Privacy Policy

Information you give us

Identity and contact information

• Full name
• Email address
• Daytime and mobile phone numbers

Account credentials

• Password (stored as a salted hash, we never see the plaintext)
• If you sign in via a third-party identity provider: that provider shares your account ID, email, name, and profile photo with us. We do not access your account with the provider for any other purpose.
• If you set up a passkey: your WebAuthn public key (this is not a fingerprint or face scan; it’s a cryptographic key generated by your device)

Immigration application data (entered into our questionnaire to generate your USCIS forms)

• Social Security Number, A-Number (USCIS alien registration number), USCIS online account number
• Date of birth, citizenship and immigration status, visa class, date and place of admission to the United States
• Current and prior home addresses with dates
• Employment history: employer names, addresses, occupation titles, employment dates
• Marital history: details of your current marriage and any prior marriages
• Information about your parents: names, dates of birth, birthplace, current residence, living/deceased status
• Information about your children and other concurrent relatives
• Prior immigration petitions you’ve filed
• Physical descriptors required by USCIS forms: height, weight, eye color, hair color, ethnicity, race
• Financial information for the I-864 Affidavit of Support: annual income, household size, three years of tax filing history, prior sponsored immigrants

Payment information

• We use Stripe to process payments. Stripe receives your card details directly through their secure payment forms, we never see or store your card number, expiration date, or CVC.
• We store the Stripe checkout session ID and payment intent ID associated with your order, and the email and amount.

Information we collect automatically

• IP address
• Browser type, version, and device information
• Pages and features you use, and timestamps of your activity
• Information about errors you encounter
• A single session cookie (HttpOnly, Secure, SameSite=Strict) that keeps you logged in
• Locally stored UI preferences in your browser (whether you’ve dismissed our app install or notification prompts), no sensitive data is stored locally

Session recordings

Our analytics provider records video of how users interact with the questionnaire and other interfaces, so we can find usability problems and bugs. We have configured the analytics provider to mask all form input values (including sensitive fields such as Social Security Number, A-Number, password, date of birth, and financial data). We cannot guarantee that masking is perfect in every case. If you do not want your session recorded, contact us at info@greencardgenius.com and we will exclude your account from session capture.

Information about third parties (children, family members)

To generate your USCIS forms, our questionnaire collects basic information about your spouse, parents, children, and other relatives, names, dates of birth, and similar details required by the forms themselves. These individuals are not GCG users and have not consented directly to our processing of their information; you provide it on their behalf because USCIS requires it. We use this information only to generate your forms and do not contact, market to, or otherwise process information about these individuals separately.

If you are a resident of California (CCPA / CPRA)

California residents have the following rights:

• Right to know: request a copy of the personal information we have about you and how we’ve used it.
• Right to correct: request that we correct inaccurate personal information.
• Right to delete: request that we delete your personal information.
• Right to opt out of sale or sharing: we do not sell or share your personal information for cross-context behavioral advertising. There is no sale or share to opt out of.
• Right to limit use of sensitive personal information: the immigration data we collect is necessary to provide the Service. If you want us to stop using it, you can delete your account.
• Right to non-discrimination: we will not charge you a different price or provide a different level of service for exercising your rights.

To exercise any of these rights, email info@greencardgenius.com from the email address associated with your account. We will verify your identity and respond within 45 days. If we deny your request, we will explain why and tell you how to appeal.

We honor Global Privacy Control (GPC) signals where applicable.

We collect the following CCPA categories of personal information: identifiers; California Customer Records information; protected classification characteristics (age, national origin, citizenship, marital status, race, ethnicity); commercial information (purchase history); internet/network activity; geolocation (approximate, from IP address); audio/visual information (session recordings, with sensitive fields masked); professional/employment information; sensitive personal information (Social Security Number, account credentials, citizenship/immigration status, racial/ethnic origin); and inferences drawn from the above.

If you are in the European Economic Area, United Kingdom, or Switzerland (GDPR / UK GDPR)

You have the rights to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data (“right to be forgotten”)
• restrict or object to certain processing
• data portability (receive a copy of your data in a structured, machine-readable format)
• withdraw consent at any time, where we rely on consent
• lodge a complaint with your national data protection authority

Legal bases for processing your data:

• Performance of a contract: to provide the Service you’ve signed up for.
• Legitimate interests: to operate, improve, and secure the Service, and to communicate with you about it. We balance these interests against your privacy rights.
• Consent: for marketing emails and where otherwise required. You can withdraw consent at any time.
• Legal obligation: to comply with applicable law.

To exercise your rights, email info@greencardgenius.com. We will respond within 30 days.

Green Card Genius LLC is based in the United States, and your data is processed in the United States. The United States may not provide the same level of data protection as your home country. We rely on appropriate safeguards (such as Standard Contractual Clauses with our processors where applicable) to protect international transfers.

Everyone else

Regardless of where you live, you can email info@greencardgenius.com to:

• request a copy of your data
• request correction of inaccurate data
• delete your account and associated data
• ask any privacy question

What the Case Tracker collects

• The USCIS receipt number(s) you enter (for example, a number beginning IOE, EAC, SRC, WAC, or LIN). We send this to the USCIS Case Status API to look up your case.
• The case information USCIS returns for that receipt: the form type, the current status, and the dated status history. We store this so we can show you your timeline and detect changes over time.
• A 5-digit ZIP code, only if you choose to provide one for interview-stage cases, used to suggest the nearest USCIS field office.
• An email address, only if you choose to turn on free status-change alerts. When you do, we also record the date and time you consented to be emailed.
• Technical call logs for security and reliability. These logs store a one-way hashed version of the receipt number, never the plaintext receipt, along with a timestamp and whether the lookup succeeded.

How we use this information

• To look up and display your case status and dated timeline.
• To compare your case against USCIS published processing times and show you a “where you stand” estimate.
• If you opt in to alerts: to check your case on a schedule and email you when its status changes.
• To keep our connection to the USCIS API secure, reliable, and within USCIS rate limits.

Who we share it with

• USCIS — the receipt number you enter is sent to the USCIS Case Status API to retrieve your status. This is the core function of the tool.
• Email service provider — if you enable alerts, your email address is shared with our email provider solely to send those alert emails.
• Hosting and database providers — your tracked-case data is stored with our cloud database and hosting providers in the United States.

We do not sell this information, and we do not share it with advertisers or data brokers.

How long we keep it, and deleting it

We keep your tracked-case data until you remove the case or ask us to delete it. You can stop monitoring a case at any time, and you can delete a tracked case, its stored status history, and any alert email address by removing it in the tool or by emailing info@greencardgenius.com. Every status-change alert email also includes a way to turn alerts off.

Breach notification and changes (Case Tracker)

If we experience a data breach affecting your Case Tracker information, we will notify you, by email where you have provided one, and provide instructions on the steps you can take to protect yourself.

If we make a material change to how the Case Tracker collects or uses your information, we will ask for your consent before that change takes effect, rather than relying on your continued use of the tool alone.