Privacy Policy

Your privacy is fundamental to how we build and operate ImmigrationGPT. This policy explains how we collect, use, and protect your information.

Last updated: January 2026

Important Warning

Do not submit sensitive personal information such as passport numbers, refusal letters, or National Insurance numbers to the chat assistant.

Information We Collect

We collect information to provide our services. We employ "Retrieval-Augmented Generation" (RAG) technology and may log chat queries for debugging.

Account Information (When You Sign In)

  • Profile Data: Name, email address, and profile picture from Auth0
  • Authentication Tokens: Encrypted session tokens for secure access
  • Account Preferences: Settings and customization choices

Usage Data

  • Chat History: Your conversations with our AI assistant (stored securely)
  • Company Views: Companies you've viewed (for personalized recommendations)
  • Credit Usage: Transaction history for our credit-based services

Technical Information

  • Device Data: Browser type, operating system (for compatibility)
  • Performance Metrics: Page load times, error logs (anonymized)
  • IP Address: For security and fraud prevention (not stored long-term)

Cookie Usage

We use essential cookies that are necessary for our service to function properly.

Essential Cookies Only

We only use cookies that are strictly necessary for the website to function. These cannot be disabled as they are essential for providing our services.

Authentication Cookies

  • • Secure login sessions
  • • User authentication state
  • • CSRF protection tokens
  • • Session management

Functional Cookies

  • • User preferences
  • • Chat history access
  • • Credit balance tracking
  • • Cookie consent status

Third-Party Services

We work with trusted partners to provide essential services while maintaining your privacy.

Auth0 (Authentication)

Handles secure user authentication and profile management.

Data shared: Email, name, profile picture
Purpose: Secure login and account management
Privacy: Auth0 Privacy Policy

Stripe (Payment Processing)

Processes credit purchases securely and handles payment data.

Data shared: Payment information, transaction details, and device identifiers
Purpose: Secure payment processing, fraud prevention, and dispute resolution
Privacy: Stripe Privacy Policy

X.AI Grok (AI Processing)

Powers our AI chat assistant with immigration knowledge.

Data shared: Chat messages (anonymized)
Purpose: AI-powered immigration assistance
Privacy: Messages are not stored by X.AI

Your Privacy Rights

Under GDPR and UK data protection laws, you have comprehensive rights over your personal data.

You have rights under applicable data protection laws regarding your personal data. Please contact us via our contact form if you wish to exercise these rights.

Data Security

We implement industry-standard security measures to protect your information.

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Access Control

Strict access controls and authentication for all systems.

Monitoring

24/7 security monitoring and incident response procedures.

Contact Us

Questions about your privacy or this policy? We're here to help.

Data Protection

Please reach out via our Help Center.

Response time: Within 30 days

UK Supervisory Authority

Information Commissioner's Office (ICO)

Website: ico.org.uk