This is an informational translation. In case of discrepancy, the Spanish version prevails for legal purposes.
1. Purpose
This Privacy Policy describes how Visability SpA ("Visability", "we") collects, uses, stores, shares, and protects the personal data of individuals interacting with our websites, applications, and services (the "Data Subjects" or "you").
The purpose of this Policy is to clearly and transparently inform you about how we process your data, the legal bases enabling that processing, and the rights you may exercise, in accordance with Chilean Law No. 19,628 on the Protection of Private Life currently in force, Law No. 21,719 amending the former (in vacatio legis until December 2026), and Law No. 19,496 on Consumer Rights Protection where applicable.
2. Scope
This Policy applies to personal data collected through:
The website https://visability.cl and its subdomains.
Contact, prospection, pre-qualification, and lead-capture forms.
The authenticated platform at /dashboard.
The webchat widget integrated in our public pages.
Communications via email, WhatsApp, and meeting scheduling.
This Policy does not apply to processing carried out by third parties (e.g., the U.S. Department of State, consulates, employers, external attorneys, or third-party platforms) over data you provide them directly. In such cases, their own policies apply.
3. Data Controller
The data controller for your personal data is:
Legal name: Visability SpA
Tax ID (RUT): 77.630.607-K
Address: Av. Kennedy 7900, Office 807, Vitacura, Santiago, Chile
Legal representative: Pablo Navarrete
Privacy contact email: comercial@visability.cl
Contact phone: +56 9 8364 5189
Visability has not yet formally designated a Data Protection Officer (DPO). Until such designation, the data controller serves as the contact point for rights requests and inquiries related to this Policy.
4. Data we collect
We collect and process the following categories of personal data:
Identification and authentication
Email, first and last name.
Password (stored encrypted with bcrypt; we never store your password in plain text).
Session identifier (JWT) to keep you signed in.
Contact information
Phone number (captured via webchat and forms).
Postal address, when a specific form requires it.
Immigration and professional data (via dynamic forms and conversations with our team)
Passport and ID data.
Education, work experience, English proficiency, occupation.
Immigration history (prior visas, U.S. travel).
Attached documents you upload to the platform: CVs, diplomas, certificates, scanned passports, recommendation letters, and similar.
Stored locally in your browser (localStorage key v_attribution, TTL 30 days) and associated with an internal record when you submit a form.
5. Purposes and legal bases
We process your personal data for the following purposes and under the following legal bases:
Providing immigration consulting services (eligibility analysis, advisory for H1B1, H1B, L1, O1, H2A, H2B, B1, B2, J1, F1 visas, and ancillary services such as Career Development, Job Placement, Employment Guidance, and Workshop) — basis: performance of a contract.
Managing the contractual relationship (account registration, case tracking, scheduling, document handling) — basis: performance of a contract.
Payment collection and management — basis: performance of a contract and legal (tax/accounting) obligation.
Transactional communications (confirmations, reminders, process notifications) — basis: performance of a contract.
Commercial and marketing communications (newsletters, invitations, reminders of additional services) — basis: consent; withdrawable at any time.
Advertising effectiveness and remarketing (Google, Meta, LinkedIn, TikTok Ads) — basis: consent; see section 11 on cookies.
Legal compliance (tax, accounting, and where applicable immigration authority requests) — basis: legal obligation.
6. Sharing with third parties
To deliver the service, we share personal data with the following third parties, each acting as processor or controller as applicable, under contractual confidentiality and data-protection obligations:
Amazon Web Services (AWS S3) — storage of documents you upload. Jurisdiction: United States.
HubSpot — CRM, contact management, site tracking. Jurisdiction: United States.
Go High Level / LeadConnector — CRM, automation, embedded forms, scheduling. Jurisdiction: United States.
Brevo — transactional email. Jurisdiction: European Union (France); may use sub-processors in other jurisdictions.
Google (Calendar, Drive, Gmail, Tag Manager, Ads) — scheduling, internal document storage, OTP codes by email, tracking and advertising. Jurisdiction: United States.
Firebase / Google Cloud — hosting of the website and platform (region us-central1). Jurisdiction: United States.
Anthropic (Claude API) — text generation in automated form functions. Jurisdiction: United States.
Vambe AI — public-page webchat; collects data voluntarily entered by the visitor. Jurisdiction: Latin America (specific processing location to be confirmed with provider).
Meta Pixel, LinkedIn Insight Tag, TikTok Pixel — advertising tracking and remarketing identifiers. Jurisdiction: United States and others.
Additionally, we may share data with allied independent professionals (immigration attorneys, writers, career advisors) collaborating with Visability on specific services. These professionals are not Visability employees and operate under their own professional obligations.
