This Privacy Policy explains how Green Card Genius LLC (“Green Card Genius”, “GCG”, “we”, “us”, or “our”) collects, uses, shares, and protects your information when you use our website at greencardgenius.com or any of our services (the “Service”).

We’ve written this in plain English. If anything is unclear, email us at info@greencardgenius.com and we’ll explain.

1. Important Things to Know First

We are not a law firm and this is not legal advice.

Green Card Genius is a self-help software product operated by Green Card Genius LLC. We help you fill out and assemble your USCIS application package based on the information you provide. We do not review your case, advise you on your immigration strategy, or represent you before USCIS. If you need legal advice, please consult a licensed immigration attorney.

Your immigration data is sensitive.

Filing a green card application requires you to give us highly personal information — Social Security Numbers, A-Numbers, addresses, family history, employment, and financial data. We treat this information with the seriousness it deserves, and this policy explains exactly what we do with it.

Third-party PDF generation.

To produce your USCIS forms (I-130, I-485, I-864, and others), we transmit your questionnaire answers to a third-party PDF generation service. We explain this in detail in Section 4.

2. What We Collect

Information you give us

Identity and contact information

Full name
Email address
Daytime and mobile phone numbers

Account credentials

Password (stored as a salted hash — we never see the plaintext)
If you sign in via a third-party identity provider: that provider shares your account ID, email, name, and profile photo with us. We do not access your account with the provider for any other purpose.
If you set up a passkey: your WebAuthn public key (this is not a fingerprint or face scan; it’s a cryptographic key generated by your device)

Immigration application data (entered into our questionnaire to generate your USCIS forms)

Social Security Number, A-Number (USCIS alien registration number), USCIS online account number
Date of birth, citizenship and immigration status, visa class, date and place of admission to the United States
Current and prior home addresses with dates
Employment history: employer names, addresses, occupation titles, employment dates
Marital history: details of your current marriage and any prior marriages
Information about your parents: names, dates of birth, birthplace, current residence, living/deceased status
Information about your children and other concurrent relatives
Prior immigration petitions you’ve filed
Physical descriptors required by USCIS forms: height, weight, eye color, hair color, ethnicity, race
Financial information for the I-864 Affidavit of Support: annual income, household size, three years of tax filing history, prior sponsored immigrants

Payment information

We use Stripe to process payments. Stripe receives your card details directly through their secure payment forms — we never see or store your card number, expiration date, or CVC.
We store the Stripe checkout session ID and payment intent ID associated with your order, and the email and amount.

Information we collect automatically

IP address
Browser type, version, and device information
Pages and features you use, and timestamps of your activity
Information about errors you encounter
A single session cookie (HttpOnly, Secure, SameSite=Strict) that keeps you logged in
Locally stored UI preferences in your browser (whether you’ve dismissed our app install or notification prompts) — no sensitive data is stored locally

Session recordings

Our analytics provider records video of how users interact with the questionnaire and other interfaces, so we can find usability problems and bugs. We have configured the analytics provider to mask all form input values (including sensitive fields such as Social Security Number, A-Number, password, date of birth, and financial data). We cannot guarantee that masking is perfect in every case. If you do not want your session recorded, contact us at info@greencardgenius.com and we will exclude your account from session capture.

Information about third parties (children, family members)

To generate your USCIS forms, our questionnaire collects basic information about your spouse, parents, children, and other relatives — names, dates of birth, and similar details required by the forms themselves. These individuals are not GCG users and have not consented directly to our processing of their information; you provide it on their behalf because USCIS requires it. We use this information only to generate your forms and do not contact, market to, or otherwise process information about these individuals separately.

3. How We Use Your Information

We use your information to:

Generate your completed USCIS forms and assemble your application package
Create and maintain your GCG account
Authenticate you when you log in
Process your payment and deliver your order
Send you transactional emails (email verification, password reset, invitation, “your PDF is ready” notifications)
Respond to your questions and provide support
Send you product updates and marketing emails (you can unsubscribe at any time)
Improve the Service through analytics and session recordings
Detect and prevent fraud, abuse, and security incidents
Comply with our legal obligations
Enforce our Terms of Service

We do not sell your personal information. We do not share your immigration application data with advertisers or data brokers. We do not use your immigration data to train AI models.

