Privacy Policy

Last updated: [Owner to complete: date this policy is published]

1. Who is responsible

The operator (data controller) of this website is Gurjit Suthaar, publishing this site as MASSA — Visa Path AI. Postal address: [Owner to complete: registered/postal address]. Privacy questions: infomassaqr@gmail.com. If required in your jurisdiction, our EU/UK representative or data protection officer is [Owner to complete: name and contact, or "not applicable"].

2. Using the site without an account

You can browse countries, pathways and documents and use the eligibility check without signing in. In that case:

• Your questionnaire answers, checklist progress and language choice are stored in your own browser (local storage). They are not sent to our account system.
• Files you choose in the document checker are read inside your browser. They are not uploaded to us.
• You can clear this information at any time by clearing your browser's site data.

3. Accounts (optional)

If you create an account, we use Supabase (a hosted database and sign-in service) to store:

• Your email address and password credentials (handled by the sign-in service; we do not see your password).
• Your profile, saved assessments and checklist progress, if you choose to save them.

Saved data is protected so that each account can only read its own records. Server region and Supabase's own processing terms: [Owner to complete: hosting region and link to processor terms].

4. Live web lookups and AI summaries

Some pages fetch recent public web information:

• Ask page and results page: a search query (for example, a country, purpose and nationality) is sent to a web search service (Firecrawl) to return links. We do not send your name or email with these searches.
• Country pages: recent web results about the country are searched and summarised by an AI model, then stored in a shared cache that is the same for every visitor. These summaries do not contain your personal information.

These lookups never change your eligibility result, which is calculated by fixed rules. Full list of service providers (subprocessors) and their locations: [Owner to complete: list of subprocessors, e.g. hosting, database, search, AI provider].

5. Advertising (if enabled)

Advertising is not currently active on this site. If we enable Google AdSense in the future:

• Google and third-party vendors may use cookies, device identifiers and similar technologies to show ads, to personalise ads based on your visits to this and other websites, and to measure ad performance.
• You can opt out of personalised advertising at Google Ad Settings, and learn more at How Google uses information from sites that use its services.
• Visitors in the European Economic Area, the United Kingdom and Switzerland will be asked for consent through a Google-certified consent management platform integrated with the IAB Transparency & Consent Framework before any non-essential advertising cookies are used.
• Ads never affect eligibility results, rankings or which pathways are shown.

This section will be updated with the exact consent tool and vendors once advertising is configured.

6. Why we use your information (legal bases)

• To provide the tools and your account (performance of a contract / your request).
• To keep the service secure and working (legitimate interests).
• For personalised advertising, where required by law, only with your consent.

7. How long we keep information

Account data is kept until you delete your account or ask us to delete it. Specific retention periods: [Owner to complete: retention periods for account data, logs and backups].

8. Your rights

Depending on where you live (for example under the EU/UK GDPR, India's Digital Personal Data Protection Act, 2023, or US state laws such as the CCPA), you may have the right to access, correct, delete or export your information, to object to or restrict processing, to withdraw consent at any time, and to complain to your data protection authority. To use these rights, contact infomassaqr@gmail.com. We do not sell personal information.

9. Children

This site is not intended for children under 16 [Owner to complete: confirm minimum age for your jurisdictions].

10. Changes and contact

We will update the date above when this policy changes. See also our Terms of Use, Disclaimer and Contact page.