PRIVACY POLICY

1) Who we are & scope

This Privacy Policy explains how Visa Nexus AI (the “Service”) collects, uses, and protects information. Visa Nexus AI is a public-benefit initiative of Build Champions, a U.S. 501(c)(3) nonprofit (EIN: 92-3110997) (“Build Champions,” “we,” “us,” or “our”).

Legal notice: Visa Nexus AI is an educational, self-help AI Immigration platform. We are not a law firm, do not provide legal advice, and use of the Service does not create an attorney-client relationship. We are not affiliated with USCIS or any government agency.

This Policy applies to our websites, apps, and services that link to it. It does not cover third-party sites and services we do not control.

2) Information we collect

A. Information you provide

• Account details (name, email, password).
• Profile details you choose to add (e.g., country of origin, language preference).
• Content you upload (documents, forms, notes, voice recordings).
• Support messages and survey responses.
• Donation and payment details (amount, billing info; card data is processed by our payment processor and not stored by us).
• Volunteer/partner submissions (name, organization, contact info).

B. Information collected automatically

• Device & log data (IP address, browser type, OS, device identifiers, pages viewed, timestamps, referral URLs).
• Cookies & similar technologies for essential functions, analytics, and preferences (see §10).

C. Information from third parties

• Payment processors (transaction confirmations, limited billing metadata).
• Email & analytics providers (delivery status, aggregated usage).
• Attorney/clinic referral partners (whether a referral was completed; no legal advice details).

D. Sensitive information

You may choose to upload sensitive personal information (e.g., immigration history, government IDs). Upload only what is necessary. Do not upload protected health information (PHI) or information you are not authorized to share. The Service is not designed for attorney-client privileged communications.

3) How we use information

• Provide and improve the Service, including AI-assisted features you request.
• Operate accounts, authenticate users, and secure the platform.
• Process donations and payments, send receipts, and maintain records.
• Send transactional messages (e.g., verification, reminders you opt into).
• Respond to support and manage your requests and preferences.
• Analyze usage to improve reliability, accessibility, and content quality.
• Comply with law, enforce our Terms of Service, and protect against abuse, fraud, or security threats.
• Run nonprofit operations, transparency, and accounting (e.g., program reporting, audits).

We do not sell donor or user personal information. We do not run third-party ads or affiliate advertising.

4) Legal bases (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on: Contract (to provide the Service), Legitimate Interests (security, quality, analytics in a proportionate manner), Consent (e.g., certain cookies/communications), and Legal Obligations (tax, accounting).

5) How we share information

We share information only as needed to operate the Service or as required by law:

• Vendors/Processors under contract (e.g., cloud hosting, email, payments, analytics, customer support).
• Referral partners when you ask us to connect you to legal aid or attorneys (limited contact and referral status).
• Compliance & safety (to comply with lawful requests, protect rights, prevent fraud or security incidents).
• Organizational transfers (e.g., merger, reorganization) consistent with this Policy.

We do not share personal information with third parties for their direct marketing.

6) Donations & payments

Donations and paid plans are processed by trusted PCI-compliant processors over HTTPS. We receive limited billing metadata and transaction confirmations. Donation records are retained for tax, audit, and nonprofit reporting.

7) Data retention

• Account data: while your account is active and up to 24 months after closure (unless you request earlier deletion or longer retention is required by law).
• Documents/uploads: until you delete them or your account is deleted; backups roll off on a scheduled cycle.
• Logs & analytics: typically 12–18 months in aggregated or de-identified form.
• Donations & financial records: typically 7 years for tax/audit purposes.

8) Security

We use administrative, technical, and physical safeguards, including encryption in transit (HTTPS) and encryption at rest, access controls, least-privilege practices, and vendor due diligence. No system is 100% secure; you use the Service at your own risk. Protect your password and notify us of suspected unauthorized access at security@visanexusai.com.

9) Your choices

• Access, correct, delete: Manage much of your information in your account. You can request access, correction, or deletion at privacy@visanexusai.com.
• Download your data: You may request an export of your uploaded content.
• Email preferences: Unsubscribe from non-transactional emails via links in messages or account settings.
• Cookies: See §10 for controls.
• Do Not Track: We do not respond to browser DNT signals; use the cookie controls described below.

10) Cookies & similar technologies

We use:

• Strictly necessary cookies (security, session, core features).
• Preferences (remember settings like language).
• Analytics (aggregate usage to improve content and reliability).

You can: (a) manage cookies in your browser, (b) use our Cookie Preferences tool ([link to /cookie-preferences]) where available, and (c) opt out of certain analytics where offered. Blocking some cookies may impact functionality.

11) Your privacy rights (U.S. & state laws)

Depending on where you live (e.g., California, Colorado, Connecticut, Virginia, Utah), you may have rights to access, delete, correct, port your data, limit the use of sensitive information, and opt out of “sales” or “sharing” (as defined by law).

We do not sell personal information and do not share it for cross-context behavioral advertising.

You may exercise your rights by deleting data from the dashboard or emailing privacy@visanexusai.com.

We’ll verify your request (for example, by emailing a confirmation link/code) and respond within the time required by law (generally 45 days, with a possible 45-day extension for complex requests).

If we decline your request, you may appeal by replying to our decision or emailing privacy-appeals@visanexusai.com. If you remain unsatisfied, you may contact your state Attorney General.

Note: Some U.S. state privacy laws may not apply to nonprofits. Regardless, we voluntarily honor the rights above as part of our commitment to transparency and user control.

12) EEA/UK data subject rights & transfers

If GDPR/UK GDPR applies, you have rights to access, rectify, erase, port, restrict, and object to processing; and to withdraw consent where processing is based on consent. You may lodge a complaint with your local supervisory authority.

If we transfer your data outside the EEA/UK, we rely on Standard Contractual Clauses or other lawful mechanisms. Contact: privacy@visanexusai.com.

13) Children’s privacy

The Service is not directed to children under 13 (or under the age of digital consent in your region). We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact privacy@visanexusai.com and we will delete it.

14) Communications

We may send you transactional emails (e.g., verification, receipts, reminders you opt in to). With your consent, we may send informational updates about our nonprofit work. You can opt out at any time (except transactional messages required to provide the Service).

15) Third-party links

Our site may contain links to third-party websites. We are not responsible for their privacy practices. Review their policies before providing personal information.

16) Nonprofit transparency & stewardship

Build Champions is a 501(c)(3) nonprofit. As disclosed on our site, at least 65% of our proceeds support charitable programs, including education initiatives and legal-resource support for underserved communities. We do not sell donor lists. We may publicly acknowledge donors unless you request anonymity.

17) Changes to this Policy

We may update this Policy from time to time. Changes take effect when posted (see “Last updated” date above). If we make material changes, we will provide reasonable notice (e.g., by email or in-product notice).

18) Contact us

Build Champions / Visa Nexus AI
General & Privacy: privacy@visanexusai.com
Security: security@visanexusai.com
Donations: donations@visanexusai.com