Privacy Policy

Effective date: October 15, 2026  |  Last updated: October 15, 2026

1. Who we are and scope

ImmiPath at https://immipath.fyi (the “Service”) is a free, independently operated personal project (“ImmiPath,” “we,” “us,” or “our”). This Privacy Policy explains how information is handled when you use its Timeline Planner, EB-1 & NIW Self-Assessment, Case Tracker, account, document storage and related features. For privacy requests, contact info@immipath.fyi.

2. Privacy at a glance

• The Timeline Planner and Self-Assessment are designed to process questionnaire answers in your browser. Using them does not ordinarily transmit those answers to our application servers; requesting a report by email is an exception.

• If you request an emailed report, the destination email address and report content are transmitted for delivery through Resend and supporting infrastructure.

• If you create an account, we store account details, saved case records, preferences and any documents you upload to My Documents.

• Account tools may allow you to export available data or submit a deletion request. Exports and deletion are subject to technical availability, identity verification and applicable law.

• We do not sell personal information or display third-party advertising. We do not currently use advertising trackers.

3. Information we handle

Information you provide includes your account email address; authentication and security information managed by our authentication provider; sign-in and account activity records; USCIS receipt numbers, form types, case labels, manually entered case statuses, history and notes; documents uploaded to My Documents and related metadata; communication and email preferences; support messages; and information needed to send requested reports.

Uploaded documents may contain names, dates of birth, immigration records, passport numbers, A-numbers, or other sensitive details. Avoid uploading documents containing Social Security numbers or other information not necessary for your use of the Service. Do not place sensitive identifiers in case names, notes, or support messages.

Planner and assessment inputs and reports generated for download are designed to remain in your browser, except where you deliberately request email delivery or use a feature that transmits information. If enabled in Privacy Choices, “Remember my answers” uses browser storage on your device. Browser data may persist until you clear it or disable the feature.

Our hosting and service providers may automatically process IP addresses, approximate IP-derived location, browser/device characteristics, timestamps, request information, authentication/session data, cookies or similar storage needed for core functions, and diagnostic or security logs.

4. How we use information

• Operate and administer available tools, authentication, case records and documents, including account export and deletion functions when technically available. We may limit, change or discontinue optional features subject to applicable law.

• Deliver requested PDF reports, account and security messages, and optional communications you enable.

• Display user-entered case histories. When automatic USCIS status checking becomes available, process saved receipt numbers to retrieve status updates and deliver enabled alerts.

• Maintain security, investigate misuse, troubleshoot technical issues, respond to support requests and meet legal obligations.

We do not use your assessment answers or case records for targeted advertising.

5. Service providers and disclosures

We use Netlify for website hosting and related infrastructure; Supabase for authentication, account/database services and document storage; and Resend for email delivery and associated processing. Each provider may process relevant information on our behalf under its applicable terms and practices.

If you request a report by email, report contents and your email address pass through the delivery systems and may be accessible or retained in provider logs or email systems. Ordinary email is not guaranteed to be end-to-end encrypted.

When automatic case-status lookup is enabled, saved receipt numbers and necessary technical information may be sent to authorized USCIS interfaces. The “Check on USCIS” link may open an external government website; its data handling is governed by that site’s notices.

If you enable an optional Google-hosted font in Privacy Choices, your browser may contact Google and send normal request information, including an IP address. We may also disclose information to comply with law, address security issues, protect rights, or respond to legal process. We do not sell personal information or share it for cross-context behavioral advertising.

6. Cookies and browser choices

Essential authentication, session and security functionality may use cookies or comparable technologies. Optional “Remember my answers” browser storage and an optional third-party font may be controlled through Privacy Choices, if presented in your version of the Service.

We do not currently use advertising cookies or third-party ad trackers. If our tracking or optional analytics practices change, we will update this Policy and implement legally required notices or choices.

7. Retention, user controls and deletion requests

We generally retain account details, saved cases, documents and preferences while an account or relevant content remains active, or as reasonably needed for operating and protecting the Service and meeting legal requirements. We do not promise indefinite storage, backup, recoverability or continued availability of user content. You should keep independent copies of important information. We may delete inactive accounts or content, or discontinue storage features, subject to applicable law and notices required by law.

Deletion requests and account deletion controls are intended to remove eligible information from active systems, but removal may not be immediate or complete across all systems. Backups, security logs, fraud-prevention records, email-delivery records, legal holds and third-party systems may retain information for different periods. We cannot erase copies already delivered to an email recipient or held by independent third parties. We do not maintain a separate permanent archive of reports sent solely for email delivery, apart from incidental logs or provider records.

Where available, account controls may permit export of certain data and files and submission of deletion requests; export may not include all system metadata, logs or provider records. You may also contact info@immipath.fyi to exercise rights available under applicable law. We may reasonably verify identity and request details needed to locate records. We will honor legally required requests and deadlines, but do not commit to any shorter voluntary response, deletion, restoration, or support timeframe.

8. Your privacy rights

You may use available account controls to view, update or remove certain saved information, and manage communication preferences. Some controls may be unavailable during maintenance or after a feature is discontinued. Requests for access, deletion or correction may be sent to info@immipath.fyi and will be handled to the extent and within the timeframes required by applicable law. We may decline or limit requests where a legal exception applies and provide legally required explanations or appeal procedures.

Optional monthly digest emails may be disabled through your preferences or an unsubscribe link. Essential service and security emails may still be sent when needed to operate your account.

9. Security

We maintain safeguards designed to protect information in light of our operations, including authentication, access controls and encrypted transmission where supported. We do not guarantee that security measures will prevent every incident, that data will always be accessible, or that stored documents can always be recovered. Access to uploaded documents is intended to be limited to authorized accounts; actual configuration and permissions must be verified in the deployed system. Legal security and breach-notification duties remain applicable.

10. Children and international access

The Service is intended for adults aged 18 and older and is not directed to children. If you believe a child submitted personal information, contact us. Adults should share only the minimum necessary information about family members.

Users may access the Service from outside the United States. Our providers may process information in the United States or other jurisdictions whose privacy laws differ from yours.

11. External links and educational services

External links, including government sites, are governed by their operators’ policies. ImmiPath is not affiliated with USCIS or any government agency. Our educational information and tools do not constitute immigration legal advice or representation. These disclosures do not reduce privacy rights provided by law.

12. Changes and contact

We may revise this Policy when practices, features, providers or legal requirements change. The updated version will be posted with a revised date; additional notice or consent will be provided when required by law. We do not promise individually to notify every user of every change. Privacy questions and legally available requests: info@immipath.fyi.