What we store, and why.

Paper Trail Visas is operated by UNDEFINED LABS PTY LTD, ABN 43 662 659 878, and collects the minimum personal information needed to deliver the product. Where GDPR or the Australian Privacy Act applies, we handle requests under the relevant law.

What we collect

• Email address, to deliver toolkit access, receipts, eligibility-quiz results, and updates you request.
• Quiz answers, anonymised verdict outcomes for product improvement.
• Payment metadata, Stripe stores the card details. We store only the session ID, amount, and currency.
• Analytics and diagnostics, including page views, feature usage, Web Vitals, and browser error type, message, and stack trace. We send aggregate product telemetry to EU-hosted PostHog in cookieless mode, respect Do Not Track, and discard raw IP data. When browser telemetry is allowed, Stripe and Convex may send privacy-safe payment, refund, and access outcomes using the same random cookieless identifier, kept only for the browser-tab session. These events contain no name, email, access link, or payment identifier. Paid campaign details may remain in your browser for up to 30 days so a later conversion can be attributed to its landing campaign. Search Console provides aggregate evidence about how pages appear in Google Search.

What we do not collect

We never extract or store passport numbers, the machine-readable zone, or bank account numbers. We do not use session replay, and we block telemetry on access, sharing, unsubscribe, and payment-return URLs that carry opaque credentials. The document check captures only the small set of fields needed to run its validity checks (for example a name as printed, a document date, or whether a balance figure is present), and nothing more.

Document check

Inside a paid toolkit you can upload documents (such as a passport page or a bank statement) so we can match each one against that track's known document list and build a coverage map. This is how we handle those files:

• Analysis-only retention. We keep the derived analysis (the coverage map and the small safe field set above). We do not keep the document for ongoing use.
• Raw files purged after seven days. The uploaded file is stored in Cloudflare R2 and is automatically removed about seven days after upload, by a scheduled purge with a storage lifecycle rule as a backstop. After that you see "file removed for your security, re-upload to re-check"; the analysis stays.
• One-click delete-all. The "Delete all" control in the document check removes every uploaded file and its analysis for that toolkit immediately. This cannot be undone.
• Sharing is analysis-only. If you create a shareable link, it carries the coverage analysis only. It never exposes the raw files.

Email preferences

Commercial emails include an unsubscribe link. We apply an opt-out immediately and do not send further commercial email unless you make a new request. Essential service messages that you initiate or need to use a purchase—such as receipts, access links, and sign-in links—are separate.

Your rights

Email hello@papertrailvisas.com to access, correct or delete your data. We aim to respond within 30 days.