Privacy Policy

Domavia, Inc. ("Domavia", "we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

1. Information we collect

• Account Information Name, email address, preferred language, and profile details you provide when creating or updating your Domavia account.
• Mobility & Planning Data Residency goals, travel history, document metadata, and questionnaire responses used to generate guidance.
• Documents & Uploads Files you store in Domavia (e.g., passports, visas). We scan documents to extract structured data and to detect sensitive fields.
• Usage Data Log files, device information, feature interactions, and diagnostic events that help us improve the product.
• Billing Data Payment method, subscription plan, and transaction history processed via Stripe. Domavia only stores tokenized references, never full card numbers.

2. How we use your information

• Deliver core product features, including document processing, residency evaluations, and personalized recommendations.
• Maintain account security, authenticate sessions, and detect suspicious activity.
• Provide customer support, respond to inquiries, and send important service updates.
• Improve the platform through analytics, A/B testing, and aggregated insights.
• Meet legal obligations, including responding to lawful requests or enforcing our terms.

3. Legal bases (EEA/UK)

Depending on your region, we rely on one or more of the following legal bases:

• Performance of a contract (providing the Domavia service you request)
• Legitimate interests (product analytics, platform security)
• Compliance with legal obligations (tax, accounting, regulatory requests)
• Consent (marketing communications, optional data collection)

4. Data sharing

We never sell your personal data. We share information only with:

• Service Providers Trusted processors (payment processing, cloud hosting, workflow orchestration) that help us deliver the product. Each provider is bound by data protection agreements.
• Professional Partners When you explicitly authorize us to share documents or data with advisors, law firms, or service providers you invite into your workspace.
• Legal & Compliance Authorities or third parties when required by law, court order, or to protect Domavia, our users, or the public.

5. Data security and storage

• Data is encrypted in transit (TLS 1.2+) and at rest with per-organization envelope keys.
• Documents are stored in the EU or US (based on your selected region) and mirrored for redundancy.
• Access to production systems is limited to authorized personnel via MFA and audited regularly.

6. Data retention

• Account data is retained while your subscription remains active.
• Documents deleted by you are queued for removal and permanently erased within 30 days (backups within 90 days).
• Regulatory or financial data may be retained longer when required by law.

7. Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Object to processing or request restriction
• Withdraw consent for optional processing

To exercise these rights, contact us at privacy@domavia.app. We may request verification before fulfilling your request.

8. International transfers

When we transfer personal data outside your home jurisdiction, we use appropriate safeguards such as EU Standard Contractual Clauses and supplemental security measures.

9. Children's privacy

Domavia is not intended for individuals under the age of 16. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, contact us so we can delete it.

10. Updates to this policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material updates via email or in-app notification. Continued use of Domavia after an update constitutes acceptance.

11. Contact us

Questions about privacy? Contact us at privacy@domavia.app.

For EU/UK residents, you may also lodge a complaint with your local supervisory authority.