Privacy policy

Device Vault and online records are different

Files and facts saved in Device Vault are encrypted in your device's browser or app storage. The local library is not automatically uploaded or synchronized to Entry servers. You can inspect, correct or delete its entries and create an encrypted export to import on another device. Keep the export and its passphrase safe. Entry cannot recover a lost local passphrase.

Your sign-in, shared trips, group messages, service orders, application records and documents you deliberately submit for an online service are separate server-backed records. Existing online documents do not become local-only merely because you copy them into Device Vault. Removing a local copy does not delete an application, provider copy or previously exported backup.

In a supported native build, device authentication can protect the saved unlock key. Face or fingerprint recognition is performed by the operating system; Entry does not receive the biometric template. Browser unlock uses a passphrase. An unlocked working session is temporary and can be locked manually. Unlocking is not permission to disclose files, pay for something or submit an application.

AI conversations and shared trip privacy

Text you send to the copilot and the task context needed for its response are processed by our connected AI service. Only include information needed for that task. Device Vault is not automatically attached to a conversation. A request to reuse a field or document must remain limited to the stated task.

Group chat uses the shared trip plan and group messages that every current member is allowed to see. It does not combine members' private chats, Vault libraries, passports, payment details, inboxes or application files. A group message itself is shared, so do not paste private information into it. Members can see messages from when they joined; access ends when they leave, are removed or the group ends.

Personalization, location and notifications

Home can use your first name, selected trip, dates and interests you choose. Appearance choices and trip mood can be remembered on this device. They are not an instruction to infer sensitive traits. Location and push notifications are optional device permissions. The request explains the purpose, and you can change permissions in the app or operating system. Location is not shared with a travel group merely because you joined it.

Information we collect

• Identity and contact details: name, email, phone, nationality, date of birth, address.
• Travel and service details: destinations, dates, chosen interests, shared plans and group messages, service requests, provider references and order status.
• Case details when you use an immigration service: purpose, prior refusals or overstays, employment, study or family circumstances you enter in intake.
• Documents you submit for an online service: passports, photos, letters, financial evidence and supporting files needed to prepare a filing. Device Vault storage is described separately above.
• Payment records: amounts, currency, order status and receipts. Card data is handled by our payment processor and never stored on Entry servers.
• Technical data: IP address, device and browser information, pages viewed and actions taken, collected to keep the service secure and working and to measure how the site is used.
• Advertising measurement data: whether you arrived from one of our Google ads (the ad-click identifier), and whether that visit led to a purchase.

Why we use it

• To operate your account, help plan trips, respond to copilot requests and coordinate the shared trip you joined.
• To connect you to supported travel providers and show service status, including eSIM orders.
• To assess eligibility, produce a route recommendation and price your case when you use an immigration service.
• To prepare, review and submit applications, either internally or through a vetted partner firm.
• To communicate about your case: updates, document requests, appointments and receipts.
• To take payment, issue refunds and keep accounting records.
• To detect fraud, prevent abuse and meet legal, tax and anti-money-laundering obligations.
• To measure how our sites are used and which of our ads lead to a purchase, using Google Analytics and Google Ads. The cookie policy explains how to refuse this.

Who we share it with

We do not sell your personal data. We share it only where it is needed to deliver the service you paid for, or to measure our sites and advertising as described below:

• Government authorities and their appointed application centres, when a filing is made on your behalf.
• Partner law firms and licensed advisers assigned to regulated parts of your case.
• Service providers who operate our infrastructure: hosting, database, AI processing, email delivery, notifications and payments.
• Travel and connectivity providers when you request their service. What they receive depends on the service and the information you approve or enter with them.
• Google, for analytics and advertising measurement through Google Analytics and Google Ads: pages viewed, device and browser information, ad-click identifiers and purchase conversions (order reference, amount and service purchased). Where advertising measurement is on, a purchase conversion can also include your email address, phone number and name, hashed in your browser before they are sent. Google processes this information under its own policies, described in the cookie policy.
• OpenAI, for advertising measurement when permitted by your cookie preferences: browser references, ad-click identifiers and a deduplicated paid-order event. We do not include your application answers or uploaded documents in these events.
• Authorities, regulators or courts where disclosure is legally required.

