Privacy Policy
Last updated: April 9, 2026
1. Information We Collect
Assessment Inputs: Tax status, state of residency, days in the US, number of children, income bracket, income type, and education setup. This information is used solely to generate your path comparison and action plan.
Account Information: Email address and authentication credentials (password is hashed, never stored in plain text).
Payment Information: Processed by Stripe, Inc. NomadVisas does not store credit card numbers, bank account details, or other financial instrument data.
Usage Data: Anonymous analytics on page views, assessment completions, and feature usage to improve the Service.
2. How We Use Your Information
- To generate personalized path comparisons and action plans
- To maintain your compliance vault and checklists
- To send compliance reminders and deadline alerts (subscribers only)
- To process subscription payments
- To improve the Service through anonymous analytics
3. Information We Do NOT Collect
NomadVisas does not collect or store: Social Security numbers, passport numbers, bank account numbers, exact income figures (only brackets), or any government-issued identification numbers.
4. Data Sharing
Your data is NOT sold to third parties.
We share data only with: Supabase (database hosting), Stripe (payment processing), Anthropic (AI processing — assessment data is sent to generate verdicts and analyses), and Vercel (website hosting).
Referral partner links (Greenback, Bright!Tax) are tracked via UTM parameters in URLs. Clicking these links shares your referral source with the partner but does not share your personal assessment data.
5. Data Retention
Assessment data for non-subscribers is deleted after 90 days. Subscriber data is retained for the duration of the subscription plus 30 days. Email captures are retained until you request deletion.
6. Your Rights
You may request deletion of all your data at any time by contacting privacy@nomadvisas.com. We will process deletion requests within 30 days.
California Residents (CCPA/CPRA): You have the right to know what personal information is collected, to delete your personal information, and to opt out of the sale of personal information (we do not sell personal information).
7. Security
All data is encrypted at rest and in transit. Authentication is handled through Supabase with industry-standard security practices including bcrypt password hashing and JWT tokens.
8. Contact
For privacy questions or data deletion requests, contact privacy@nomadvisas.com.