Privacy Policy

• Information you give us directly — your name, email, account credentials, eligibility-checker inputs (citizenship, residence, destination, purpose, profile factors), messages you submit via contact or support forms, and any document content you upload to a tool that explicitly processes it.
• Information collected automatically — IP address, browser type, device identifiers, pages visited, referring URL, and similar diagnostics via cookies and analytics.
• Information from third-party services — if you sign in with a federated provider (e.g. Google), the basic profile data the provider returns.
• Billing information — handled by our payment processor; we receive transaction metadata, not full card numbers.

• To run the service — compute eligibility, generate documents, deliver tool outputs, and remember your saved results.
• To improve the platform — aggregate analytics on which tools and pathways are used most.
• To communicate — transactional emails (account, billing, receipts) and, with consent, occasional product updates you can opt out of any time.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not use your eligibility inputs, generated documents, or uploaded content to train external AI models.

Account-bound data is stored in our hosted backend with row-level access controls, encryption in transit (TLS), and encryption at rest at the storage layer. Access to production data is limited to a small set of authorized engineers and logged. We follow data-minimisation: we only collect what is needed to answer your question or run your account.

We do not sell personal information. We do not share your eligibility inputs or document content with third parties for marketing.

We rely on a small set of vetted processors to operate the service: hosting and database, AI gateway (to run model inference), email delivery, analytics, and payments. Each is bound by contractual confidentiality and data-protection commitments. A current list is available on request.

Where applicable, our legal bases are: performance of a contract (running the service), legitimate interests (security, analytics, product improvement), consent (marketing emails, optional cookies), and legal obligation.

EntryNest serves users globally. Where we transfer data outside your jurisdiction, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

We keep account-bound data while your account is active and for a limited period afterwards to handle disputes and legal obligations. You can request deletion at any time; we will remove personal data unless retention is required by law.

Depending on your jurisdiction you may have rights to access, correct, delete or port your data, restrict or object to processing, and withdraw consent. Email hello@entrynest.com to exercise these rights.

We use cookies and similar technologies for essential functionality (session, security), preferences, and aggregated analytics. Where required, we ask for consent before setting non-essential cookies. You can clear cookies in your browser at any time.

EntryNest is not directed to children under 16, and we do not knowingly collect personal information from them.

We may update this policy. Material changes will be communicated in-product or by email. The "Last updated" date at the top reflects the latest revision.

Privacy questions: hello@entrynest.com.