What the prototype stores
The pilot stores account name, email, registered role, company profile (work country, city and optional sector/registration reference), salted password hashes, hashed sessions, case records, nationality and legal residence, selected visa route and questionnaire answers, notes, tasks, checklists, private files, review reports and recorded expert enquiries. Demo and pilot case data are separate; the account profile is shared across these modes.
Storage and access
Cases and metadata use Cloudflare D1; file bytes use private Cloudflare R2 storage. APIs authorize every record against the signed-in account and data mode. Separate email accounts use server sessions; existing ChatGPT accounts remain separate. Company accounts currently have one owner; team sharing is not implemented.
Document review
No live model is configured in the current deployment. Demo review checks labeled TXT fields and checklist completeness; it does not read PDF or image contents. A server-side OpenAI adapter is implemented but requires credentials, activation and explicit processing consent. If activated later, document contents are sent to that provider for review. No reviewer determines visa eligibility or authenticity.
Core documents and email handoff
Core intake categories are CV, passport, an SGK service record covering the last six months, professional certificates, the latest diploma if available, and driving licence photographs. Diploma choices, review reports and send attempts are stored per account and case. Email service is not connected in the current deployment. If configured later, the recipient is displayed and, following user consent, a check with all required uploads forwards documents to the team as email attachments through Resend. Demo mode never sends email. Deleting a file from the site cannot recall an emailed attachment.
Minimize personal data
Use fictional data for demonstrations. Do not upload real passports, customer records or unnecessary sensitive information before the service has passed a privacy and security assessment. Uploaded files can be deleted; cases can be archived but a full case deletion workflow is not yet available.
Before launch
Identify the legal controller and privacy contact, establish lawful bases, retention and deletion policies, processor agreements, hosting regions, international transfer safeguards, access and erasure workflows, incident procedures and any required impact assessment. No GDPR compliance claim is made.
Cookies and payments
No marketing trackers or payment provider are integrated. Email sessions use a Secure, HttpOnly, SameSite cookie for up to seven days. Hosting may also use authentication cookies. Email verification, password reset and email notifications are not connected. Paid subscriptions are not enabled.
A preference cookie remembers your English or Turkish selection for up to one year. It contains no applicant or document information.
Controller identity, business address and privacy contact are not yet configured. This placeholder is not a final privacy policy.