Your data. Your privacy.
Effective date: May 2026
Plain English. No legalese. Here is exactly what we collect and what we do with it.
DueVisa is not a law firm and does not provide legal advice. Nothing on this website constitutes legal counsel. For advice specific to your immigration situation, please consult a licensed immigration attorney.
1. Introduction
DueVisa is an immigration deadline tracking tool that helps you stay on top of visa expiry dates, renewal windows, and document deadlines. We are not a law firm and nothing on DueVisa constitutes legal advice. Always consult a licensed immigration attorney for advice specific to your situation.
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have over it. By using DueVisa, you agree to the practices described here.
2. Information We Collect
Account information
When you create an account, we collect your email address and display name. If you sign in with Google OAuth, we also receive your Google profile name and profile photo URL.
Immigration document data
You voluntarily enter document types (e.g. H-1B, EAD, Green Card), document names, and expiry dates. This is the core data that powers your dashboard and reminders. We do not ask for passport numbers, alien registration numbers, case numbers, or any government-issued ID numbers.
Family and dependent information
If you use the family tracking feature, you may enter names, relationships, and document dates for your dependents. This information is stored under your account and subject to the same protections as your own data.
Payment information
Subscription payments are processed entirely by LemonSqueezy. We never see, store, or handle your credit card number, bank details, or billing address. LemonSqueezy provides us only with a subscription status (active/cancelled) and your billing email.
Usage data
We collect basic usage information such as pages visited, features used, and login timestamps. This helps us understand how the product is being used so we can improve it.
Device and technical data
We may collect your browser type, device type, operating system, and IP address as part of standard server logging. This data is used for security monitoring and debugging.
3. How We Use Your Information
We use your data for the following purposes and no others:
- ·To provide deadline tracking, countdown timers, and renewal checklist features
- ·To send email reminders at 180, 90, 60, 30, and 7 days before each document expires
- ·To process and manage your subscription via LemonSqueezy
- ·To authenticate your identity and keep your account secure
- ·To improve the product based on aggregate, anonymised usage patterns
- ·To respond to your support requests
We never sell your data. We never share your data with advertisers. We never use your immigration information for profiling, scoring, or any purpose other than the service you signed up for.
4. Data Storage and Security
All user data is stored in Supabase, which runs on AWS infrastructure. Supabase enforces Row Level Security (RLS) policies on every table — meaning the database itself ensures that queries from one user's session can only return that user's own data.
Data is encrypted in transit (TLS 1.2+) and encrypted at rest by default on Supabase. We do not store passwords — authentication is handled by Supabase Auth (password hashing using bcrypt) or delegated to Google OAuth.
We limit access to production data to essential personnel only and do not store copies of user data in development or staging environments.
5. Third-Party Service Providers
We use the following sub-processors to operate DueVisa. Each receives only the data necessary to perform its function.
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, and file storage | All user and document data |
| Vercel | Application hosting and CDN | Request logs, IP addresses |
| Resend | Transactional email delivery | Your email address and reminder content |
| LemonSqueezy | Subscription payment processing | Billing email and payment details (never shared with us) |
| OAuth sign-in (optional) | Name, email, profile photo (only if you use Google sign-in) |
6. Immigration Data — Special Notice
We understand that your immigration status is sensitive. Here is our explicit commitment:
- ·We use your document data only to calculate deadlines and send reminders
- ·We do not share, disclose, or report your data to USCIS, ICE, CBP, the Department of State, or any government agency — ever
- ·We do not use your immigration data for advertising, profiling, or any secondary purpose
- ·Your document data is never sold or licensed to any third party
- ·No DueVisa employee accesses your document data except when you explicitly request support
7. Email Communications
When you add a document to DueVisa, you will receive reminder emails at the intervals you configure (up to 180, 90, 60, 30, and 7 days before expiry). You will also receive account-related emails such as sign-up confirmation and password reset.
You can disable or adjust reminders at any time in your account Settings. You can unsubscribe from non-essential communications using the unsubscribe link in any email.
We use Resend to deliver all emails. Your email address is shared with Resend solely for this purpose.
8. Data Retention
- ·While your account is active, we retain all data you have entered
- ·If you cancel your subscription, your data remains accessible on the free plan limits
- ·If you delete your account, all your personal data and document records are permanently deleted within 30 days
- ·You can request immediate deletion at any time by emailing privacy@duevisa.com
- ·Anonymised, aggregated usage statistics (e.g. how many users track H-1B documents) may be retained indefinitely as they contain no personal information
9. Your Rights
You have the following rights over your personal data. To exercise any of them, email privacy@duevisa.com — we will respond within 5 business days.
- ·Access — request a copy of all data we hold about you
- ·Correction — update any incorrect or outdated information in your account
- ·Deletion — delete your account and all associated data permanently
- ·Portability — export your document data as CSV from the dashboard at any time
- ·Opt out — unsubscribe from reminder emails or disable individual notifications in Settings
10. Children's Privacy
DueVisa is intended for adults managing their own or their family's immigration documents. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account, please contact us at privacy@duevisa.com and we will delete the account promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes — such as collecting new categories of data or changing how we share it — we will notify you via email at least 14 days before the change takes effect.
Continued use of DueVisa after the effective date of a change constitutes your acceptance of the updated policy. We will always keep prior versions of this policy available upon request.
12. Contact
For privacy questions, data requests, or concerns, contact us at:
DueVisa
Email: privacy@duevisa.com
Website: https://duevisa.com
We respond to all privacy requests within 5 business days.
Your immigration data is safe with us.
Questions about your data? Email privacy@duevisa.com
Get started free →