Travitap Privacy Policy

Version: privacidad v1.0
Effective date: October 23, 2026
Last updated: October 23, 2026

1. Introduction #

Travitap helps you prepare your U.S. tourist visa (B1/B2) through a conversation with Travi, our artificial intelligence agent. To do that, we need to process personal data, and some of it is sensitive: your passport details, your photo, and your answers to the DS-160 security questions.

This policy explains, as clearly as we can, what data we collect, what we use it for, who we share it with, how long we keep it, and how you can exercise your rights.

This policy applies to:

• the travitap.com website, including the blog and the "Start your application" form;
• the app.travitap.com app, when you use it;
• the emails and notifications we send you.

Some features described here may not be available yet. While a feature is unavailable, we do not process the data that depends on it.

Travitap is not part of, or affiliated with, the U.S. government. Only the consular officer decides on your visa.

2. Who is responsible for your data #

We handle all questions, requests, and complaints about your personal data at info@travitap.com. If the law of your country requires a data protection officer or representative, this is also the channel to reach them.

3. What data we collect #

We collect only the data we need for each part of the service. What we process depends on what you use.

3.1 If you fill out the website form #

• Your email address.
• The country where you will apply for the visa and the country where you live.
• When you plan to travel, and whether this is your first visa, a renewal, or whether you were denied before.
• The website language, the page you landed on, the website you came from (domain only), and the campaign parameters in the link you used.
• The version of the consent text you accepted, a technical fingerprint (hash) of that text, and the date and time you accepted it.

As part of the form, the website does not store your IP address, your name, or your browser details.

3.2 If you use the app #

Your account

• Your email address. If you sign in with an account from an external service we offer as a sign-in option, that service shares the basic details we need to identify you (such as your name and email). We never receive your password for that service.
• Your language and country.

Your conversation with Travi

• What you type and the voice messages you send, along with their text transcriptions.
• Your answers to the questions we use to estimate your viability index, and the report generated from them.

Your DS-160 form

The information required by the U.S. government form, for example:

• identity, nationality, and contact details;
• passport details;
• past travel, travel plans, and visa history, including denials;
• family, work, education, and income;
• your answers to the form's security questions, which may cover health, criminal history, or other sensitive matters;
• your visa photo, if you choose to upload it.

Passport reading from a photo (optional)

If you allow us to read your passport from a photo, the image is sent to our artificial intelligence provider only to extract the text. Travitap does not store the passport image: we keep only the details you review and confirm. We do not use facial recognition or verify your identity with that image. You can always type the details in yourself.

Other people's data

If you prepare an application for a family member or for people in your group (for example, your children), we also process their data. See section 12.

Consents, approvals, and signature

• The consents you give (for sensitive data, passport reading, notifications, and for Travitap to sign and submit your DS-160), with their version, technical fingerprint (hash), date, and time.
• Your reviews and approvals of each DS-160 section, the exact version you approved, and the record of the signature and submission.
• If you tap buttons related to payments or bookings, we record that tap to learn which options people are interested in. Tapping one of those buttons does not trigger any charge.

Technical data

• A fingerprint of your IP address calculated with a secret key, which we use to prevent abuse. We do not store your actual IP address.
• If you turn on notifications, the technical details of your device's subscription.
• Technical logs of service usage (for example, how many messages are sent), which we need to run the service and enforce usage limits.

4. How we use your data #

We do not sell your personal data, use it for third-party advertising, or build advertising profiles with it.

If we ever want to use your data for a purpose not listed here, we will let you know and, where the law requires it, ask for your consent again.

5. Sensitive data #

In several countries, your photo, your passport details, and your answers to the DS-160 security questions may be considered sensitive data. That is why:

• we ask for a separate consent, with an unchecked box. That consent covers using this data to prepare, review, sign, and submit your DS-160, and to improve Travitap with the safeguards in section 7;
• you are not required to provide it. Keep in mind, though, that the DS-160 is a U.S. government form that requires those answers, so without them Travi cannot help you complete it;
• reading your passport from a photo is optional: you can always type the details in yourself;
• uploading a visa photo is also optional, and you can continue without it.

6. Artificial intelligence and automated decisions #

• Travi is an artificial intelligence agent, not a person. Its responses are generated by AI models and may contain mistakes. Always review what Travi suggests before you confirm it.
• Travi does not make up information: it fills out the form with what you tell it.
• The viability index is an automated estimate based on your answers. It is for guidance only: it is not a decision on your visa, it does not predict one, and it does not ensure any outcome. Only the consular officer decides.
• You can ask us to explain the general criteria behind the index and to have a person review a result you believe is wrong, as provided by the law of your country.

7. How we use your conversations to improve Travitap #

Conversations with Travi are at the heart of the service, so we use them to improve it. For example, we:

• review the quality of Travi's responses and fix mistakes;
• improve the questions, the explanations, and the instructions Travi follows;
• identify the parts of the process where people get confused or drop off;
• test that changes work well before we release them.

To do this, we apply these safeguards:

• We minimize: we use only what each review needs and, when that is enough, we work with summaries or aggregated data.
• We pseudonymize: when we review specific cases, we remove or replace details that directly identify you (such as your name, passport number, or email), unless they are essential to understand an error.
• We limit access: only the people and systems working on improving the service can see this data, and they are bound by confidentiality.
• We do not sell this data or give it to third parties to improve their own products.
• We follow the retention periods in section 10.

