Privacy Policy
2026-05
VisaGenes is operated by FCA Group / MetropolVisa. This policy explains what personal data we process, why, and the rights you have under the UK/EU GDPR and Turkey's KVKK (Law No. 6698).
1. Data we collect
Assessment answers you enter (e.g. nationality, finances, travel history). These are processed to generate your readiness score.
If you sign in: your name, email address and profile picture from your chosen provider (Google).
Technical data: IP address (stored only as a salted hash), browser type, and basic usage analytics.
2. How we use your data
To generate your visa readiness score and document analysis.
If you sign in or consent, to contact you about relevant immigration services offered by MetropolVisa.
To monitor, secure and improve the service.
3. Legal basis
Consent — for marketing contact and for processing your assessment answers.
Legitimate interest — for security, fraud prevention and service improvement.
4. Who we share data with
Google (Gemini API) — your assessment text is sent to Google's AI to generate the analysis.
Vercel (hosting + privacy-friendly traffic analytics), Upstash (rate limiting + aggregate visitor counts), Supabase (database), Brevo (email marketing), Notion (CRM + workflow), Stripe (payments — card data never touches our servers), Google (authentication), Microsoft (Clarity — behavioural heatmaps and masked session recordings), Sentry (error monitoring), and n8n (workflow automation).
We never sell your personal data.
5. Retention
Anonymous assessments are retained for up to 12 months. Account data is kept while your account is active and for up to 24 months afterwards, unless you ask us to delete it sooner.
6. Your rights
Under GDPR and KVKK you may request access to, correction of, or deletion of your data; object to processing; and withdraw consent at any time.
To exercise any right, contact us at info@metropolvisa.com.
7. Cookies
Essential cookies — a session cookie for sign-in and security.
Analytics cookies — Microsoft Clarity sets cookies to build behavioural heatmaps and masked session recordings (it automatically masks text and form inputs) so we can see where the site can be improved.
We also keep aggregate, non-identifying visitor counts (page and country totals); no IP address is stored for these. We do not use advertising cookies and we never sell your data.
8. Contact
Questions about this policy: info@metropolvisa.com.