Home / Privacy
Legal
Privacy policy
What we collect, what we refuse to collect, and how to make us delete it.
Effective 10 August 2026. If we change anything material, we will say so here and message active subscribers.
The short version
We collect the least we can get away with: a way to message you, the filters that decide which alerts are yours, and your subscription state. We use it to send those alerts. We do not sell it, share it for marketing, or message you about anything else. Ask us to delete it and we delete it.
What we collect
| Data | Why | Kept for |
|---|---|---|
| WhatsApp number or email | To deliver alerts and answer you | While you are a subscriber, plus 12 months |
| Your filters — consulates, visa types, date range, number of applicants | To decide which alerts match you | Same |
| Name, if you give it | So messages are not addressed to a phone number | Same |
| Subscription and payment status | To know what you have paid for | As long as tax and accounting rules require |
| Record of your opt-in | Proof you asked to be messaged — required by WhatsApp policy and by us | 7 years |
| Page, referrer and campaign parameters when you submit a form | To know which channels bring people who stay | 24 months |
| Delivery logs — which alert went to whom, and when | To investigate "I never got it" and to honour the refund guarantee | 12 months |
What we never collect
- Your visa-scheduling login. Not at signup, not for any tier, not ever. We could not use it if you sent it, and we would ask you to change it.
- Passport numbers, case numbers, or any immigration document. We do not need them and we do not want the responsibility of holding them.
- Payment card details. Those go directly to the payment provider. We see that a payment succeeded, not how it was made.
Card payments
Payments are processed by a third-party payment provider under their own privacy terms. We receive a confirmation and a reference, never the card itself.
Who else sees your data
Only the services required to run the product, and only the part each of them needs:
- WhatsApp / Meta — to deliver a message to your number, subject to their own terms.
- Our database and hosting providers — encrypted storage of the records above.
- The payment provider — for billing.
Nobody else. We do not sell contact data, we do not run advertising pixels that build profiles of you across other sites, and we do not swap lists with anyone.
Analytics
We measure which pages people read and which channels bring them, in aggregate. If consent is required where you are, we ask before setting anything that is not strictly necessary to make the site work.
Messaging rules we hold ourselves to
- We only message people who messaged us first. We never buy or scrape numbers, and we do not harvest them from public groups.
- We only message you about your alerts and your subscription.
- Reply STOP and it ends immediately.
Your rights
Wherever you are, you can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it — including under India's Digital Personal Data Protection Act and the GDPR where they apply. Email support@visaslotsplus.com. We action deletion requests within 30 days and usually the same week. There is no retention flow and nobody will call you to talk you out of it.
Security
Data is encrypted in transit and at rest, access is limited to what running the service requires, and we do not keep copies of anything on personal devices. No system is perfect; if we ever suffer a breach affecting you, we will tell you what happened and what it means rather than issuing a statement about how seriously we take security.
Children
This service is not directed at anyone under 18 and we do not knowingly collect their data. A minor listed on a family application is not a subscriber — we hold a count of applicants, not their identities.
Contact
Questions, complaints, or a deletion request: support@visaslotsplus.com.