4. Who We Share Your Information With

We share information with service providers, only for the purposes described below, and only as necessary to operate the Service. We may add, change, or remove service providers from time to time as our infrastructure evolves; the categories below describe the kinds of providers we use today.

Product analytics and session recording (analytics provider)

Receives: user ID, email, name, application pathway (Adjustment of Status vs. Consular Processing), behavioral events, and session recordings of UI interactions (with form input values masked).

Purpose: product analytics, error tracking, and feature flags.

Marketing email (email service provider)

Receives: email address.

Purpose: marketing emails. You can unsubscribe at any time using the link in any marketing email.

Stripe (payment processing)

Receives: email address, order amount, and your card details (which Stripe collects directly — we do not handle card data).

Purpose: processing your payment. Stripe's privacy policy

Transactional email (email service provider)

Receives: email address and one-time tokens.

Purpose: sending transactional emails — email verification, password reset, invitations, and "your PDF is ready" notifications.

PDF generation service (third-party microservice)

Receives: your full questionnaire data, including names, Social Security Number, A-Number, addresses, family history, employment, and financial information.

Purpose: generating your USCIS PDF forms (I-130, I-485, I-864, and others). This is the most sensitive third-party transfer we make. We transmit this data over TLS, store it temporarily during PDF generation, and delete it from the PDF service after the form package is produced.

File storage (cloud storage provider)

Receives: the generated PDF file (which contains your questionnaire information rendered onto USCIS forms).

Purpose: storing your completed PDF package so you can download it. Files are stored with private access and automatically deleted after a limited retention window.

Hosting and database (cloud infrastructure providers)

Receives: all data described in Section 2 — accounts, questionnaire answers, sessions, orders.

Purpose: hosting the application and storing your data so you can return to your application across sessions. Hosted in the United States.

Rate limiting and abuse prevention (infrastructure provider)

Receives: user ID and the name of the API endpoint you called.

Purpose: rate limiting and abuse prevention. No application data is stored.

Identity provider (sign-in, optional) (third-party authentication provider)

Receives: if you choose to sign in via a third-party identity provider, that provider shares your email, name, and profile photo with us.

Purpose: authentication. We do not share your account data with the identity provider.

We may also share information when legally required — for example, in response to a valid subpoena, court order, or other lawful government request. We will resist overly broad requests and, where legally permitted, notify you before disclosing your information.

If Green Card Genius LLC is involved in a merger, acquisition, financing, or sale of assets, your information may transfer to the acquiring entity. We will notify you before this happens and any new owner will be bound by this Privacy Policy or one substantially similar.

5. How Long We Keep Your Information

Account and questionnaire data: retained while your account is active.
Generated PDF files: automatically deleted after a limited retention window following generation.
Sessions: expire after a period of inactivity. You can sign out at any time.
Backups: we maintain encrypted backups of our database for disaster recovery. Deleted account data may persist in routine backups for a limited period before it is overwritten.
Legal hold: we may retain specific information longer if required to do so by law, to resolve a dispute, or to enforce our Terms of Service.

To delete your account, email info@greencardgenius.com from the email address associated with your account. We will permanently delete your questionnaire responses, orders, sessions, push subscriptions, and other associated data from our active systems and confirm completion within the response window described in Section 7.

6. How We Protect Your Information

All connections to our website use HTTPS (TLS).
Passwords are stored as salted hashes; we cannot recover or read your password.
Database access is restricted, logged, and authenticated.
We use industry-standard security controls, including multi-factor authentication on administrative accounts where supported by our infrastructure providers.
We do not store payment card information; Stripe handles card data directly.
We delete generated PDF files automatically after a limited retention window.

No system is perfectly secure. Despite our safeguards, we cannot guarantee that your information will never be accessed by an unauthorized party. If we discover a security incident affecting your information, we will notify you in accordance with applicable law.

