Privacy Policy

This Privacy Policy explains how Manar Ventures (doing business as Apply Visitor Visa) (“we”, “us”) collects, uses, discloses, and protects personal information when you use applyvisitorvisa.ca and the associated visitor visa preparation workspace (the “Service”).

We are a sole proprietorship registered in British Columbia, Canada. The Service is intended to help you prepare materials for a Canadian visitor visa application. It is not a government service and is not affiliated with Immigration, Refugees and Citizenship Canada (IRCC).

We collect information you provide, information generated as you use the Service, and limited information collected automatically.

• Account and profile data (e.g., email address, authentication identifiers, display name, profile photo, and sign-in provider).
• Application intake data you enter in forms (e.g., name, date of birth, citizenship, contact details, travel dates, employment details, finances, home ties, and supporting information).
• Sensitive information you choose to provide (e.g., prior refusals, prior overstays, criminal history, or medical disclosures). Please only provide information you are comfortable sharing for the purpose of drafting your documents.
• Chat and workspace content (messages, clarifications, and notes you submit during the guided chat).
• Generated documents and uploads (drafts we generate and files you upload or export, such as checklists, letters, and supporting documents).
• Usage and device data (e.g., pages viewed, timestamps, browser/device information, and approximate location derived from IP) collected via analytics and standard server logs.

If you provide information about other people (for example, family members included in an application), you represent that you have authority to do so and to allow us to use that information for the purposes described in this policy.

We use personal information to:

• Provide, operate, and maintain the Service (including account access and workspace functionality).
• Generate and improve case-specific checklists, summaries, and document drafts based on your inputs.
• Store, retrieve, edit, and export your drafts and uploaded files.
• Provide customer support, troubleshoot issues, and respond to requests.
• Protect the security and integrity of the Service and prevent abuse, fraud, and unauthorized access.
• Comply with legal obligations and enforce our Terms of Service.

We generally rely on consent to collect, use, and disclose personal information, except where otherwise permitted or required by applicable law.

We use third-party large language model (LLM) services to generate drafts and checklists. This involves sending relevant portions of your workspace content (such as intake details and recent chat history) to our AI provider to produce outputs.

Our current AI provider is Google (Gemini API). Learn more about Google’s privacy practices at https://policies.google.com/privacy.

We may also maintain internal audit and troubleshooting logs of LLM requests and outputs (which can include your inputs) to operate the Service, debug issues, and improve prompt quality. Access to these logs is restricted.

Third-party providers may retain and process content in accordance with their own terms and policies. We encourage you to review them.

AI outputs may be inaccurate or incomplete. You should review and verify all generated content before using it.

We do not sell personal information. We disclose personal information only as described below:

• Service providers that help us run the Service (for example, hosting and infrastructure, database/storage, authentication, analytics, and AI providers).
• Examples of providers we use may include Supabase (database, auth, storage) (https://supabase.com/privacy) and Google/Firebase (hosting and analytics) (https://policies.google.com/privacy).
• Payment processors (such as Stripe) when you purchase paid features. Payment details are provided directly to the processor and handled under their policies; we receive limited information needed to record the transaction (for example, confirmation and payment identifiers).
• Legal and safety where we believe disclosure is necessary to comply with law, enforce our agreements, or protect users, the public, or our rights.
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. Some cookies are necessary for core functionality (such as authentication). We may also use analytics tools that collect information about device and usage patterns.

Our analytics tools may include Firebase Analytics. See Google’s privacy policy at https://policies.google.com/privacy.

If we enable advertising features (for example, conversion tracking for Instagram/Meta or Google), we may use additional technologies to measure campaign performance and show relevant ads. We will update this policy and our cookie controls as these features roll out.

We retain personal information for as long as needed to provide the Service, meet legal requirements, resolve disputes, and enforce our agreements. You can delete a case (and its associated messages, intake data, and stored artifacts) from your profile.

When content is deleted, it is removed from active systems. Residual copies may remain in backups for a limited period before being overwritten.

We use service providers that may process or store information in Canada and other jurisdictions (including the United States). When information is processed outside your province or country, it may be subject to the laws of those jurisdictions.

We use administrative, technical, and physical safeguards designed to protect personal information. This includes encrypted connections, access controls, and database protections (such as row-level security) to limit access to authorized users.

No system can be guaranteed to be 100% secure. You are responsible for keeping your login credentials confidential.

Depending on where you live, you may have rights to access, correct, delete, or withdraw consent for the processing of your personal information.

To request access or deletion, or to ask questions about this policy, contact us at support@applyvisitorvisa.ca. If you contact support for a technical issue, you can also reach us at support@applyvisitorvisa.ca.

The Service is intended for use by adults. If you are under the age of majority in your jurisdiction, a parent or guardian should create and manage the account and provide any information submitted through the Service.

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, by posting an updated policy or by email for registered users).