Privacy Policy

1. Who is responsible for your data

The controller is TRAVEL MUNDO – FZCO, a Free Zone Company (FZCO) registered in the United Arab Emirates under licence no. 28833 issued by the Dubai Integrated Economic Zones Authority (DIEZ), whose registered address is DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. For any question about your data, write to support@usimmigrationassistance.us.

2. Data we collect

Depending on the service, we collect:

• identity and contact details: name, date and place of birth, nationality, email address, phone number, address;
• passport details and, for some applications, a scan of your passport and a photo;
• the answers required by the official forms: travel plans, family, employment, education, travel history and eligibility questions (which may include information about your health or criminal record, when the official form asks for it);
• information about other people that the official form asks for (family members, a contact person in the United States and, for the F-1 visa, two contacts in your country of nationality: name, address, phone number, email address). We use it only to submit your application to the US authorities; please let these people know;
• payment information: amount, date and status of the payment. Your card details are collected directly by our payment provider Checkout.com; we never store your full card number;
• technical data: IP address, browser type and pages visited, for security and for the operation of the website;
• your messages to our support team.

3. Why we use your data

• to prepare, review and submit your application, and to inform you of its progress (performance of our contract with you);
• to process payments, prevent fraud and handle refunds and disputes (performance of the contract and our legitimate interest);
• to answer your questions (performance of the contract);
• to meet our legal obligations, for example accounting obligations (legal obligation);
• to measure the results of our advertising with Google's advertising tag (Google Ads): in the European Economic Area, the United Kingdom and Switzerland only with your consent; elsewhere on the basis of our legitimate interest, unless you refuse in the cookie banner or your browser sends the Global Privacy Control signal (see section 10); to personalise ads and to send you offers, only with your consent, which you can withdraw at any time.

We do not sell your personal data. We do not make decisions about you based solely on automated processing.

4. Who receives your data

We share your data only when necessary:

• with the US authorities (CBP for the ESTA, the Department of State for the visa), when we submit your application at your request; they process it under their own rules;
• with our service providers, who act on our instructions: website hosting and database (Vercel and Supabase, servers in Virginia, USA), payment (Checkout.com), email sending (Brevo), security (Cloudflare) and, only if you use the automatic reading of your passport, document reading (Microsoft Azure; we ask Azure to delete the result right after the reading);
• with Google (Google Ads), to measure the results of our ads, as explained in section 10: the fact that a purchase took place, its amount, a payment number and the identifier of the ad you clicked, with technical data such as your IP address and browser; never your name, email address, passport or the content of your application;
• with the authorities or courts, when the law requires it.

5. International transfers

Your data is stored in the United States (Virginia) and may be processed in other countries by our service providers (for example Microsoft Azure, for the automatic reading of your passport). For customers in Brazil (LGPD) or the European Union (GDPR), we protect these transfers with the safeguards provided by law, such as standard contractual clauses with our providers.

6. How long we keep your data

• passport scans and photos: deleted 90 days after your application is completed;
• other application data: deleted 6 months after our last interaction with you;
• payment and invoicing records: kept for 5 years to meet our accounting obligations;
• unpaid draft applications: deleted after 30 days.

7. Security

Your data is transmitted over an encrypted connection (HTTPS). Passport numbers and documents are encrypted in our database, and only the team handling your application can access them. If a data breach is likely to affect you, we will inform you and the competent authorities as required by law.

8. Your rights

You can ask us to access, correct or delete your data, to receive a copy of it, to restrict or object to its use, and to withdraw your consent at any time. Write to support@usimmigrationassistance.us. We may ask you to confirm your identity. We answer within the time limits set by the applicable law.

You can also file a complaint with the data protection authority of your country, for example the ANPD in Brazil.

9. Minors

Our services are intended for adults. A parent or legal guardian may apply on behalf of a minor; in that case, the data is provided by the parent or guardian.

10. Cookies

We use cookies that are strictly necessary for the operation and security of the website (application in progress, payment, “My application”) and a cookie that keeps your choice about advertising (180 days).

Advertising measurement: on the information pages, and on a page without personal data shown right after a payment, we use Google's advertising tag (Google Ads). It is never loaded on the application, payment or “My application” pages. When you arrive from one of our ads, we keep the identifier of the ad you clicked in a cookie (uia_click, 90 days), and Google may place its own advertising cookies (_gcl_*, 90 days), so that a purchase can be linked to the ad.

In the European Economic Area, the United Kingdom and Switzerland, these advertising cookies are only used if you accept them. Elsewhere, they are used by default unless you refuse. Ad personalisation (remarketing) is only allowed if you accept.

If you click “Refuse”, or if your browser sends the Global Privacy Control signal, Google's tag is no longer loaded and nothing is sent to Google; “Refuse” also deletes the advertising cookies. You can change your choice at any time with the “Cookie settings” link at the bottom of the information pages.

11. Changes to this policy

We may update this policy. We will publish the new version on this page with its date and, in case of important changes, we will inform you by email.