Privacy Policy

Effective June 19, 2026

1. Who We Are

Tirmazi Labs operates Visa Atlas, a travel planning application that helps you manage trips, visa requirements, and bookings. This policy explains how we collect, use, and protect your personal data.

2. Data We Collect

We collect the following categories of data:

• Account info — name, email address, and profile image
• Trip data — destinations, dates, and itineraries you create
• Booking data — flights, hotels, and reservations you add
• Visa info — passport details and visa requirements you track
• Collaborative content — messages and notes you post in shared trips
• Device data — local storage used for offline access and preferences

3. How We Use Your Data

Your data is used exclusively to provide app features:

• Trip planning — displaying destinations, visa requirements, and logistics
• AI-assisted planning — we send the trip details you provide (destination, dates, interests) to our AI provider to generate and refine itineraries
• Collaborative trips — sharing trip access with invited members
• Account verification emails — confirming your account via email

We do not sell your data, use it for advertising, or share it with third parties for marketing purposes.

4. Legal Basis (GDPR)

For users in the European Union, we process your data under the following legal bases:

• Contract — processing necessary to deliver the app services you requested
• Consent — optional features you choose to enable, which you can withdraw at any time from settings
• Legitimate interest — security measures, fraud prevention, and abuse detection

5. Third-Party Services

Visa Atlas uses the following third-party services:

• Convex — our database and backend infrastructure, hosted in the EU
• Anthropic — our AI provider, which processes the trip details you submit to generate itineraries; your data is not used to train their models
• Apple OAuth — optional sign-in via your Apple ID
• Google OAuth — optional sign-in via your Google account
• Resend — transactional email delivery for verification messages

We do not use any advertising networks or third-party analytics trackers.

6. Collaborative Content & Moderation

Trips can be shared with people you invite. Messages you post in a shared trip are visible to that trip's collaborators. We have zero tolerance for objectionable content. You can report any message or block any collaborator from within a trip's chat; reported content is reviewed within 24 hours and offending users may be removed.

7. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all associated personal data is permanently removed from our systems within 30 days. Local data stored on your device is cleared when you uninstall the app.

8. Your Rights

Depending on your location, you may have the following rights:

• Access — request an export of all data we hold about you
• Rectification — edit or correct your personal information
• Erasure — delete your account and all associated data
• Portability — receive your data in a machine-readable JSON format
• Withdraw consent — disable optional features at any time via settings
• Lodge a complaint — contact your local data protection authority if you believe your rights have been violated

9. Data Security

We protect your data using industry-standard security practices:

• All data is transmitted over HTTPS with TLS encryption
• Sensitive data stored on your device uses encrypted local storage
• Role-based access control ensures collaborators can only see trips they have been invited to

10. Children

Visa Atlas is not intended for users under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify you within the app before the changes take effect. Your continued use of Visa Atlas after any update constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal data, please contact us at shan@tirmizilabs.com.