Privacy Policy

1. Introduction

Welcome to Immi, operated by Use Immi Ltd, a company registered in the United Kingdom ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our UK immigration absence tracking service.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

• Account Information: Name, email address, and authentication credentials
• Immigration Data: Visa type, immigration intention, entry dates, and eligibility information
• Travel Records: Trip dates, destinations, and supporting evidence (passport scans, flight tickets, etc.)
• Profile Data: Settings and preferences related to your account

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with our service
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, access times, and pages viewed

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our absence tracking service
• To calculate and monitor your UK immigration absence compliance
• To send you notifications about important changes to your absence status
• To improve and personalize your experience
• To respond to your requests and provide customer support
• To detect, prevent, and address technical issues or fraudulent activity
• To comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices. We use Supabase as our database provider, which provides enterprise-grade security, including:

• Encryption at rest and in transit
• Regular security audits and monitoring
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party service providers who assist us in operating our service (e.g., hosting, analytics)
• Legal Requirements: When required by law or to protect our rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly consent to share your information

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a structured format
• Withdraw Consent: Withdraw consent for processing where applicable
• Object: Object to certain types of processing

To exercise these rights, please contact us using the information provided at the end of this policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country of residence. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Services

Our service may contain links to third-party websites or services. We use the following third-party services:

• Supabase: Database and authentication services
• Vercel: Hosting and deployment
• OpenAI: AI-powered document processing (optional feature)

These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review their privacy policies.

11. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience. These include:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our service

You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of our service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

14. GDPR Compliance (for EU/UK Users)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to lodge a complaint with a supervisory authority
• The right to restriction of processing
• The right to object to automated decision-making

Our lawful basis for processing your personal information includes:

• Contract Performance: To provide the services you requested
• Consent: Where you have given explicit consent
• Legitimate Interests: To improve and secure our services
• Legal Obligation: To comply with applicable laws