ITMETA Immigration AI – Privacy Policy

Depending on how you use the platform, we may process:

• Name and email address
• Account details
• Immigration case information, including information about applicants and family members
• Messages
• Uploaded documents
• Assessment answers
• Travel information
• Reports
• Professional Review requests
• Privacy requests

Uploaded documents may include sensitive information, such as passport details, residence information, financial information, health or medical information, criminal-record certificates and information about family members or dependants.

We also process limited technical and security data required to operate the service, such as login and security events, approximate country derived from IP address where applicable, browser or device category, session information and operational logs.

The platform does not collect GPS location or MAC addresses.

We process personal data for:

• Account administration
• Case management
• Document review
• Communication
• Professional Review
• Reports
• AI-assisted features
• Security and fraud prevention
• Handling privacy requests
• Legal and business records
• Service reliability

Depending on the context, we rely on the following legal bases: performance of a contract or steps taken at your request before entering into a contract, compliance with legal obligations, our legitimate interests, and your consent where it is legally required.

Where we process special categories of personal data or criminal-record data, we rely on the applicable conditions under the GDPR and applicable law.

Some features use artificial intelligence (AI), for example for eligibility guidance, document pre-checks, translations or other platform functions.

AI output may be incomplete, inaccurate or outdated. It is advisory only and is not an official Cyprus government decision or a substitute for professional legal advice.

Final professional document-review decisions remain with authorised human Staff and Admin users.

We use service providers to operate the platform. Current infrastructure providers include:

• Vercel (hosting and application infrastructure)
• Supabase (database, authentication and file storage)
• Resend (email delivery)
• AI providers accessed through Vercel AI Gateway (AI-assisted features)

Some service providers may process information outside Cyprus and the European Economic Area (EEA). Recognised safeguards may be used where required.

We keep information only for as long as reasonably necessary to provide the service, comply with legal and regulatory obligations, resolve disputes, maintain records and protect ITMETA and our users.

You may request closure or deletion of your account through the Privacy Center, where legally available.

Some information may need to be retained where required by law or for legal claims. Where appropriate, such information may be anonymised.

Subject to applicable law, you have the right to:

• Access your personal data
• Have it corrected
• Have it erased
• Restrict its processing
• Object to its processing
• Data portability, where applicable
• Withdraw consent, where processing is based on consent

You can submit requests through the Privacy Center or by email to privacy@itmeta.ltd.

You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection.

We protect information with measures such as role-based access, private document storage and controlled file access.

No internet-based system can guarantee absolute security.

We may update this policy. The current version and its effective date will be published in the platform.