Privacy policy.

This policy explains what personal data Qvisa (QYOTECH LLP) collects when you use qvisa.in to prepare a visa application, why we collect it, who we share it with, and the rights you have over it — including under India's Digital Personal Data Protection Act, 2023.

• Account details — name, email, phone, and (for agents) agency name and GSTIN.
• Application and passport-level documents — passport scans, photos, and other supporting documents you upload for a specific visa application, plus the fields our document verification extracts from them (e.g. passport number, dates of birth/issue/expiry, nationality).
• Payment data — Qvisa never stores your card, UPI, or bank details. Payments are processed directly by Cashfree; we retain only the transaction reference, amount, and status they return to us.
• Usage data — basic technical logs (IP address, device/browser type, pages visited) for security and reliability.

• To verify your documents against the destination country's requirements.
• To auto-fill and generate your application form and folder.
• To process payment and issue GST invoices.
• To provide support and respond to your requests.
• To meet legal, audit, and regulatory obligations.

We do not sell your personal data, and we do not use your passport or document images for any purpose beyond preparing the specific application you uploaded them for.

Qvisa uses the following processors to operate the service. Each receives only the data it needs to perform its function, under its own security and confidentiality commitments:

• Supabase — database, authentication, and encrypted file storage.
• HyperVerge — OCR/KYC field extraction from uploaded identity documents.
• Anthropic (Claude API) — AI-assisted comparison of extracted document fields against destination country requirements.
• Cashfree — payment processing and GST invoicing.
• Sherpa — sourcing destination-country visa requirement data (this does not involve sharing your personal data).

We do not share your documents or extracted fields with any embassy, consulate, or visa service provider — Qvisa prepares your application folder for you to submit yourself.

Documents are stored in a private, access-controlled storage bucket — never publicly accessible. Access to an application and its documents is restricted at the database level to the applicant, their agent (if any), and Qvisa administrators acting in the course of support or compliance, with every admin access to an agent's client data logged for audit purposes. Data is encrypted in transit (TLS) and at rest.

We retain your application data for as long as your account is active, and for a reasonable period afterward to meet legal, tax, and dispute-resolution obligations. You can request deletion of your account and associated documents at any time — see "Your rights" below.

Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct, and request erasure of your personal data, and to withdraw consent for its processing. To exercise any of these rights, contact us at support@qvisa.in.

We use only the cookies required to keep you signed in and to remember your session — no third-party advertising or tracking cookies.

See our Contact page for the designated Grievance Officer and how to reach them.

We may update this policy as the service evolves. Material changes will be reflected by an updated "last updated" date above.