Privacy Policy

Summary

TimeVisas collects your personal data only to process your visa application. We share it only with the relevant embassy or consulate. We do not sell your data, use it for advertising, or share it with any third party beyond what is necessary. You have the right to access, correct, and delete your data at any time.

1. Who we are

TimeVisas is operated by Time Leisure, S45 Parvati Industrial Estate, Pune Satara Road, Pune 411009 (GSTIN: 27AANPN8440Q1ZS).

Contact: support@timevisas.com · +91 90280 11022

2. What data we collect

Personal identification: Full name, date of birth, passport number, passport expiry date.

Contact information: Email address, mobile number, residential address.

Travel information: Destination, travel dates, accommodation, purpose of visit.

Documents: Passport scans, bank statements, salary slips, ITR, employment letters, photographs, and any other documents required by the relevant embassy.

Payment: Booking fees are processed by Razorpay. TimeVisas does not store card or bank details.

Usage data: Pages visited, browser type — via Google Analytics, only with your cookie consent.

3. Why we collect your data

Primary purpose: To process your visa application — reviewing documents, preparing cover letters and itineraries, submitting to the embassy, and communicating status updates.

Communication: Application updates via email and WhatsApp.

Legal compliance: GST record-keeping as required by Indian law.

We do not use your data for advertising or share it with third parties beyond what is necessary for your application.

4. Legal basis (DPDP Act, 2023)

Consent: You provide explicit consent at application submission. You may withdraw consent at any time — this will prevent further processing of your application.

Contractual necessity: Processing is required to deliver the visa facilitation service you have requested.

Legal obligation: GST compliance under Indian tax law.

5. Who we share your data with

Embassy or consulate: Your documents and personal data are submitted to the relevant embassy, consulate, or visa processing centre (e.g. VFS Global) — this is the primary purpose for which you provided the data.

Technology providers: Supabase (encrypted storage), Resend (email), Clerk (authentication), Razorpay (payments). These providers act under data processing agreements and do not use your data for their own purposes.

We do not sell, rent, or share your data with advertisers under any circumstances.

6. How we protect your data

Encryption: All uploaded documents are stored in encrypted storage on Supabase servers.

Access control: Only TimeVisas staff directly involved in your application can access your data.

Secure transmission: All data is transmitted via HTTPS/TLS encryption.

Payment security: Card details are handled entirely by Razorpay (PCI-DSS compliant). TimeVisas never sees your payment credentials.

In the event of a data breach affecting your rights, we will notify you and the relevant authority as required under the DPDP Act, 2023.

7. How long we keep your data

Application documents: 12 months after your application is completed, then deleted.

Account data: Until you request deletion. We delete within 30 days of a valid request.

Invoice records: 7 years as required by Indian GST law (limited to name and service amount — not passport or travel documents).

Analytics: Anonymised and aggregated — no individual retention period applies.

8. Your rights under the DPDP Act, 2023

Right to access: Request a copy of the personal data we hold about you.

Right to correction: Request correction of inaccurate or incomplete data.

Right to erasure: Request deletion of your personal data within 30 days, subject to legal retention obligations.

Right to withdraw consent: Withdraw consent at any time by contacting us.

Right to grievance redressal: Raise a complaint with us directly. If unresolved, approach the Data Protection Board of India.

To exercise any right: support@timevisas.com or +91 90280 11022. We respond within 30 days.

9. Cookies and analytics

Analytics (Google Analytics 4) and error monitoring (Sentry) are active only if you click Accept on our cookie banner.

Essential authentication cookies (Clerk) are necessary for your account and do not require consent.

No advertising cookies are used. We do not share cookie data with advertisers.

Change your preference: clear local storage for timevisas.com — the consent banner will reappear.

10. Children's data

TimeVisas does not knowingly collect data from children under 18 directly. If your application includes a minor, you confirm you are the parent or legal guardian authorised to provide that minor's data.

11. Changes to this policy

We may update this policy when our practices change or when required by law. Material changes will be notified via email. The effective date at the top will be updated.

12. Contact us

Email: support@timevisas.com Phone: +91 90280 11022 Address: Time Leisure, S45 Parvati Industrial Estate, Pune Satara Road, Pune 411009, Maharashtra, India

We respond to all privacy requests within 30 days.

Governing law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules. Disputes are subject to the exclusive jurisdiction of the courts of Pune, Maharashtra.