Privacy
immiagent is built for immigration practices that handle sensitive client records. This page explains the data we collect, why we collect it, and the controls available to account owners.
Last updated: May 26, 2026
We process account details, workspace settings, client intake information, uploaded documents, generated form outputs, audit activity, support requests, and billing details when they are needed to operate the service.
Immigration files can include passports, identity documents, contact information, education and employment history, family details, and other personal information that your practice chooses to upload or collect through the platform.
We use data to provide document preparation workflows, client portals, checklist tracking, AI-assisted extraction, form filling, notifications, support, billing, fraud prevention, and security monitoring.
We do not sell client data. We do not use customer workspace content for advertising.
immiagent uses third-party AI providers to extract structured information from documents (e.g. passport machine-readable zones, education credentials) and from conversational intake responses. The primary AI sub-processor is OpenAI, whose services are hosted in the United States.
Per OpenAI's API data policy, inputs and outputs sent through their API are not used to train OpenAI's models. OpenAI may retain API inputs and outputs for up to 30 days for abuse and misuse monitoring, after which they are deleted.
Document content shared with AI providers may include images of passports and identity documents, names, dates of birth, document numbers, addresses, employment history, education credentials, and other personal information that the consultant or applicant submits.
Because OpenAI processes data in the United States, personal information transferred via this path leaves Canada. This is disclosed to applicants on the portal sign-in screen before any data is collected from them.
We share data with the additional service providers needed to run immiagent: Railway (cloud hosting), our managed PostgreSQL database provider, SendGrid (transactional email), Stripe (payments and billing), Langfuse (AI observability), and security and analytics providers.
When an account owner connects third-party services or sends client portal links, data may be shared as directed by that account owner.
Account owners can request export or deletion of workspace data, subject to legal, billing, dispute, security, and backup retention requirements.
Backups and logs may remain for a limited period before they are overwritten through normal retention cycles.
Depending on location, individuals may have rights to access, correct, delete, export, or object to certain processing of personal information.
For privacy requests, contact hello@immiagent.ai with enough detail for us to identify the relevant workspace or client record.