Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register, create a profile, or use our services, we collect:

• Account Information: Name, email address, country of residence, phone number, and password
• Identity & Immigration Documents: Scans or copies of passports, national identity cards, or other government-issued identification documents you choose to upload
• Immigration History: Visa types previously held or applied for, immigration status, prior petition information, country of birth, country of citizenship, dates of entry/exit, and other immigration-related data
• Employment & Professional Information: Job titles, employer names, work history, salary or compensation details, job descriptions, degrees, publications, citations, awards, patents, memberships, and other professional credentials
• Payment Information: Credit or debit card details, billing address, and transaction history (processed by our third-party payment processor; we do not store full card numbers on our servers)
• Communications: Messages, feedback, and correspondence you send to us via email or the Platform

1.2 Information Collected Automatically

When you use the Platform, we automatically collect certain technical information, including:

• Device and Browser Information: IP address, browser type and version, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click paths, and interactions with AI agents
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies (see Section 7 for details)

1.3 Information from Third Parties

We may receive information about you from third-party sources such as professional networking platforms (if you choose to import your profile), payment processors, or authentication services (e.g., Google or LinkedIn login).

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

• To create and manage your account
• To operate our AI agents and generate personalized immigration profile analysis and recommendations
• To track your profile development progress and provide strategic guidance
• To process payments and manage your subscription

2.2 Platform Improvement

• To train, fine-tune, and improve our AI models and algorithms (using de-identified or aggregated data where possible)
• To analyze usage patterns and improve Platform features and user experience
• To conduct research on immigration profile development strategies

2.3 Communication

• To send transactional communications such as account confirmations, receipts, and service updates
• To send marketing communications about new features or services (you may opt out at any time)
• To respond to your inquiries, support requests, and feedback

2.4 Legal and Security

• To detect and prevent fraud, security breaches, and prohibited activities
• To comply with applicable legal obligations
• To enforce our Terms of Service and protect our rights

3. Legal Basis for Processing (GDPR and Applicable Frameworks)

For users in the European Union, European Economic Area, or jurisdictions with similar data protection laws, our legal bases for processing your personal data include:

• Contractual Necessity: Processing required to provide the services you have requested under our Terms of Service
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights
• Consent: For marketing communications and optional data uses — you may withdraw consent at any time
• Legal Obligation: Processing required to comply with applicable laws

4. How We Share Your Information

4.1 We Do Not Sell Your Data

GreenCard Guide AI does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

4.2 Sharing with Service Providers

We share data with trusted third-party vendors and service providers who assist in operating the Platform, subject to strict data processing agreements, including:

• Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud, or Azure)
• Payment processors (e.g., Stripe) — governed by their own PCI-DSS compliant privacy policies
• AI and machine learning infrastructure providers
• Analytics and product improvement tools
• Email and communication service providers
• Customer support platforms

4.3 Sharing within the Partnership

Information may be shared between Grow Legal Tech (India) and Lai Turner Law PLLC (USA) as necessary to provide our services. Both entities are bound by the obligations set forth in this Privacy Policy. Any such transfer is subject to appropriate safeguards including Standard Contractual Clauses where required.

4.4 Legal Disclosures

We may disclose your information if required to do so by law, court order, subpoena, or other government or law enforcement request, or when we believe disclosure is necessary to protect the rights, property, or safety of GreenCard Guide AI, our users, or the public.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or formation of the intended JV Company, your information may be transferred as part of that transaction. We will notify you of any such transfer and any material changes to how your data is handled.

4.6 With Your Consent

We may share your information with third parties for other purposes with your explicit prior consent.

5. Sensitive Personal Data and Special Category Information

The Platform processes certain categories of sensitive personal data, including:

• Government-issued identity documents (passport scans, national ID cards)
• Immigration status and history (which may indirectly reveal national origin or ethnicity)
• Professional and financial information (employment history, compensation data)

We treat this information with heightened care. We apply additional security controls to sensitive data, restrict access to authorized personnel only, and do not use sensitive data for purposes beyond providing and improving your requested services.

You have the right to request deletion of sensitive documents from our systems at any time. Upon verified request, we will delete uploaded identity documents within 30 days, subject to any legal retention obligations.

6. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services. Specific retention periods are as follows:

Upon account deletion, we will delete or anonymize your personal data within 60 days, except where retention is required by law.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Platform. Types of cookies we use:

• Essential Cookies: Required for the Platform to function (e.g., session management, authentication). These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to improve your experience.
• Analytics Cookies: Help us understand how users interact with the Platform (e.g., Google Analytics). These are subject to opt-out.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These require your consent.

You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

8. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Role-based access controls limiting data access to authorized personnel
• Regular security audits and vulnerability assessments
• Secure data centers with physical and logical access controls
• Employee data privacy training and confidentiality agreements

Despite these measures, no security system is impenetrable. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable regulatory authorities as required by law, within the timeframes prescribed by applicable data protection regulations.

9. International Data Transfers

As GreenCard Guide AI operates across the United States and India, your personal data may be transferred to and processed in countries outside your country of residence. These countries may have different data protection laws than your home country.

We ensure that any cross-border transfer of your personal data is carried out in compliance with applicable data protection laws, using appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements (DPAs) with all service providers
• Privacy frameworks applicable to India-US data transfers

For users in the European Union or European Economic Area, where personal data is transferred to countries not recognized by the EU Commission as providing an adequate level of data protection, we will use appropriate safeguards as required under Chapter V of the GDPR.

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

10.1 Rights Available to All Users

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent for processing based on consent at any time

10.2 Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to Know: The categories and specific pieces of personal information we have collected, disclosed, or sold
• Right to Delete: Request deletion of personal information, subject to applicable exceptions
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to that which is necessary for the service
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact us at support@greencardguide.ai. We will verify your identity before processing your request.

10.3 Rights for EU/EEA Residents (GDPR)

If you are located in the European Union or EEA, you have rights under the General Data Protection Regulation (GDPR) including the right to object to processing, the right to restriction, and the right to lodge a complaint with your local supervisory authority.

10.4 Exercising Your Rights

To exercise any of your privacy rights, please contact us at support@greencardguide.ai. We will respond to verifiable requests within the timeframe required by applicable law (generally 30 days, with possible extension).

11. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected personal data from a person under 18, we will take immediate steps to delete such data. If you believe we have collected data from a minor, please contact us at support@greencardguide.ai.

12. Marketing Communications and Opt-Out

With your consent, we may send you marketing emails, newsletters, or promotional communications about our services. You may opt out of receiving marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Updating your communication preferences in your account settings
• Contacting us at support@greencardguide.ai

Please note that even if you opt out of marketing communications, we may still send you transactional messages necessary to manage your account or provide the services you have requested.

13. Third-Party Links and Services

Our Platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party platforms. We encourage you to review the privacy policies of any third-party services you access through our Platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of any material changes by posting a prominent notice on the Platform and, where required by law, by sending you an email notification. The “Last Updated” date at the top of this policy reflects the date of the most recent revision.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Information and Data Controller Details

For privacy-related inquiries, to exercise your rights, or to reach our Data Protection Officer (if appointed), please contact: