Privacy notice (RA 10173)

What is processed and where

When you submit the Readiness Check with informed consent, your answers, any legal-history flag, optional contact name and Messenger name or email, consent record, quoted price, reference, status, and readiness result are stored on our server. This local preview uses a local D1 database on the development computer; it is not a live Cloudflare service.

The browser temporarily saves an unfinished submission (including answers and optional contact details) for safe retries, then removes it after success. It stores your reference and secret recovery code to resume your case after refresh. You can clear this browser’s saved case. Clearing browser storage does not delete the server record. Keep your recovery code private; anyone with the reference and code can view your result. The server stores only a hash of the recovery code.

No passport or document uploads are requested in the quiz. Separate preparation services may require a DS-160 confirmation page or PDF and passport bio page, but an approved secure intake method must be provided before you send sensitive documents.

Purposes and access

Answers are used to calculate and prepare your readiness result. The reference links your case to manual payment verification. Results remain unavailable until verification; serious flags receive a lawyer referral without a payment request. A designated operator can view case contact and payment details, record actual amounts paid and payment method, and update verification/rejection/refund status. Payment actions and timestamps are audited. This prototype does not move funds or send messages.

Information you choose to send via Messenger or email, such as questions, contact details and receipts, is processed separately in those services to communicate with you and verify payments. Do not send your recovery code in a receipt message.

For abuse prevention, a salted hash derived from the connection IP is used in a short-lived rate-limit counter. The application does not store raw IP addresses or log request bodies, tokens, or contact details.

Recipients

We share your information only with trusted service providers that host our website and help us process it on our behalf, under confidentiality and data-protection obligations, and when required by law.

Retention and deletion

We keep your personal information only as long as needed for the purpose you shared it for (preparing your readiness result or review, answering your questions, and keeping payment records) and as allowed or required by Philippine law, including the Data Privacy Act of 2012 (RA 10173). After that, we securely delete or anonymize it. You may ask us to delete your information sooner by emailing help@visamericasolutions.com, except for records the law requires us to keep.

Your rights — RA 10173 / NPC

You have a right to be informed about processing and applicable rights of access, correction, objection, erasure/blocking, and complaint to the National Privacy Commission. Privacy enquiries: help@visamericasolutions.com.

Controller: [PLACEHOLDER — needs Ric] Confirm legal entity, business address and responsible privacy officer.

Lawful basis and rights handling: [PLACEHOLDER — needs Ric] Confirm bases for processing and sensitive-data safeguards, identity checks, access/correction/deletion and withdrawal procedures, deadlines, and complaint contact details.

Deployment safeguards: [PLACEHOLDER — needs Ric] Approve secure document intake, authorized operators, processor/location details, retention implementation and deletion workflow before launch.