We may also share data with competent authorities when legally required.
7. International transfers
Several of our providers (listed above) process data outside of Chile, mainly in the United States, and —in the case of Brevo— in the European Union.
These transfers take place as part of delivering the contracted service and under contractual data-protection clauses with each provider. Under current Law No. 19,628 we rely on contract performance as the basis; under Law No. 21,719, once fully in force (December 2026), we commit to adopting the enhanced safeguards required by the supervisory authority, including —where applicable— standard contractual clauses and impact assessments.
By using our services you acknowledge that, for us to deliver them, your data may be transferred to the jurisdictions listed above.
8. Data retention
We keep your data for the following periods:
Account data (email, name, profile): while the account is active, plus 6 additional years due to Chilean tax and accounting obligations.
Immigration documents uploaded to the platform (CVs, passports, diplomas): for the duration of the service, plus 6 additional years for tax/accounting reasons.
Prospection-form responses that do not result in service contracting: 24 months from the last interaction.
Advertising and attribution data: 13 months from capture.
Payment data: 6 years from the transaction, due to tax obligations.
Upon expiration of these periods, data is deleted or anonymized, unless a legal obligation requires longer retention.
9. Your rights
As a data subject, you have the following rights:
Access: know what personal data we process about you.
Rectification: request correction of inaccurate or incomplete data.
Cancellation: request deletion when your data is no longer needed or you have withdrawn consent.
Objection: object to processing for a specific purpose, particularly marketing and advertising.
Portability (under Law No. 21,719): receive the data you have provided in a structured, readable format, or have it transferred to another controller.
Restriction (under Law No. 21,719): request temporary suspension of processing while accuracy or objection is verified.
Not to be subject to automated decisions without human intervention that significantly affect you.
How to exercise them: email us at comercial@visability.cl identifying yourself and describing the right you wish to exercise. We will respond within the legal timeframes (currently Law 19,628; 15 business days under Law 21,719 once in force).
If you believe your rights have not been properly attended to, you may complain before the competent authority (currently ordinary courts; under Law 21,719 the Personal Data Protection Agency once operational).
10. Data security
We apply reasonable technical and organizational measures to protect your data, including:
Password hashing with bcrypt.
JWT-based authentication with revocation.
Mandatory HTTPS transport.
Expiring signed URLs to access documents stored in AWS S3.
Role-based access control in the internal platform.
Activity logs and environment segregation.
As of this Policy, Visability does not perform email verification at sign-up; this is a known limitation being addressed. We recommend using strong passwords and not sharing them.
11. Cookies and similar technologies
We use browser-storage technologies for the following purposes:
localStorage (stored in your browser)
user: authenticated session information.
visa: preferences related to the visa you are exploring.
v_attribution: advertising parameters and UTMs (30-day TTL).
Functional and analytics cookies
Google (_ga, _gid, _gcl_au) — analytics and campaign measurement.
HubSpot (__hstc, hubspotutk, __hssc, __hssrc) — CRM and user behavior.
Go High Level / LeadConnector — form and scheduling tracking.
Advertising and remarketing cookies
Meta / Facebook (_fbp, _fbc).
LinkedIn (li_fat_id).
TikTok (_ttp, ttclid).
As of this Policy, Visability has not yet implemented a granular cookie-consent banner. This is a recognized debt in our compliance roadmap, prioritized for the entry into force of Law No. 21,719. Meanwhile, you can block cookies from your browser settings; note that some site functionalities may stop working properly if you do.
12. Changes to this Policy
We may update this Policy to reflect changes in our services, providers, or applicable law. The current version will be published on this page with the last-updated date. For substantive changes we will notify you via the usual channels (email or in-platform notice).
13. Contact and complaints
For inquiries, rights requests, or complaints related to this Policy, contact us at:
Email: comercial@visability.cl
Address: Av. Kennedy 7900, Office 807, Vitacura, Santiago, Chile
Phone / WhatsApp: +56 9 8364 5189
Glossary
Personal data
Any information about an identified or identifiable natural person.
Data subject
The natural person to whom the personal data refers.
Controller
The legal entity deciding on the purposes and means of processing (here, Visability SpA).
Processor
Who processes data on behalf of the controller (e.g., our technology providers).
Consent
Free, informed, unequivocal, and specific expression of the data subject's will to accept data processing.
International transfer
Any communication of personal data to a recipient located outside Chile.
Cookies
Small files stored on your device to remember information.
ARCOPOL
Set of rights granted by Law No. 21,719 to the data subject — Access, Rectification, Cancellation, Objection, Portability, and Restriction.