Last updated: June 27, 2026
ImmiTrail (“we”, “our”, “us”) is an immigration deadline tracking service. Our website is immitrail.com. For privacy questions, contact us at privacy@immitrail.com.
Account data: When you sign in, we collect your name, email address, and profile picture via Google OAuth or magic link.
Visa profile data: Dates and information you enter about your visa status (visa type, I-797 dates, EAD dates, etc.). This is the core data needed to generate your timeline.
Document vault data: If you use the Document Vault, files you upload are stored in Cloudflare R2 with AES-256 encryption at rest and TLS encryption in transit. We store file metadata (name, type, size) in our database. Documents are only accessible by your authenticated account.
Case tracking data: If you use the Case Tracker, we store your USCIS receipt numbers and check their status periodically on your behalf via USCIS.gov. We store the status history for your reference.
Usage data: Basic analytics such as pages visited and features used, to help us improve the product.
Payment data: If you upgrade to Pro, payment is processed by Stripe. We never see or store your full card number. We store only your Stripe Customer ID and subscription status.
We use your data to provide the ImmiTrail service — specifically to generate your personalised immigration timeline, send deadline reminder emails, and manage your subscription. We do not sell your data. We do not use your data for advertising.
By creating an account, you agree to receive transactional emails such as deadline reminders and account notifications. You can manage or disable reminder emails in your Settings at any time. We send marketing emails only with your explicit consent.
We share your data only with the following third-party services that are necessary to operate ImmiTrail:
We retain your account and visa data for as long as your account is active. If you delete your account, we delete your personal data within 30 days. Stripe and other processors may retain data per their own policies.
You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, email us at privacy@immitrail.com. EU/EEA users have additional rights under GDPR including the right to lodge a complaint with your local supervisory authority.
We use only essential cookies required for authentication (session cookies set by NextAuth). We do not use advertising or tracking cookies.
We use HTTPS for all connections, encrypted database connections (SSL/TLS), AES-256 encryption at rest for stored documents, and role-based access controls to protect your data. Your uploaded documents are stored in Cloudflare R2 with server-side encryption. However, no internet transmission is 100% secure. Please keep your login credentials private.
ImmiTrail is not directed at children under 13. We do not knowingly collect data from children under 13.
We may update this policy from time to time. We will notify you by email or by a notice on the app if we make material changes. Continued use of ImmiTrail after changes constitutes acceptance.
Questions about this policy? Email us at privacy@immitrail.com.