Security & data
A visa application is one of the most sensitive bundles of personal data there is. Here’s our contract with you on handling it.
Encryption everywhere
All traffic is TLS 1.2+; documents are encrypted at rest with AES-256. Passport scans processed in-browser (OCR, photo checks) never leave your device on the on-device path.
Minimal collection
We only ask for what the destination government requires for your specific visa — the form is generated per visa, nothing extra.
Deletion on request
Email us and your documents and personal data are erased from active storage within 30 days, except records we're legally required to keep.
No selling, no sharing
Your data goes to the government processing your visa and nowhere else. No advertising resale, ever.
Access control
Document access is limited to the case team working your application, and every access is logged.
Found a vulnerability? Report it to visas@zuumm.ai — we respond within 48 hours and credit responsible disclosure.