7. Your Rights

If you are a resident of California (CCPA / CPRA)

California residents have the following rights:

Right to know: request a copy of the personal information we have about you and how we’ve used it.
Right to correct: request that we correct inaccurate personal information.
Right to delete: request that we delete your personal information.
Right to opt out of sale or sharing: we do not sell or share your personal information for cross-context behavioral advertising. There is no sale or share to opt out of.
Right to limit use of sensitive personal information: the immigration data we collect is necessary to provide the Service. If you want us to stop using it, you can delete your account.
Right to non-discrimination: we will not charge you a different price or provide a different level of service for exercising your rights.

To exercise any of these rights, email info@greencardgenius.com from the email address associated with your account. We will verify your identity and respond within 45 days. If we deny your request, we will explain why and tell you how to appeal.

We honor Global Privacy Control (GPC) signals where applicable.

We collect the following CCPA categories of personal information: identifiers; California Customer Records information; protected classification characteristics (age, national origin, citizenship, marital status, race, ethnicity); commercial information (purchase history); internet/network activity; geolocation (approximate, from IP address); audio/visual information (session recordings, with sensitive fields masked); professional/employment information; sensitive personal information (Social Security Number, account credentials, citizenship/immigration status, racial/ethnic origin); and inferences drawn from the above.

If you are in the European Economic Area, United Kingdom, or Switzerland (GDPR / UK GDPR)

You have the rights to:

access your personal data
request correction of inaccurate data
request deletion of your data (“right to be forgotten”)
restrict or object to certain processing
data portability (receive a copy of your data in a structured, machine-readable format)
withdraw consent at any time, where we rely on consent
lodge a complaint with your national data protection authority

Legal bases for processing your data:

Performance of a contract: to provide the Service you’ve signed up for.
Legitimate interests: to operate, improve, and secure the Service, and to communicate with you about it. We balance these interests against your privacy rights.
Consent: for marketing emails and where otherwise required. You can withdraw consent at any time.
Legal obligation: to comply with applicable law.

To exercise your rights, email info@greencardgenius.com. We will respond within 30 days.

Green Card Genius LLC is based in the United States, and your data is processed in the United States. The United States may not provide the same level of data protection as your home country. We rely on appropriate safeguards (such as Standard Contractual Clauses with our processors where applicable) to protect international transfers.

Everyone else

Regardless of where you live, you can email info@greencardgenius.com to:

request a copy of your data
request correction of inaccurate data
delete your account and associated data
ask any privacy question

8. Cookies and Tracking

We use a single session cookie (HttpOnly, Secure, SameSite=Strict) to keep you logged in. We do not use advertising cookies, cross-site tracking pixels, or behavioral advertising trackers.

We use product-analytics providers to understand how users interact with the Service. These tools may set first-party cookies or use similar technologies to record your interactions with our website.

You can disable cookies in your browser, but doing so will prevent you from logging in to the Service.

We do not currently respond to “Do Not Track” browser signals because there is no agreed industry standard for them. We do honor Global Privacy Control signals where applicable.

9. Children

Green Card Genius is not intended for use by anyone under the age of 18, and we do not knowingly collect personal information directly from children under 18. If you are under 18, please do not use the Service.

The questionnaire collects information about your children when required by USCIS forms (typically just names and dates of birth). This information is provided by you, the user, and is processed only to generate your application package. We do not market to or otherwise collect information directly from children.

If you believe we have inadvertently collected information directly from a child under 18, email info@greencardgenius.com and we will delete it.

10. International Users

Green Card Genius LLC is operated from the United States. The petitioner in a marriage-based green card application must be a U.S. citizen or lawful permanent resident, but the beneficiary may be located outside the United States (consular processing pathway).

If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We rely on appropriate legal mechanisms (such as Standard Contractual Clauses) where required to protect international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact Us

If you have any questions, requests, or concerns about this policy or our handling of your information, contact us at:

Green Card Genius LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States

Phone: 1-914-304-3609
Email: info@greencardgenius.com

We will do our best to respond promptly. If you are not satisfied with our response, you have the right to contact your local data protection authority or attorney general.

End of Privacy Policy