Data Retention

1. Document storage

Uploaded documents — passport scans, photographs, travel confirmations, and supplementary materials — are stored for the duration of your application process plus a 30-day post-resolution retention period. After this period, documents are permanently deleted from Cloudflare R2 and our database.

The post-resolution window exists so we can address any follow-up questions, provide a government authority with previously submitted materials at your request, or resolve post-submission issues.

2. Account data

Your Haavisa account information (name, email address, nationality, and application history) is retained while your account is active. If you request account deletion, we remove your personal data within 30 days, subject to any legal obligations that require us to retain certain records (e.g., tax or financial reporting requirements).

3. Payment records

Payment transaction records (amounts, dates, payment method references) are retained as required by our payment processors and applicable financial regulations. Haavisa does not store your full credit-card number, CVC, or banking credentials — these are handled entirely by Stripe and PayPal.

4. Requesting deletion

You may request deletion of your personal data at any time by emailing support@haavisa.com from the email address associated with your Haavisa account. Please include your transaction ID if applicable.

We will confirm receipt within one business day and complete the deletion within 30 calendar days, or notify you of any legal basis that requires us to retain specific data beyond that window.

5. Data subject rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact support@haavisa.com.