Security & Data Care
How Visa Jump protects private submissions and member documents, and what you can do to keep them private.
Effective September 25, 2026
Private by default
Names, contact details, checklist answers, detailed evaluations and bookings are private records. Public pages do not display candidate submissions. In the members-only community, other members see only your username, display name, what you post and the profile fields you choose to show; they never see your legal name, email, phone, application, personal information or documents. There are no member-to-member direct messages.
Administrative access
Business records and community administration require a current server-issued session for an authorized administrator account; business records are limited to the designated verified Google identity. Access checks run on the server for every request. Changing a URL, a browser field, or a client-side role does not grant access. Admins see application details and files to review applications, and a member document only when the member shares it with them; each admin download of an application or review file is recorded.
Member documents
Documents you upload to your application or My documents are stored privately with Cloudflare, encrypted in transit and at rest by Cloudflare. We do not run a malware scanner. Files are checked for an allowed type, size and file signature only; AI reading of a document is not a malware check. A file that has not been malware-scanned never opens in the browser: it downloads only as an attachment, only you can download it from My documents, and admins can download only files you add to your application or share for a document review. Files are never shown to other members.
Download and open files only on a device you trust, and keep your device and apps up to date. We keep your documents until you delete them or delete your account.
Your private links
Report, waitlist and booking links contain scoped credentials. We store hashes of these credentials on the server and enforce expiration. Private responses are marked not to be cached. Anyone with a private link can act within its scope, so treat it like a password. Download your report on a trusted device and use the deletion controls when you no longer need a saved copy.
Data and payment boundaries
HTTPS encrypts traffic in transit. Cloudflare provides our hosting, application data, file storage and AI infrastructure. We omit contact names and email from AI report prompts and do not fetch links supplied in intake. Stripe collects card details and runs identity checks on its own pages; we never receive your full card number or your ID images. An appointment is confirmed only after verified payment and calendar completion.
Share only what is needed
In the public tools, use professional descriptions and public references. Do not submit passport details, Social Security numbers, A-numbers, receipt numbers, confidential employer records or someone else’s private information there; the public tools have no document-upload fields. In the community, keep identity documents and case details out of posts and chats; store them only in your private documents if you need them.
Breaches and reporting a concern
If a security incident affects your personal information, we investigate promptly and notify affected people, and regulators where required, without unreasonable delay and within the time limits set by applicable law.
If you find a security issue or believe a private link has been exposed, contact [email protected]. Describe the affected page and time without attaching passwords, private tokens, or another person’s records. We cannot promise that any online service is free of risk; we investigate reports and take corrective action.
Location
Prosper, Texas, United States
Mailing address
3827 Stars Street, Prosper, TX 75078, United States