If you disagree with this use, you can object by writing to info@travitap.com. We will review your request under the law of your country.

8. Who we share your data with #

We share your data only with providers who help us deliver the service. They act on Travitap's behalf, follow our instructions, and may not use your data for their own purposes.

If you want to know the name of each provider that processes your data, and the country where it does so, write to us at info@travitap.com. We reply within 10 business days.

We may also disclose data:

• to authorities, when a law or a valid order requires it;
• to defend our rights or the rights of others against a claim;
• to whoever acquires the company or part of it, if that happens, under the same obligations as this policy.

When Travitap submits your DS-160 with your authorization, the data goes to the U.S. government, which handles it under its own rules.

9. International transfers #

TRAVITAP LLC is based in the United States. Your data is processed mainly in the United States and may also be processed in other countries where our providers operate. This means it may leave the country where you live.

Where the law of your country requires it, we protect those transfers with the mechanisms that law recognizes, such as contracts with our providers that include data protection clauses, or your express consent. You can ask us for more information about these mechanisms at info@travitap.com.

10. How long we keep your data #

• Website form data: until you unsubscribe from our emails or ask us to delete it.
• Your account, conversation, and DS-160 data: we delete it 12 months after your application process ends or after 12 months of inactivity on your account, whichever comes first. We will email you before we delete it, so you can return to your account or ask us for a copy of your data.
• Passport image: Travitap does not store it (see section 3.2).
• Consent, approval, and signature records: for as long as needed to prove you gave your consent and to handle claims, under applicable law.
• Backups: deleted data is also removed from backups within 90 days at most, as those backups are replaced.

You can also ask us to delete your data sooner by writing to info@travitap.com.

When we delete your data, we erase it or anonymize it so it no longer identifies you. We may keep some of it longer only if a law requires us to.

11. How we protect your data #

Our current safeguards include:

• an encrypted connection (HTTPS) between your device and our services;
• database access controls, so each user can access only their own information;
• private storage for your visa photo;
• a fingerprint of your IP address instead of the address itself;
• private, expiring links to view your results;
• notifications without personal data: just a general message and a link to the app.

No system is infallible. If a security incident affects your data, we will notify you and the authorities where the law requires it, within the deadlines it sets.

12. Other people's data and minors #

• Travitap is for people 18 and older. It is not directed at children, and we do not knowingly collect data directly from children under 13.
• You may prepare an application for a minor only if you are their parent or legal guardian, or if you have that person's permission. By doing so, you confirm that you hold that role or permission and that you are acting in the minor's best interest. In that case, you give the consents on the minor's behalf, including the signature authorization.
• If you prepare an application for another adult, you confirm that they authorized you to give us their data and that you told them about this policy.
• If we learn that we are processing a minor's data without that permission, we will delete it.

13. Cookies and similar technologies #

• The website does not use advertising cookies or third-party analytics tools, and it does not load content from other sites to track you.
• The app uses cookies and browser storage that are strictly necessary for it to work: keeping you signed in, remembering your country and language, and saving drafts of what you are typing.
• If we add analytics tools in the future, we will update this policy and, where the law requires it, ask for your consent before using them.

14. Emails and notifications #

• We send you emails about your application and your account, such as sign-in codes and important notices.
• If you gave us your consent on the website form, we also send you Travitap updates. You can unsubscribe at any time through the link in the email or by writing to us.
• Phone notifications are optional: you turn them on, and you can turn them off from your device.

15. Your rights #

Depending on the law that applies to you, you have the right to:

• know what data we process about you and access it;
• correct inaccurate or incomplete data;
• ask us to delete it;
• withdraw your consent at any time, without affecting what we did based on it before;
• object to certain uses, such as the one in section 7, and ask us to restrict them;
• receive your data in a commonly used format, where applicable;
• know who we share your data with;
• ask for a person to review an automated decision and for an explanation of its criteria;
• file a complaint with the data protection authority in your country.

How to exercise them: write to info@travitap.com from the email on your account, or the one you used on the form, and tell us what you need. If you are writing on someone else's behalf, send us proof that you represent them. We may ask for more information to verify your identity. We do not charge you for exercising your rights.

At this time, we handle withdrawal and deletion requests by email: there is no button for this in the app.

Response time: we reply within 10 business days. If we need more time, we will let you know and explain why, within the limits set by the law of your country.

15.1 Rights depending on your country #

• If the data protection law of the country where you are grants you additional rights, or sets different time limits or procedures (for example, for inquiries and claims), we respect them and apply whichever is more favorable to you or whichever that law requires.
• If your law requires you to submit your request to us before going to the authority, you can do so by writing to info@travitap.com.
• If your law requires a data protection officer or representative, you can reach them at info@travitap.com.
• You may contact the data protection authority in your country.
• We do not sell your personal data or share it for behavioral advertising.

16. Links to other sites #

Our website may link to other sites, such as the U.S. Department of State's site. Those sites have their own policies, and we are not responsible for how they handle your data.

17. Changes to this policy #

We may update this policy. When we do, we will publish the new version with its date. If the change is significant, we will let you know by email or in the app and, where the law requires it, ask you to accept the new version.

18. Language #

This policy is available in Spanish, English, and Portuguese. If the versions differ, the Spanish version prevails.

19. Contact #

TRAVITAP LLC
1600 Van Lennen Ave Ste 101, Cheyenne, Wyoming 82001, United States
Email: info@travitap.com