Draft, not yet professionally reviewed
Privacy
Last checked against the running software on 2026-09-29.
What you give us
Your e-mail address, a password if you set one, a display name, interface language and time zone, your confirmation that you are 18 or older, and the sign-in codes you enter. Then everything you choose to enter or upload in your workspace: names, dates, tasks, notes, timeline events, files (JPEG, PNG, WebP or PDF) and the exports you generate; the personal details you choose to record, such as birth details, passport, certificate or ID numbers, and address and work history, and, only if you choose to add them, a Social Security number, USCIS A-Number or USCIS online account number, which the forms ask for; and the details you confirm from your documents. Support messages you send from the app are kept with your account.
What your partner sees
Joining a workspace shares membership and display names. Plan facts — including each person’s personal details — tasks and timeline events are shared between the two partners, and the petitioner can also edit the beneficiary’s details. Details confirmed from a document follow that document’s sharing. A file version stays private to the person who uploaded it until they share it; sharing can be withdrawn, but copies already downloaded cannot be recalled.
Your choices
You control what you enter, what selected file versions you share with your partner, and whether to request a structured data download or a scoped deletion preview. A data download does not require a paid pass.
Where your data is stored and who processes it
Account and workspace data are stored with our hosting providers in the United States: Vercel (the application) and Supabase (database, sign-in and file storage). If you use VisaTogether from Vietnam or elsewhere, your data is transferred to and processed in the United States. Sign-in and password codes are e-mailed through Resend; the sending servers for our domain are in Japan. No advertising, analytics or AI provider receives your data: in-app AI is switched off, and text extraction from an image runs in your own browser.
Payments
Checkout is not open yet, so no payment provider handles your data today. When it opens, this section names the provider and what it receives before any payment is taken.
Deletion
You preview the scope of a deletion before you confirm it, and a shared workspace is deleted only when both partners consent. Deleted records leave the app’s views, exports and pending jobs. Do not treat a request as completed until you receive the completed receipt; it lists anything retained.
Backups
We have not yet verified how long encrypted backups of this service keep deleted data, so we do not state a retention period. Until we do, treat a deletion as complete for the app but not necessarily for backups.
Support access
Support messages are read by the operator inside the app. A support request never opens your records. If you tick the diagnostics box, the operator can see your interface language and the counts of your export and assistance jobs for 24 hours, nothing else, and you can withdraw that at any time.
Security incidents
If we confirm a security incident affecting your account or workspace data, we will notify affected account holders by e-mail within 72 hours of confirming it, describing what was affected and what we are doing about it.
Questions and requests
Write to support@visatogether.app. Say whether your question is about an account, a workspace you were invited to, privacy or billing, and do not attach sensitive documents. No named privacy responder has been confirmed yet.