Privacy policy
What we store, and why.
Paper Trail Visas is operated by an Australian company and collects the minimum personal information needed to deliver the product. Where GDPR or the Australian Privacy Act applies, we handle requests under the relevant law.
What we collect
- Email address, to deliver toolkit access, receipts, eligibility-quiz results, and updates you request.
- Quiz answers, anonymised verdict outcomes for product improvement.
- Payment metadata, Stripe stores the card details. We store only the session ID, amount, and currency.
- Analytics events, page views and feature usage via PostHog, with IP truncation enabled.
What we do not collect
We never extract or store passport numbers, the machine-readable zone, or bank account numbers. The document check captures only the small set of fields needed to run its validity checks (for example a name as printed, a document date, or whether a balance figure is present), and nothing more.
Document check
Inside a paid toolkit you can upload documents (such as a passport page or a bank statement) so we can match each one against that track's known document list and build a coverage map. This is how we handle those files:
- Analysis-only retention. We keep the derived analysis (the coverage map and the small safe field set above). We do not keep the document for ongoing use.
- Raw files purged after seven days. The uploaded file is stored in Cloudflare R2 and is automatically removed about seven days after upload, by a scheduled purge with a storage lifecycle rule as a backstop. After that you see "file removed for your security, re-upload to re-check"; the analysis stays.
- One-click delete-all. The "Delete all" control in the document check removes every uploaded file and its analysis for that toolkit immediately. This cannot be undone.
- Sharing is analysis-only. If you create a shareable link, it carries the coverage analysis only. It never exposes the raw files.
Email preferences
Commercial emails include an unsubscribe link. We apply an opt-out immediately and do not send further commercial email unless you make a new request. Essential service messages that you initiate or need to use a purchase—such as receipts, access links, and sign-in links—are separate.
Your rights
Email hello@papertrailvisas.com to access, correct or delete your data. We aim to respond within 30 days.