Effective / last updated: July 28, 2026
This Privacy Policy explains how Case Studio, Inc.(“Case Studio,” “we,” “us,” or “our”), a Delaware corporation, collects, uses, shares, and protects information when you use Visa Engine, our AI-assisted petition workspace for talent and criteria-based visas (the “Service”). It is written for a real product. It is not legal advice and is not a substitute for advice from a qualified attorney about your own situation. Please read it together with our Terms of Service. We may update this policy from time to time; the date above reflects the latest version.
Visa Engine is a software product built and operated by Case Studio, Inc., which acts as the data controller for personal information processed through the Service. Case Studio also offers petition preparation and related professional services under separate arrangements; those engagements may have their own terms and privacy notices. This policy covers the Visa Engine SaaS product (the website, application, and related APIs) only.
We are not a law firm and do not provide legal advice or representation through the Service. An attorney (or other authorized legal practitioner) remains the person responsible for legal advice and filings.
For any privacy question, data request, or account deletion, contact us at akif@casefuture.com, or by mail at Case Studio, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.
Depending on how you use Visa Engine, we may collect:
We use the information above to:
Where the EU/UK General Data Protection Regulation (GDPR) or similar laws apply, we rely on these legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, operate, and improve the Service and prevent abuse, balanced against your rights); consent (for optional analytics cookies and any optional communications, which you can withdraw at any time); and legal obligation (to meet tax, accounting, security, and other legal requirements).
We do not sell your documents or case contents, and we do not “sell” or “share” personal information as those terms are defined under U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA). We do not use your uploaded documents or case content to train our own AI models.
Visa Engine is an AI-assisted product. To analyze evidence, score readiness, review narratives, generate drafts, power case chat, and similar features, we send document text, case context, chat messages, and related prompts to third-party large language model providers—currently including OpenAI, accessed through the Vercel AI SDK / AI infrastructure. This means sensitive immigration materials you upload or enter may leave our application database and be processed by those providers solely to return analysis or drafts for your use of the Service.
No solely-automated significant decisions. Visa Engine does not make decisions that produce legal or similarly significant effects about you or any applicant by automated means alone. All AI outputs—scores, evaluations, extracted facts, drafts, and chat answers—are informational and advisory, and are intended to be reviewed by you and, where relevant, a qualified attorney (a human “in the loop”) before any reliance or filing. AI systems can be wrong, incomplete, or misleading.
Provider handling.We configure our AI providers to process your content only to deliver the Service, and we use business/API tiers under which submitted content is not used to train the providers' general models, to the extent those terms and settings are available to us. Providers may retain limited data for a short period for abuse monitoring or as required by their terms and applicable law. Provider practices are governed by their own terms and privacy policies. You should only upload materials you are authorized to share with cloud processors.
We rely on service providers (subprocessors) to operate Visa Engine. Key categories include:
These providers process data under their own privacy policies and, where applicable, data processing agreements. We use them to run the Service—not to sell your personal information. We may also disclose information when required by law, to enforce our Terms, to protect the rights, safety, or property of Case Studio or others, or in connection with a merger, acquisition, or sale of assets (with notice where required).
Immigration materials frequently contain sensitive personal information—for example passport and identity data, nationality and immigration status, and, in some cases, information revealing health, religion, or other special categories under the GDPR and similar laws. Where we process such information, we do so only to provide the Service you request and based on your instructions and consent, or another lawful basis where available. You are responsible for having a lawful basis to upload information about third parties (such as clients or applicants) and for informing them as required by applicable law. Please avoid uploading sensitive information that is not necessary for your case.
We use cookies and similar technologies that are strictly necessary to run the Service (for example, to keep you signed in and to maintain security). With your consent where required, we also use analytics and performance technologies (such as Vercel Analytics and Speed Insights, PostHog, and Google Analytics when configured) to understand aggregate usage and improve the product. PostHog may set cookies or similar identifiers for product analytics and, on public marketing pages only, session replay; it does not record case documents or authenticated evidence screens. You can control non- essential cookies through your browser settings and, where offered, our in-product controls. Disabling essential cookies may prevent the Service from working.
You can delete documents and cases through the product (subject to in-app rules—for example, a case may need to be emptied of related content before it can be removed). When content is deleted in the product, we remove associated records from our systems as part of normal deletion flows; residual copies may persist briefly in backups or logs until those rotate.
To request deletion of your account and remaining personal data, email akif@casefuture.com. We will verify the request and delete or de-identify account data except where we must retain limited information for legal, security, or billing records (for example, transaction history Stripe may retain).
We keep personal information for as long as your account remains active and as needed to provide the Service, and afterwards only as long as necessary for the purposes described in this policy, to resolve disputes, and to comply with our legal obligations.
We use reasonable administrative, technical, and organizational measures appropriate to a cloud SaaS product—such as encrypted transport, access controls, and storage on reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach affecting your information, we will notify you and relevant authorities where required by applicable law.
Visa Engine is hosted on cloud infrastructure that may process and store data in the United States and other countries where our providers operate (including Supabase, Vercel, Stripe, and AI providers). If you access the Service from outside those locations, your information may be transferred across borders. Where required for transfers out of the EEA, the UK, or similar regions, we rely on appropriate safeguards available under applicable law (such as the European Commission's Standard Contractual Clauses) and our providers' terms.
Depending on where you live, you may have rights over your personal information. Where the GDPR or UK GDPR applies, these can include the rights to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent at any time (without affecting prior processing). You also have the right to lodge a complaint with your local data protection supervisory authority.
Where U.S. state privacy laws apply (such as the CCPA/CPRA in California), you may have rights to know, access, correct, and delete personal information, and to opt out of any “sale” or “sharing” of personal information—although, as noted above, we do not sell or share your personal information. We will not discriminate against you for exercising these rights.
You can manage much of your case content directly in the product. For other requests, email akif@casefuture.com. We may need to verify your identity before fulfilling a request, and you may use an authorized agent where the law allows.
Visa Engine is intended for adults preparing or assisting with visa petitions. The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
We may update this Privacy Policy as the product, our providers, or legal requirements change. When we do, we will revise the effective date above. Material changes may also be communicated in-product or by email when appropriate. Your continued use of Visa Engine after an update means you acknowledge the revised policy.
Privacy questions, data requests, and account deletion: akif@casefuture.com.
Mail: Case Studio, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.
Related: Terms of Service.