Last updated 29 October 2026.
The answers you give, the documents you upload and their file names, the text of any refusal letter you give us, what our software reads out of those documents, and the report and letters we produce from them. If you give us an email address, we hold that so we can send you your case link and your report.
If you reserve a check, we hold the email address you give only until your code is used or refunded, or for 7 days if you never pay.
Everything above is encrypted before it is stored, with AES-256-GCM, under a key that is worked out from the secret in your case link. We do not keep your case link or that key. We keep only a one-way fingerprint of the link (a SHA-256 hash), which lets us find your case when you open the link but cannot be used to open it. So the people who run Approvable, and anyone with access to our database or file storage, cannot read your case.
That has limits, and you should know them. While you are using your case link, our servers hold the key and your content in memory to do the work, and your answers, documents and refusal letter are sent to Anthropic to be read and assessed. The encryption protects what is stored, not what is being processed. Anyone you share your case link with can open the case, as you can.
The review takes a few minutes. It runs on our server, and the key is held only in that server's memory until the review ends. It is never written to a queue, a file or a log.
When the website or the phone app asks our server about your case, your case link goes in a part of the request that our hosting providers do not record, so their request logs do not hold it. The address of a case page on this website is your case link, so your browser's history holds it, as it holds any page you visit. Keep your case link as you would a password.
We keep a record of what happened to a case and when: that it was opened, that a document was uploaded, that a payment arrived, that each stage of the review started and finished or failed, that the report was emailed, and that the case was deleted. That record holds a case number, a time and a type of event. It never holds your answers, your documents, their file names, your email address or anything we wrote for you, and it is built so that it cannot.
When your review is finished we email the report and letters to you. Every check includes one re-run, so we keep your case, still encrypted, for 30 days after you pay. That way the re-run can read the same documents, and you only add the ones the report asks for. Then we delete everything in your case: your answers, documents, what our software read from them, the report, the letters and your email address. We delete it sooner, as soon as the report from your re-run is emailed. The email is your copy. A case that is never paid for is deleted 7 days after it was opened. You can delete a case yourself at any time, and that is immediate.
When we email your report, we also keep your email address, sealed under our own key, apart from your case. We use it only to send you two kinds of email: a reminder 7 days before your case is deleted, if you still have a re-run to use, and a short question each month for three months asking how your application went. If you tell us you have applied, or when you plan to, we ask again when you might have heard back. We keep nothing else about your case with it. Every one of these emails has a link to stop them, and stopping deletes the address. It is also deleted when you tell us the decision, when you delete your case, after the last email, and in any case a year after your report.
After that, an empty case record remains, holding no content, so that payments and the event record above still make sense. It is removed 90 days after the case was opened. Payment records are kept by the payment provider for as long as tax law requires, and hold no documents. If you tell us how your application went, we keep that answer, and any note you add is encrypted like the rest.
There is no password. Your case is reached through a link that carries a secret, and that secret is also what unlocks the encryption, which is why the link should be treated as you would treat a password. We cannot send you a new one if it is lost, because we do not keep it. You may share it deliberately with a sponsor or an applicant, and both of you can then upload.
An agent we have accepted can open a case for you only after telling us that you agreed to it, how you agreed, and your name and an email address or phone number. We keep that record with the case, and we may send you a link to confirm it yourself. If you say no, the case is closed and its documents are deleted. The agent can see the case and download its report; we do not share anything about you with any other partner. Affiliates and Advocates whose code you use see only that an order was placed, never who placed it.
If you give us your email address when you pay, we keep it on our news list and may send you news and offers about Approvable now and then. If you do not want them, tick “Don’t send me news and offers” when you pay, and we will not send any. If you join the waitlist or ask for a checklist, we only send news if you tick the box that asks, and WhatsApp messages only if you tick that box too.
The news list holds your email address, and your WhatsApp number if you gave it for messages. It holds the country you chose, if you chose one, and how you joined. It holds nothing from your case. It is kept apart from cases, and it is not deleted with them. Every news email has a link to stop them. When you stop them, we keep a note that you said no, so you are never added again by mistake. We also take you off the list if we have had no sign of you for two years. We never sell or share the list.
What you post in the community is public: anyone can read your questions and replies, under the community name you choose. We store your posts and that name with your account, but not your email address, and we never show your account to other members. Please do not post passport numbers, reference numbers, email addresses or your case link; we refuse posts that contain them. If you ask the AI Consulate to answer a question you posted, the question and what you added are sent to Anthropic to answer, and the answer is posted in the thread. In the AI Consulate chat, your conversation is sent to Anthropic to answer each message, and we do not store it. To have a post removed, use Report, or write to us.
You can ask what we hold, or ask us to delete it, by writing to desk@approvable.app. Because we cannot read your case without your link, we may ask you to open it, or to delete it yourself. If you are in the United Kingdom or the European Union you may complain to your data protection authority.
Approvable helps you check and prepare your own application. It is not immigration advice or legal advice. We cannot tell you if you will get the visa, and we do not guarantee that you will.