our service providers operate. When we transfer your information outside Australia, we take reasonable steps to ensure that the recipient complies with the Australian Privacy Principles or is subject to a substantially similar privacy regime.

8. Data Security

While we take reasonable steps to safeguard information, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain account information and service-related records for as long as necessary to provide the Services and comply with legal obligations.

VisaSettle does not generally store users' original visa documents. Where users connect Google Drive, documents remain stored within the user's own Google Drive account and are not retained by VisaSettle following account deletion.

10. Your Rights

Under the Australian Privacy Act, you have the right to:

• Access: request access to the personal information we hold about you;
• Correction: request correction of any inaccurate or incomplete information;
• Deletion: Upon account deletion, we will delete or anonymise personal information unless retention is required by law, for dispute resolution, fraud prevention, or legitimate business purposes.
• Objection: object to the processing of your personal information for direct marketing purposes;
• Complaint: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the Privacy Act.

If you are in the EEA or UK, you also have the right to data portability and to withdraw consent at any time.

To exercise any of these rights, please contact us at support@visasettle.com. We will respond to your request within a reasonable timeframe (usually 30 days).

11. Third-Party Links & Services

The Services may contain links to third-party websites or services, including Google Drive, Google Docs, and Google Calendar. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your information.

12. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Platform. Your continued use of the Services after the effective date of the changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:

VisaSettle
Melbourne, Victoria, Australia

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.