Paper Trail Visas

What we store, and why.

Paper Trail Visas is operated by UNDEFINED LABS PTY LTD, ABN 43 662 659 878, and collects the minimum personal information needed to deliver the product. Where GDPR or the Australian Privacy Act applies, we handle requests under the relevant law.

What we collect

  • Email address, to deliver toolkit access, receipts, eligibility-quiz results, and updates you request.
  • Quiz answers, anonymised verdict outcomes for product improvement.
  • Payment metadata, Stripe stores the card details. We store only the session ID, amount, and currency.
  • Analytics and diagnostics, including page views, feature usage, Web Vitals, and browser error type, message, and stack trace. If you visit from the EU, the EEA, the UK, or Switzerland, this runs only if you choose Allow analytics when we ask, and we ask again after six months. Elsewhere it runs unless you turn it off. Wherever you are, you can change your answer at any time with Privacy choices at the foot of every page. We use your approximate location only to make this decision and do not store it. With your permission, we send product telemetry to EU-hosted PostHog in cookieless mode and discard raw IP data. We never run it when your browser sends Do Not Track. Stripe and Convex may then send privacy-safe payment, refund, and access outcomes using the same random identifier, kept only for the browser-tab session. These events contain no name, email, access link, or payment identifier. Paid campaign details, including ad click identifiers, may remain in your browser for up to 30 days so a later purchase can be attributed to its landing campaign. If you decline, or have not yet answered where we ask first, we store none of this, ad click identifiers never leave your browser, and the only thing we keep on your device is your answer. Search Console provides aggregate evidence about how pages appear in Google Search.

What we do not collect

We never extract or store passport numbers, the machine-readable zone, or bank account numbers. We do not use session replay, and we block telemetry on access, sharing, unsubscribe, and payment-return URLs that carry opaque credentials. The document check captures only the small set of fields needed to run its validity checks (for example a name as printed, a document date, or whether a balance figure is present), and nothing more.

Document check

Inside a paid toolkit you can upload documents (such as a passport page or a bank statement) so we can match each one against that track's known document list and build a coverage map. This is how we handle those files:

  • Analysis-only retention. We keep the derived analysis (the coverage map and the small safe field set above). We do not keep the document for ongoing use.
  • Raw files purged after seven days. The uploaded file is stored in Cloudflare R2 and is automatically removed about seven days after upload, by a scheduled purge with a storage lifecycle rule as a backstop. After that you see "file removed for your security, re-upload to re-check"; the analysis stays.
  • One-click delete-all. The "Delete all" control in the document check removes every uploaded file and its analysis for that toolkit immediately. This cannot be undone.
  • Sharing is analysis-only. If you create a shareable link, it carries the coverage analysis only. It never exposes the raw files.

Email preferences

Commercial emails include an unsubscribe link. We apply an opt-out immediately and do not send further commercial email unless you make a new request. Essential service messages that you initiate or need to use a purchase—such as receipts, access links, and sign-in links—are separate.

Your rights

Email hello@papertrailvisas.com to access, correct or delete your data. We aim to respond within 30 days.