Storage, security and retention

Online services use encryption in transit and access controls. Online uploaded documents sit in a private storage bucket reached through authenticated, time-limited links. Device Vault uses local encryption, but an unlocked device or compromised app session can still put data at risk. No system is risk-free.

We keep case records for as long as your matter is open and afterwards for the period required by law or by the authority involved, typically up to seven years for financial and filing records. You can ask us to delete anything we are not required to keep.

Your rights

Depending on where you live, you may ask us to access, correct, export, restrict or delete your personal data, object to certain processing, or withdraw a consent you gave. Write to concierge@entry.com and we will respond within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.

Sensitive information

Immigration work needs categories of data that most services never touch. Depending on your matter that can include criminal history and prior refusals, immigration and visa history, health and medical-examination information, biometric identifiers such as photographs and fingerprint appointment records, religious or political affiliation where a route requires it, family relationships, and financial evidence.

We collect these only where the route you have chosen requires them, we ask for your explicit consent where the law requires it, and we use them for that immigration matter and nothing else. We do not use sensitive data for marketing, for profiling unrelated to your matter, or to train any AI model, and we do not sell personal data.

Our lawful bases

• Performance of a contract: providing the service you bought, from intake through to case closure.
• Explicit consent: sensitive-category data, electronic communications, sharing your file with a specific independent professional, and optional marketing. Each consent is asked for separately and can be withdrawn.
• Legal obligation: tax, accounting, anti-money-laundering, sanctions screening and lawful requests.
• Legitimate interests: securing the platform, preventing fraud and abuse, and improving the service, balanced against your rights.
• Consent, where the law requires it: analytics and advertising measurement cookies, which you can refuse or withdraw as described in the cookie policy.

Purpose limitation

Data you give us for one matter is used for that matter. If we ever want to use it for a materially different purpose, we will ask you first. Consent given at intake does not become a licence to reuse your file.

International transfers

Immigration is inherently cross-border, so your data will be transferred to the destination country's authority and to professionals and providers located there. It is also processed by our infrastructure and AI providers, which may be outside your country. Where we transfer personal data out of the EEA or the UK we rely on an adequacy decision or on standard contractual clauses with additional safeguards, and for the transfer to an authority, on the necessity of that transfer for your application. A copy of the relevant safeguards is available on request.

How long we keep things

• Open case files: for as long as your matter is open and while any appeal or renewal window runs.
• Closed case files: typically up to 7 years, in line with financial, tax and professional record-keeping duties.
• Uploaded identity documents: deleted or minimised once the matter closes, unless a retention duty applies.
• Consent records: kept for the life of the record they support, as evidence of what you agreed to.
• Device Vault: retained in local storage until you remove it or the device/browser clears that storage. Keep an encrypted backup before clearing app data or moving devices.
• Shared trips, conversations and service records: retained separately from the local Vault to operate the requested service and meet applicable record-keeping duties. Contact support for account-data access or deletion.
• Analytics data: up to 12 months. Google Analytics and Google Ads cookies expire after the periods listed in the cookie policy (2 years for Google Analytics, 90 days for Google Ads).

You can ask us to delete anything we are not required to keep.

If something goes wrong

We keep an incident response process. If a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority within the timeframes the law requires, and tell you what happened and what to do.

Cookies

Essential cookies keep you signed in and remember your intake progress. Analytics, including Google Analytics, show us where the flow fails people, and Google Ads measurement shows us which of our ads lead to a purchase. The full list, retention and how to refuse the non-essential ones is in our cookie policy.

Children

Entry is not intended for use by children on their own. Minors can be included in a family or group application submitted by a parent or legal guardian.

Changes

We update this policy when our practices change. Material changes are announced by email to active customers, and the date at the top of this page always reflects the current version.