Privacy policy

Visara, an independent visa service provider operating in Indonesia. When you upload a passport page or a sponsor letter, we are the ones holding it. We are not a government agency and we are not part of Indonesian immigration.

Only what an order and an application need, and only once your case needs it.

• Your order: the visa, the term, the number of applicants, the add ons you chose, your name, email address and WhatsApp number, the date you plan to travel if you gave one, and anything you wrote in the notes.
• Your account, which is your email address and your name. There is no password: you sign in with a code we email you.
• Identity and travel document details: full name, date of birth, nationality, passport number and expiry, and the passport photo page.
• Case documents: whatever the visa requires, such as an employment letter, a sponsor letter, a certificate of marriage or birth, proof of funds, or a photograph to the mission specification. These are the files you upload on your order page.
• Sponsor and employer details, on work, investor and family routes, because the obligations sit on both sides.
• Payment records: that a payment was made, when, for how much, by which kind of method, and the reference the payment provider gave it. Not the card number, the account number or anything that could be used to pay again; those never reach us.
• Our correspondence with you, so the next person who picks up your case can read what was already agreed.

To take your order, to assess which route fits your case, to prepare and check the document set, to lodge the application, to answer the authority when it asks for more, and to write to you about any of that. That is the whole list. We do not build advertising profiles and we do not sell anything to anybody.

• The immigration authority or the mission handling your application. This is the point of the exercise, and the application is made in your name.
• Midtrans, the payment provider, when you pay online. It sees what a payment needs: the amount, your name, email and phone number, and the order reference. It handles your card or bank details under its own terms and privacy policy, in its own window, and passes back to us only whether the payment went through.
• Cloudflare, whose servers run this site, store the database and the documents you upload, and send our email. It is a processor acting on our instructions and does not use the data for anything of its own.
• Third parties the case needs by name, such as a sworn translator, a legalisation office or a courier. They receive the document that step requires and nothing else.
• Nobody else. We do not sell personal data, we do not share it with advertisers, and we do not pass it to other agents.

A document you upload is stored in private object storage that has no public address. It can only be reached through your order page, by you, by a member of Visara staff working on your order, or by somebody holding the link from your confirmation email. It is never served from a cache, never listed anywhere, and never used as an example.

You can replace or remove a document from your order page at any time until we have accepted it. Removing it deletes the file.

Paying online happens in a window opened by Midtrans, on its own servers. Whatever you type there, a card number, a bank login, an e-wallet PIN, goes to Midtrans and not to us. What comes back to this site is the outcome: paid, pending, failed or refunded, the kind of method, and a transaction reference. That is what we keep, because it is what a refund or a dispute is settled with.

Case documents are kept while the case is open and for as long afterwards as we may need them: an extension, a renewal or a question from the authority usually starts from the same file. Order and payment records are kept for as long as Indonesian tax and accounting rules require. Where Indonesian law sets a retention period for a record, that period governs.

When you ask us to delete your documents, we delete what we are not required to keep, and we tell you plainly what we are keeping and why.

• A copy of what we hold on you.
• A correction, if something we hold is wrong.
• Deletion of what we are not required by law to keep, including your account.
• Withdrawal of your consent, which stops us acting further on your case.

Ask on the same WhatsApp number you have been talking to us on, by replying to any email from us, or from the contact link below. We answer these in writing.

Access is limited to the people working on your case, and every change they make to an order is logged against their name. Everything travels over encrypted connections. We will never ask you for a password, a card number or a one time code by chat or email; the only code we ever send you is the one to sign in with, and we never ask you to send it back.

This site sets a cookie for the currency you picked in the language and currency dialog, so prices stay in it on the next page. Your language is in the URL rather than in storage. There is no analytics cookie and no advertising cookie on these pages.

Signing in sets a session cookie so you stay signed in for a week. Opening an order from the link in your confirmation email sets a cookie for that one order, for a month, so you can upload documents without signing in. Both are ours, both are limited to this site, and neither is read by anybody else.

The admin area at /admin/ sets a session cookie, which is for Visara staff signing in and never reaches a reader.

We email you when you place an order, when a payment is received, and when you ask for a sign-in code. We do not send newsletters and we do not send marketing. Every email we send is written down before it is sent and can be shown to you on request.

Much of our work with you happens on WhatsApp, which is a Meta service running under its own terms and privacy policy, not ours. What you send us there reaches us; what WhatsApp itself does with message metadata is between you and Meta. If you would rather not use it, say so and we will agree another channel.

If what we collect or who we share it with changes, this page changes with it and the date at the top moves. We do not backdate it.