Privacy Policy

1. Introduction

MyVisaDreams (the "Service") is owned and operated by Axxis Solutions LLC, a U.S. limited liability company (axxis-solutions.com). In this Privacy Policy, "we," "our," and "us" refer to Axxis Solutions LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using MyVisaDreams, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.

2.2 Case Information

When you add immigration cases, we store the visa category, form type, service center, filing dates, and case status information. Receipt numbers are optional and stored encrypted. You control whether your case data is included in anonymized community analytics via the "public" toggle on each case.

2.3 USCIS Case Status Lookups

When you use our Case Status lookup feature, we query the official USCIS Case Status API on your behalf. We log the receipt number, form type, current status, and status history returned by USCIS to improve our processing time analytics. These logs are anonymized and not linked to your user account unless you explicitly add the case to your dashboard.

2.4 Automatically Collected Information

We may collect standard web server logs including IP addresses, browser type, referring pages, and timestamps. This data is used solely for security monitoring and service improvement.

2.5 Data We Do Not Collect

We do not collect, store, or process any of the following categories of data:

• Precise geolocation data (GPS, street address)
• Financial information (credit card numbers, bank accounts, income)
• Medical or health information of any kind
• Genetic information or family health history
• Biometric data (fingerprints, face scans, voice prints)
• Your contacts, calendar, photos, or device files
• Social Security Numbers or other government identifiers other than USCIS receipt numbers you choose to enter

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Display your immigration case status and history
• Generate anonymized processing time estimates and analytics
• Send verification emails and important account notifications
• Monitor for security threats and abuse
• Comply with legal obligations

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:

• USCIS API: Receipt numbers you look up are sent to the official USCIS Case Status API to retrieve case information. This is governed by USCIS's own privacy policies.
• Anonymized Analytics: Aggregated, anonymized case data may be displayed publicly in processing time charts and community statistics. No personally identifiable information is included.
• Service Providers (Sub-Processors): We use third-party services that process data solely on our behalf under contractual obligations that require them to uphold the protections of this Privacy Policy. Our sub-processors are:
  • Vercel Inc. — application hosting and edge compute (United States)
  • Neon Inc. — managed PostgreSQL database (United States)
  • Resend Inc. — transactional email delivery (United States)
  • Google LLC — AI assistant inference via the Gemini API (United States). Messages you submit to the AI assistant are transmitted to Google solely to generate a response and are not used to train Google's models.
• Legal Requirements: We may disclose information if required by law, subpoena, or government request.

No third-party use without consent. Our sub-processors are contractually prohibited from using your personal information, including de-identified, anonymized, or pseudonymized data derived from your use of the Service, for any purpose other than delivering the service we have engaged them to perform. They may not sell, rent, share, disclose, or re-use your information for their own purposes without your active, informed consent. Third parties handling your data are bound to the terms of this Privacy Policy.

No sale of data. We do not sell your personal information, and we do not exchange your personal information for any form of monetary or other valuable consideration, whether for profit or otherwise.

4a. Your Data-Sharing Choices

You control whether your case data contributes to community analytics:

• Benefits of sharing: helps other applicants see realistic processing time estimates for their visa category, form type, and service center.
• Risks of sharing: even in anonymized form, rare combinations of visa category, service center, and filing date may be re-identifiable by a determined observer. We only publish aggregates with at least five contributing cases per bucket to reduce this risk.
• Limitations: once aggregated statistics have been computed and published, the anonymized contribution cannot be retroactively removed from historical aggregates, though the underlying personal record will be deleted if you request it.
• How to opt out: toggle the "public" setting off on any case, or delete the case entirely, from your dashboard.

Because we do not collect genetic, family-history, or health data, sharing your case data cannot impact other individuals (such as family members) the way sharing genetic data might. The data you contribute describes your own USCIS filing only.

5. Data Retention

We retain your account data for as long as your account is active. Case data and status lookup logs are retained to improve processing time analytics. You may request deletion of your data at any time (see Section 7). Upon account deletion, your personal data is permanently removed within 30 days. Anonymized analytics data derived from your cases may be retained indefinitely as it cannot be linked back to you.

Dormant accounts. If your account has no sign-in activity for 24 consecutive months, we will send a notification to your registered email address. If the account remains inactive for a further 60 days after that notification, we will permanently delete the account and all associated personal data in accordance with Section 7. You may reactivate your account at any time before deletion simply by signing in.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed using bcrypt with salt rounds
• Database connections use SSL encryption
• OAuth tokens and API credentials are stored as environment variables, never in code
• Session tokens expire automatically

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We will notify affected users within 72 hours of discovering any data breach that compromises personal information.

7. Your Rights, Account Closure, and Data Deletion

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal data
• Deletion: Request permanent deletion of your account and all associated data
• Portability: Request your data in a machine-readable format
• Opt-out: Disable community analytics sharing for any or all of your cases

7.1 How to Close Your Account and Delete Your Data

You have two ways to permanently close your account:

1. Self-service (recommended): sign in and go to Dashboard → Settings, then click "Delete Account." Your account, cases, and all associated personal data are permanently removed from our production database immediately, and purged from encrypted backups within 30 days.
2. By email: send a deletion request from your registered email address to privacy@myvisadreams.com. We will confirm receipt within 72 hours and complete deletion within 30 days.

Because we do not collect medical or health information, the requirement to securely dispose of, transmit, or download health information does not apply to MyVisaDreams. For all other personal data, deletion and export are handled as described above.

To exercise any other right listed in this section, contact us at privacy@myvisadreams.com. We will respond to requests within 30 days.

7a. Business Transfers, Mergers, and Closure

If MyVisaDreams is acquired by, merged with, or sold to another entity, or if we cease operations, your personal information may be transferred to the successor organization as part of that transaction. In any such event:

• We will notify you by email at least 30 days before the transfer takes effect, or as soon as practical if the timeline is shorter.
• The new entity will be contractually required to honor commitments in this Privacy Policy at least as protective as the version in effect at the time of transfer, or to provide you with equivalent or greater protections.
• If the new entity's practices would be materially less protective, you will be given the option, before the transfer, to export your data in a portable format and permanently delete your account, at no cost.
• If MyVisaDreams shuts down entirely and no successor exists, we will notify registered users by email, offer a 30-day window for data export, and then securely and permanently delete all personal data.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by businesses
• The right to opt-out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your CCPA rights

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For any material change — including changes to the categories of data we collect, how we use or share it, our sub-processors, or your rights — we will:

1. Post the updated policy on this page and update the "Last updated" date.
2. Email registered users at least 14 days before the change takes effect, with a plain-language summary describing exactly what is changing, why, and what it means for you.
3. Require your active consent the next time you sign in — we will present the summary in-app and ask you to affirmatively accept the new policy before you can continue using the Service. Continued use of the Service alone does not constitute consent to material changes.

If you decline, you may export your data and delete your account at no cost before the change takes effect. For non-material changes (typos, clarifications, re-formatting), we will update the policy and the "Last updated" date without requiring renewed consent.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@myvisadreams.com