How VisaPod collects, uses, shares, protects, and deletes personal data for visa preparation workflows.

VisaPod Privacy Policy

Effective date: June 22, 2026

This Privacy Policy explains how THINKHARD LIMITED, a New Zealand limited company operating VisaPod, collects, uses, stores, shares, and deletes personal information.

THINKHARD LIMITED is incorporated in New Zealand under company number 9439281 and NZBN 9429053763662.

Who Is Responsible

VisaPod is operated by THINKHARD LIMITED. THINKHARD LIMITED is responsible for the personal information processed through VisaPod.

For privacy questions, access or correction requests, deletion requests, complaints, security concerns, or legal notices, contact THINKHARD LIMITED at [email protected]. VisaPod's privacy officer can be reached through the same email address.

What VisaPod Does

VisaPod helps users prepare visa application tasks, currently focused on the U.S. DS-160 workflow. The service can collect user instructions, read uploaded documents, evaluate application data completeness, and operate a sandbox browser to assist with form filling.

VisaPod is not a government website, is not affiliated with the U.S. Department of State, USCIS, CEAC, or any other government agency, and does not provide legal advice.

Information We Collect

We may collect the following categories of information:

  • Account information, such as name, email address, login method, authentication sessions, and language preference.
  • Applicant profile information, such as profile names, task type, task status, and task history.
  • User communications, including chat messages, instructions, confirmations, support requests, and feedback.
  • Uploaded documents, including passports, photos, identification records, travel history, employment records, education records, financial records, family information, prior visa information, and other documents you choose to upload.
  • Data extracted or inferred from uploaded documents and user messages for the purpose of preparing a visa application.
  • Browser automation information, including sandbox state, screenshots, tool calls, task progress, recovery information, and operational traces needed to run or debug the service.
  • Payment information handled through Stripe, including payment status, checkout identifiers, receipts, refunds, and dispute metadata. We do not store full card numbers.
  • Technical information, such as IP address, browser type, device information, request metadata, security events, rate-limit events, error logs, and diagnostic logs.

How We Use Information

We use information to:

  • Create and manage your VisaPod account and workspace.
  • Prepare, validate, and assist with visa application tasks.
  • Read, summarize, and map uploaded documents to visa application fields.
  • Run browser automation in a sandbox when you ask VisaPod to assist with form filling.
  • Show task progress, pause and resume tasks, recover interrupted work, and debug failures.
  • Process payments, refunds, disputes, and access control.
  • Prevent abuse, fraud, spam, excessive resource usage, and unauthorized access.
  • Provide customer support and respond to privacy, billing, and security requests.
  • Improve reliability, safety, and product quality.

We do not sell uploaded documents, applicant data, or chat content.

Uploaded Documents

Uploaded documents are used only to support visa application tasks in your workspace. You can delete uploaded documents from the product interface.

When you delete a document, VisaPod deletes the stored file and removes the corresponding document record. Deleted files cannot be recovered.

After all tasks under a profile are completed, uploaded documents for that profile are scheduled for deletion after 7 days unless you delete them earlier or a longer retention period is required for security, dispute handling, legal compliance, or abuse prevention.

AI Processing And Automation

VisaPod may send task context, extracted document text, user instructions, field mappings, screenshots, and automation results to AI model providers and infrastructure providers when needed to perform the requested task.

AI systems and browser automation can make mistakes. You remain responsible for reviewing all information before submitting any government form.

Service Providers

VisaPod may use third-party service providers for hosting, databases, file storage, AI model inference, sandbox browsers, authentication, email delivery, bot protection, payment processing, analytics, monitoring, and operational logging.

Current or planned providers may include Google, Vercel, Stripe, Resend, Cloudflare, GCP, and similar infrastructure providers. These providers process information only as needed to provide their services to VisaPod.

Legal Bases Where Applicable

Where privacy law requires a legal basis for processing, VisaPod may rely on:

  • Your consent, such as when you upload documents or agree to document processing.
  • Performance of a contract, such as providing the requested visa preparation and automation service.
  • Legitimate interests, such as securing the service, preventing abuse, debugging failures, and improving reliability.
  • Legal obligations, such as payment, tax, dispute, or compliance records.

Data Retention

Uploaded documents are retained as described in the Uploaded Documents section.

Chat history, task metadata, field mappings, payment metadata, and operational logs may be retained while your account or task remains active and for a reasonable period afterward for support, security, debugging, payment reconciliation, dispute handling, and legal compliance.

Operational logs may include task IDs, session IDs, error traces, sandbox IDs, payment IDs, and service events. Logs are not intended to store full document contents or full payment card data.

International Transfers

VisaPod may process information in countries other than your country of residence. Service providers may process data in the United States or other regions where they operate. By using VisaPod, you understand that your information may be transferred to and processed in those locations.

Your Choices And Rights

You may:

  • Delete uploaded documents from the product interface.
  • Stop using the service.
  • Contact VisaPod to request access, correction, deletion, or export of account or workspace data.
  • Contact VisaPod about privacy questions, security concerns, or payment disputes.

Some records may be retained when required for security, fraud prevention, legal compliance, payment reconciliation, dispute handling, or enforcement of the Terms of Use.

Children And Dependents

VisaPod is intended for use by adults. If you upload information about a dependent, child, family member, or other person, you represent that you have authority to provide that information and to use it for the visa task.

VisaPod is not directed to children under 13 and does not knowingly collect account information directly from children under 13.

Security

VisaPod uses access controls, authenticated sessions, private document storage where configured, least-necessary operational access, and diagnostic logging to protect information. No online service can guarantee absolute security.

Government Forms And Review Responsibility

VisaPod may help prepare or fill application information, but you are responsible for reviewing all information before submitting any government form. VisaPod does not guarantee that an application will be accepted, approved, or processed by any government agency.

Changes To This Policy

VisaPod may update this Privacy Policy. Each published version may have a version number, publication date, and content hash. If a change materially affects document uploads or sensitive data processing, you may be asked to accept the updated Policy before uploading additional documents.

Contact

For privacy questions, deletion requests, access or correction requests, security concerns, complaints, or legal notices, contact:

  • THINKHARD LIMITED
  • New Zealand company number: 9439281
  • NZBN: 9429053763662
  • Email: [email protected]