Draft - under legal review
Privacy
Last updated 24 Oct 2026
This draft is not legal advice.
What we store
Your data is kept with a reputable cloud provider under access controls, and only our own systems can read or write it. We store:
- Account: name, email and phone number (sensitive fields are encrypted), sign-in records and terms acceptance.
- Plans and payments: plan, amount, invoices and the payment receipt files you upload.
- Devices: identifiers and tokens for the Windows app on your computers.
- Alerts: your routes, alert settings, alert history and usage.
- Telegram and browser push: your Telegram account identifier (encrypted) and your browser push subscription, only if you turn these on.
- Contact and waitlist: name, email and message you send us.
- Safety records: audit logs, rule violations and appeals.
- Learning mode: page structure only (see below).
We do not ask for passport or national ID numbers. Your visa portal password, app settings and the app's local database stay on your own PC, in the secure credential store of Windows.
Portal page text
For slot checks, page text from visa portals is processed on your own PC inside the desktop app and is not sent to VizaFiz servers. Alerts carry only the metadata needed to notify you (for example route labels and timestamps). If you switch on online AI in the app, page text is sent from your PC directly to the AI provider you chose, for that check only; screenshots are never sent. With local AI it stays on your PC.
Learning mode (page structure only)
In Learning mode, with your consent, VizaFiz records only the structure of the portal pages you open: page address pattern, title, headings, field labels, button names, dropdown options and status messages. No screenshots are taken, and the values you type or select (name, passport number, etc.) are never recorded; personal lines and personal dropdowns are removed on your PC and again before storage. This structure is used only to teach VizaFiz the portal, never sold or shared, and seen only by VizaFiz admins. It is linked to your account id, kept at most 90 days and deleted with your account. You can ask us to delete it sooner through the contact page.
Service providers
We use a small number of carefully chosen service providers (data processors) who act only on our instructions and only for these purposes:
- Cloud hosting, sign-in and database provider - runs the website, account sign-in, database and file storage.
- Email delivery provider - sends account and billing emails.
- Messaging provider (Telegram) - delivers alerts only if you link Telegram.
- Bot protection provider - checks that forms are used by people, not bots.
- Security and abuse-prevention service - short-lived technical counters to stop abuse.
- AI provider - only when you enable online AI in the app; you choose the provider.
Some providers may process data outside Pakistan, with appropriate safeguards. You can ask us for the current list of providers through the contact page.
We do not sell your data and do not use advertising trackers.
Cookies
We use only strictly necessary cookies. See the cookie policy.
Your rights: export and deletion
You can download a copy of your data and request deletion from Settings. Deletion waits 7 days and you can cancel by signing in. When it runs we delete your account, Learning mode data, contact messages and waitlist entry. Payment and invoice records may be kept with personal fields removed so a receipt can still be verified.
Law and complaints
We handle data in line with the laws of Pakistan, including the Prevention of Electronic Crimes Act (PECA) 2016. For any privacy question or complaint, write to vizafizofficial7@gmail.com or use the contact page.
Possible availability, verify on the portal. We do not bypass captchas for anyone.