Privacy Policy
How we collect, use, disclose, and protect your personal data when you use the Migraide platform — written to be as clear as it is thorough.
Last updated: 6 March 2026
About This Policy
This Privacy Policy explains how Migraide AI, Inc. and its affiliated entity MIGRAIDE AI LIMITED (collectively, “Migraide,” “we,” “us,” or “our”) collect, use, disclose, and protect your personal data when you use the Migraide Platform. This Privacy Policy forms part of, and is incorporated by reference into, our Terms of Use. Please read this policy alongside the Terms of Use.
1. Who We Are
Migraide is an AI-enabled visa application preparation platform operated by Migraide AI, Inc., a corporation incorporated under the laws of the State of Delaware, United States of America, with its registered office at 1209 Orange Street, Wilmington, DE 19801, United States of America.
General & Support
Data Protection
UK Representative
Registered Address (USA)
2. Personal Data We Collect
In order to provide the Service, Migraide collects the personal data you provide to us during registration, onboarding, and use of the Platform — including your full legal name, email address, contact telephone number, and the documentary information required to populate your visa application (such as travel, employment, and financial details).
2.1 Passport Image Processing
As part of onboarding, we collect and process an image of your international passport for the sole purpose of verifying your identity prior to provision of the Service. The passport image is processed strictly as a static photographic image for identity verification purposes only. We do not perform biometric analysis, facial recognition, biometric template extraction, or artificial intelligence model training on passport images. Passport images are retained only for as long as necessary for identity verification purposes, in accordance with our data retention schedule.
3. Applicable Data Protection Law
Migraide processes your personal data in compliance with the following legal frameworks, as applicable to you:
- EU General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”) — users habitually resident in the European Union;
- UK GDPR (as retained in UK law by the European Union (Withdrawal) Act 2018) and the Data Protection Act 2018 — users ordinarily resident in the United Kingdom;
- California Consumer Privacy Act (CCPA) as amended by the CPRA, and equivalent US state statutes — users resident in the United States;
- All other applicable national and regional data protection laws, including PIPEDA 2000 (Canada), the Australian Privacy Act 1988, and equivalent frameworks globally. Where two or more frameworks apply concurrently, Migraide applies the stricter standard.
4. Automated Processing
The Platform operates using automated processing technology. Migraide's position is that the Platform does not make automated decisions that produce legal effects concerning, or that similarly significantly affect, users within the meaning of Article 22 of the EU GDPR, UK GDPR, or other applicable data protection laws — the Platform solely populates form fields with user-provided information and does not determine eligibility or any immigration outcome. Users retain full control over the content and submission of all visa application materials.
5. Data Subject Rights
Depending on your jurisdiction of residence, you have the following rights in respect of your personal data, exercisable by contacting privacy@migraide.com:
- The right to access personal data held about you;
- The right to rectification of inaccurate or incomplete personal data;
- The right to erasure (“right to be forgotten”), subject to applicable legal limitations;
- The right to restriction of processing in certain circumstances;
- The right to data portability in respect of data processed on the basis of consent or contract;
- The right to object to processing based on legitimate interests;
- The right to withdraw consent at any time where processing is based on consent, without prejudice to the lawfulness of processing prior to withdrawal;
- The right to lodge a complaint with the relevant data protection supervisory authority.
6. Regional Contacts and Supervisory Authorities
| Region | Authority | Contact |
|---|---|---|
| European Union | Relevant national data protection authority | Per member state of residence |
| United Kingdom | Information Commissioner's Office (ICO) — registration ZC057604 | ico.org.uk |
| United States (California) | California Privacy Protection Agency | privacy@migraide.com |
| Canada | Office of the Privacy Commissioner of Canada | priv.gc.ca |
| Australia | Office of the Australian Information Commissioner (OAIC) | oaic.gov.au |
7. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our data practices or applicable law. Where a change is material, we will notify you by email and by prominent notice on the Platform. The current version of this policy is always available at Migraide.com/privacy-policy.