Privacy Policy
Effective Date: January 3, 2026
Last Updated: January 3, 2026
Nutshell.sh Limited, a Delaware corporation doing business as Immifiler ("Company," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our NVC Fee Payment Service ("Service").
Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide
When you use our Service, we collect the following information that you voluntarily provide:
-
NVC Case Information
- NVC case number
- Invoice ID
- Primary applicant name
- Number of applicants (for family petitions)
- Fee type(s) selected (IV fee, AOS fee, or both)
-
Contact Information
- Email address
- WhatsApp number (optional)
- Petitioner name (optional)
-
Payment Information
- Payment is processed by our third-party payment processor (Square). We do not store your full credit card number, CVV, or other sensitive payment details. We may receive and store:
- Last four digits of your card
- Card type (Visa, Mastercard, etc.)
- Billing name and address
- Transaction ID and amount
- Payment is processed by our third-party payment processor (Square). We do not store your full credit card number, CVV, or other sensitive payment details. We may receive and store:
-
Communications
- Any messages, notes, or special instructions you provide
- Email correspondence with our support team
1.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, pages viewed, referring URL
- Cookies: We use essential cookies to maintain website functionality. See Section 6 for more details.
1.3 Information We Do NOT Collect
We do not collect:
- Social Security numbers
- Passport numbers or other government ID numbers
- Immigration case documents or files
- Biometric data
- Information about minors (our Service is for users 18+)
2. How We Use Your Information
We use your information solely for the following purposes:
2.1 Providing the Service
- Processing your NVC fee payment request
- Logging into the CEAC portal to pay fees on your behalf
- Verifying your case information before payment
- Sending you payment confirmations and receipts
2.2 Communication
- Responding to your inquiries and support requests
- Sending transactional emails (invoice, confirmation, receipt)
- Notifying you of issues with your payment request
- Sending service-related announcements
2.3 Legal and Compliance
- Complying with legal obligations
- Protecting against fraud and unauthorized transactions
- Enforcing our Terms of Service
- Responding to legal requests or court orders
2.4 Improving Our Service
- Analyzing usage patterns to improve user experience
- Troubleshooting technical issues
- Developing new features (aggregated, anonymized data only)
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
3.1 Service Providers
We share information with third-party service providers who help us operate our Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Square | Payment processing | Payment information, billing details |
| Resend | Email delivery | Email address, name |
| Analytics provider | Website analytics | Anonymized usage data |
| Cloud hosting (AWS) | Website hosting | All data (encrypted) |
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
3.2 Legal Requirements
We may disclose your information if required to:
- Comply with a legal obligation, subpoena, or court order
- Protect and defend our rights or property
- Prevent fraud or illegal activity
- Protect the safety of users or the public
3.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
3.4 With Your Consent
We may share your information for other purposes with your explicit consent.
4. Data Retention
4.1 Retention Periods
We retain your information for the following periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Transaction records | 7 years | Tax and legal compliance |
| Payment confirmations | 7 years | Proof of service delivery |
| Email correspondence | 3 years | Customer support reference |
| Website analytics | 26 months | Service improvement |
| Support chat logs | 2 years | Quality assurance |
4.2 After Retention Period
After the retention period expires, we securely delete or anonymize your data. Anonymized data may be retained indefinitely for statistical purposes.
4.3 Your Right to Deletion
You may request deletion of your personal data at any time (see Section 7). Note that we may need to retain certain information for legal compliance even after a deletion request.
5. Data Security
5.1 Security Measures
We implement appropriate technical and organizational measures to protect your data:
- Encryption: All data transmitted to and from our website is encrypted using TLS/SSL
- Secure Storage: Data at rest is encrypted using industry-standard encryption
- Access Controls: Only authorized personnel can access personal data
- Payment Security: Payment processing is handled by PCI-DSS compliant providers
- Regular Audits: We regularly review our security practices
5.2 No Guarantee
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
5.3 Breach Notification
In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.
6. Cookies and Tracking
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Website functionality, security | Session |
| Analytics | Understanding how visitors use our site | Up to 26 months |
6.2 Your Cookie Choices
Most web browsers allow you to control cookies through settings. You can:
- Block all cookies
- Delete existing cookies
- Allow only certain cookies
Note: Blocking essential cookies may affect website functionality.
6.3 Do Not Track
We currently do not respond to "Do Not Track" browser signals, as there is no industry standard for this feature.
7. Your Privacy Rights
7.1 Rights for All Users
Regardless of your location, you have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Objection: Object to certain processing of your data
- Portability: Request your data in a portable format
7.2 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know whether your data is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
7.3 European Residents (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- All rights listed in Section 7.1
- Right to lodge a complaint with a supervisory authority
- Right to withdraw consent at any time
Legal Basis for Processing: We process your data based on:
- Contract performance (providing the Service you requested)
- Legitimate interests (fraud prevention, service improvement)
- Legal obligations (tax and compliance requirements)
7.4 Exercising Your Rights
To exercise any of these rights, contact us at:
Email: privacy@immifiler.com
We will respond to your request within 30 days (or as required by applicable law).
8. International Data Transfers
Our Service is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to and processed in the United States.
By using our Service, you consent to this transfer. We take steps to ensure your data is protected in accordance with this Privacy Policy regardless of where it is processed.
9. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly.
If you believe we have collected information from a child under 18, please contact us at privacy@immifiler.com.
10. Third-Party Links
Our website may contain links to third-party websites (e.g., CEAC portal, government websites). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Updating the "Last Updated" date
- Sending an email notification for significant changes
Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Nutshell.sh Limited (dba Immifiler)
63 Bovet Road #103
San Mateo, CA 94402
United States
- Privacy Inquiries: privacy@immifiler.com
- General Support: support@immifiler.com
- Website: https://immifiler.com
13. Additional Disclosures
13.1 Government Fee Payment Disclosure
When we pay NVC fees on your behalf, we access the CEAC portal using the case information you provide. The U.S. Department of State has its own privacy practices for the CEAC system, which are separate from this Privacy Policy.
13.2 Analytics Provider
We use privacy-focused analytics to understand how visitors use our website. We do not use analytics for advertising purposes or share analytics data with advertisers.