MyVisaDreams
Sign inSign up

Privacy Policy

Last updated: April 13, 2026

1. Introduction

MyVisaDreams ("we," "our," or "us") operates the website at myvisadreams.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using MyVisaDreams, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.

2.2 Case Information

When you add immigration cases, we store the visa category, form type, service center, filing dates, and case status information. Receipt numbers are optional and stored encrypted. You control whether your case data is included in anonymized community analytics via the "public" toggle on each case.

2.3 USCIS Case Status Lookups

When you use our Case Status lookup feature, we query the official USCIS Case Status API on your behalf. We log the receipt number, form type, current status, and status history returned by USCIS to improve our processing time analytics. These logs are anonymized and not linked to your user account unless you explicitly add the case to your dashboard.

2.4 Automatically Collected Information

We may collect standard web server logs including IP addresses, browser type, referring pages, and timestamps. This data is used solely for security monitoring and service improvement.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Display your immigration case status and history
  • Generate anonymized processing time estimates and analytics
  • Send verification emails and important account notifications
  • Monitor for security threats and abuse
  • Comply with legal obligations

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information. We may share data in the following limited circumstances:

  • USCIS API: Receipt numbers you look up are sent to the official USCIS Case Status API to retrieve case information. This is governed by USCIS's own privacy policies.
  • Anonymized Analytics: Aggregated, anonymized case data may be displayed publicly in processing time charts and community statistics. No personally identifiable information is included.
  • Service Providers: We use third-party services for hosting (Vercel), database (Neon), and email delivery. These providers process data solely on our behalf under contractual obligations.
  • Legal Requirements: We may disclose information if required by law, subpoena, or government request.

5. Data Retention

We retain your account data for as long as your account is active. Case data and status lookup logs are retained to improve processing time analytics. You may request deletion of your data at any time (see Section 7). Upon account deletion, your personal data is permanently removed within 30 days. Anonymized analytics data derived from your cases may be retained indefinitely as it cannot be linked back to you.

6. Data Security

We implement industry-standard security measures to protect your data:

  • All data is transmitted over HTTPS (TLS encryption)
  • Passwords are hashed using bcrypt with salt rounds
  • Database connections use SSL encryption
  • OAuth tokens and API credentials are stored as environment variables, never in code
  • Session tokens expire automatically

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We will notify affected users within 72 hours of discovering any data breach that compromises personal information.

7. Your Rights and Data Deletion

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct inaccurate personal data
  • Deletion: Request permanent deletion of your account and all associated data
  • Portability: Request your data in a machine-readable format
  • Opt-out: Disable community analytics sharing for any or all of your cases

To exercise any of these rights, contact us at privacy@myvisadreams.com. We will respond to requests within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information is collected, used, shared, or sold
  • The right to delete personal information held by businesses
  • The right to opt-out of the sale of personal information (we do not sell your data)
  • The right to non-discrimination for exercising your CCPA rights

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes affecting how we use your data, we will send an email notification to registered users. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@myvisadreams.com