Home / Privacy Policy
Privacy Policy
Last updated: 9 October 2026
Who is responsible for your data
Viovena is operated by Oguzhan Cesur, an individual based in Canada, acting as the data controller. You can reach us at privacy@viovena.com.
The short version
If you are not signed in, your assessment answers never leave your device. Your answers are stored only in your browser and the match calculation runs locally in your browser. We do not receive them, store them, or see them. If you send a problem report, that report reaches our servers even without an account. We also use cookie-free Vercel Analytics to count page views and anonymous product milestones, such as starting a calculator or completing the assessment. Analytics events do not include your answers, email address, account id or writing drafts.
What we collect if you use the site without an account
Assessment answers stay in your browser's local storage. You can clear them at any time by clearing your browser data. If you send a problem report without an account, we store the type of report, your message, the page URL, and the time. We do not store your IP address in the problem report. Analytics counts page views, tool starts, assessment step numbers and completion, account creation and verification, and download milestones. We remove URL query strings and fragments and mask referral and shared-card codes before sending analytics.
What we collect if you create an account
Account data: your email address, and a display name if you provide one. Assessment answers: country of origin, age, education level, profession, years of experience, whether you have a job offer, language level, and your stated goal. If you complete the optional additional questions, this may include test scores, work and study history, family status, and financial figures you enter. Product data: saved routes you follow, checklist progress, exam practice progress, vocabulary, writing drafts synchronized while signed in, alerts, whether you want email when we re-read a followed route, referral records, and problem reports you send while signed in. Billing data: if you subscribe, subscription status and identifiers. Card details are handled by Stripe and never reach our servers.
Why we process it
To show you which published immigration rules match the answers you gave, to keep your saved information available across devices, to notify you in the app when a route you follow is re-checked, to email that same notice only if you ask us to, to receive problem reports about the site, and to operate subscriptions. Our legal basis is performance of a contract for account features, and legitimate interests for security and service operation. We do not sell your data and we do not use it for advertising.
Who processes data on our behalf
Supabase (database and authentication), Vercel (hosting and privacy-friendly analytics), Stripe (payments), Resend (transactional email), ImprovMX (email forwarding), and Cloudflare Turnstile (security checks on account forms). Route-update email sent through Resend includes the route title, the re-read date, the official source URL, and an unsubscribe link tied to the account id. A problem report emailed to us through Resend includes the report text and, if you are signed in, the account id. These providers may process data outside your country, including in the United States.
How long we keep it
Account data is kept while your account is active. If an account is inactive for 24 months, we delete it and its data. When you delete your account, we delete it and the data we hold immediately, including problem reports you sent while signed in, and we delete your Stripe customer record. Stripe keeps invoices and similar billing records that it is legally required to retain. Problem reports sent without an account are kept for 24 months. Deletion after that period is our policy; it is not automated yet.
Your rights
You can access, correct, delete, or export your data, object to processing, or withdraw consent. You can export a copy of your data, or delete your account, from your profile page at any time. You can turn off route-update email from your profile, or from the unsubscribe link, without deleting your account. Deleting your account removes the data we hold. For anything else, write to privacy@viovena.com and we will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you may complain to your local data protection authority. In Canada, you may complain to the Office of the Privacy Commissioner of Canada.
Children
Viovena is not intended for anyone under 16. We do not knowingly collect data from children.
Changes
If we change this policy we will update the date above. Material changes will be announced on the site.
Anonymous usage measurement
You can exclude this browser from our page-view and product-event measurement. This is useful if you regularly test the site. Your choice applies to future activity in this browser; it does not remove past visits or Google Search Console data.
Anonymous usage measurement is enabled in this browser.