Privacy Policy

This Privacy Policy applies to information collected through Immiro's website, applications, and related services (collectively, the "Service").

Immiro is software designed primarily for immigration professionals and organizations. Because our customers may use Immiro to manage immigration matters, the Service may process information about their clients, employees, beneficiaries, and other individuals.

Where a law firm or organization uses Immiro to process information about its clients, that organization generally determines why and how that information is processed. In those circumstances, Immiro processes the information on the organization's behalf as a service provider or processor.

We use information for purposes including:

• providing and operating the Service;
• creating and managing user accounts;
• authenticating users;
• processing transactions and subscriptions;
• providing customer support;
• processing and organizing documents and other Customer Content;
• providing AI-assisted features requested by users;
• maintaining the security and integrity of the Service;
• detecting and preventing fraud, abuse, and unauthorized access;
• diagnosing technical problems;
• understanding how the Service is used;
• improving the performance and functionality of the Service;
• communicating with users about the Service;
• complying with legal obligations; and
• enforcing our agreements and protecting our rights.

We do not use Customer Content for purposes unrelated to providing the Service except where permitted or required by applicable law or where otherwise authorized by the relevant customer.

Some Immiro features use artificial intelligence and machine learning technologies to analyze information, identify relevant information in documents, assist with evidence organization, or generate drafts and other outputs.

When these features are used, information submitted to the relevant feature may be processed by Immiro and, where necessary, third-party technology providers that support the feature.

AI-generated outputs may contain errors or inaccuracies. Users remain responsible for reviewing outputs and determining whether and how they should be used.

Unless otherwise agreed with a customer, we do not permit Customer Content to be used by third-party AI providers to train their general-purpose models.

When a law firm or organization uses Immiro to process information about its clients or other individuals, that organization is responsible for ensuring that its use of the Service complies with applicable privacy and data protection laws.

Customers are responsible for:

• providing appropriate notices to individuals whose information they submit;
• obtaining any permissions or consents required by applicable law;
• determining the appropriate legal basis for processing information;
• ensuring that information submitted to Immiro is collected and used lawfully; and
• responding to requests from individuals concerning information that the customer controls, where required by applicable law.

Immiro provides tools for processing information but does not determine the purposes for which a customer's client information is collected or used.

We may use cookies and similar technologies to operate the Service, remember preferences, maintain sessions, understand usage, and improve performance.

Some cookies are necessary for the Service to function and cannot be disabled through the Service.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

You can generally control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We retain information for as long as reasonably necessary to provide the Service, maintain legitimate business records, comply with legal obligations, resolve disputes, enforce agreements, and protect our rights.

For Customer Content, retention is generally determined by the customer's account configuration and applicable agreement with Immiro.

When an account is terminated, we may delete or anonymize information in accordance with our retention practices and applicable contractual or legal requirements.

Backup copies may remain for a limited period after deletion while they are securely overwritten or otherwise removed through our normal backup processes.

We take reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction.

Depending on the circumstances, these measures may include access controls, authentication mechanisms, encryption, logging, monitoring, and other security practices.

However, no method of transmitting or storing information electronically is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed as a result of circumstances beyond our reasonable control.

Immiro and its service providers may process and store information in countries other than the country in which you or your clients are located.

Where information is transferred across borders, we take reasonable steps to ensure that the transfer and processing are carried out in accordance with applicable data protection requirements.

Depending on where you live and the laws that apply to you, you may have rights concerning your personal information.

These rights may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request a copy of certain information in a portable format; and
• withdraw consent where processing is based on consent.

Some rights are subject to legal limitations and exceptions.

If your information was submitted to Immiro by one of our customers, you may need to direct your request to that customer first because the customer may control the relevant information. We will assist our customers with appropriate requests where required by applicable law and our agreements.

To exercise a privacy right directly with Immiro, contact us using the information below.

The Service is intended for professional and organizational use and is not directed toward children.

We do not knowingly collect personal information directly from children under the age required by applicable law to provide parental consent.

If you believe that a child has provided personal information to us in violation of applicable law, please contact us so that we can investigate and take appropriate action.

The Service may contain links to third-party websites, applications, or services.

This Privacy Policy does not apply to third-party services that we do not control. Those services have their own privacy practices and policies, and we encourage you to review them before providing information.

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, applicable law, or other circumstances.

When we make material changes, we will provide reasonable notice, including by posting the updated Privacy Policy on the Service or sending notice to the email address associated with your account.

The "Last updated" date at the top of this Privacy Policy indicates when the policy was most recently revised.