Privacy & your workspace data

This preview stores accounts, assessments, chat messages, reminders, manually recorded application progress and support conversations in a SQLite database on the server running this installation. Application trackers can link your saved preparation plans and documents; their stages are entered by you, not checked with a government service. Workspace administrators can read and reply to local support requests. Uploaded documents are stored as private local files, available through authenticated download endpoints.

What stays local

When built-in guidance is selected, chat is generated locally from a preparation guide. No documents or messages are uploaded to an AI provider. If the owner configures an external AI endpoint, chat messages and recent conversation context are sent to that provider. The owner must obtain informed consent and establish appropriate provider terms before enabling that mode for other people.

Your documents

You can download and delete your uploaded files in the Documents section. Account & data lets you export your own records and files as a ZIP, or delete your account and local records after confirming your password. Exports and separate backups you have already downloaded are not removed by account deletion. Basic checks examine format, size and, where readable, PDF page count. They do not establish authenticity or visa acceptance.

Sign-in security

Active sign-in creation and expiry times are stored so you can review and revoke other sessions in Account & data. Device names and locations are not collected. Authentication rate limits retain keyed hashes of account identifiers and direct client addresses for up to five minutes; old entries are cleared on the next authentication attempt. These entries are excluded from account exports and encrypted backups.

Account recovery

You can generate a single-use recovery key after confirming your password. Only its hash is stored. Using the key resets your password and revokes existing sessions; email-based recovery is not connected.

Retention and access

Local records remain until you delete your account or the owner removes the local installation. Encrypted offline backup/restore tools are available to the installation owner. Backup passphrases are not stored by AI Visa Agent. Due-reminder alerts work while the workspace is open; optional desktop alerts require browser permission. This preview has no cloud backup, email delivery, public hosting, production retention policy or certified compliance status. Do not use it as a public service for sensitive documents until those controls have been established.