Privacy Policy

1. Information We Collect

At EcuaPass, we collect information that you provide directly to us when you:

• Fill out intake forms or request visa help
• Subscribe to our newsletter or blog updates
• Use our interactive tools (eligibility quiz, calculators)
• Communicate with us by email after submitting an intake form
• Apply for visa services through our platform

This information may include:

• Name and contact information (email, phone number)
• Nationality and current location
• Visa type of interest
• Financial information (income levels, not bank details)
• Any other information you choose to provide in your communications

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide visa intake review services
• Process visa applications and provide related services
• Send you information about Ecuador visa requirements and updates
• Improve our website, tools, and services
• Comply with legal obligations and protect our legal rights
• Prevent fraud and enhance security

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Email: Resend processes contact details, message content, and delivery information needed to send requested resources, initial inquiry responses, signed-agreement notifications, and confirmation emails.
• Website assistant inquiries: Web3Forms receives website assistant inquiry details and conversation messages for follow-up. Visa intake forms use the providers described below.
• Email subscriber records: Kit stores email addresses, names, and EcuaPass/source tags so we can organize subscriber records and send relevant updates. You may unsubscribe at any time
• Visa intake inquiries: We use your contact details and answers to handle your request and respond about EcuaPass services. Vercel stores private automated processing records containing your intake answers, consent choices, inquiry source, prepared response, and delivery status so we can process the inquiry and safely retry interrupted delivery. Separate inquiry records retain contact and source information for follow-up. Newsletter signup requires your separate choice. Leave out passport numbers, bank or account numbers, passwords, and sensitive documents.
• AI-assisted intake replies: Depending on the configured service, OpenAI, DeepSeek, or Moonshot may process a reduced set of intake answers to identify your stated needs and planning context. We exclude your name, email, and telephone fields from this AI input and filter identifier-like text from free-text answers. Initial responses may be automated and use EcuaPass service information. The AI does not decide visa eligibility, confirm immigration requirements, or provide legal advice. Requests needing individual review may be handled separately.
• Payments: Stripe processes card payments for online purchases. EcuaPass receives the checkout contact details, payment reference, amount, and payment status needed to fulfill your purchase; it does not receive your full card number. Mercury processes invoice, payer, and bank-transfer information for ACH payments; EcuaPass does not receive your online-banking credentials
• Written preparation plans: We use the facts you provide by email to prepare and deliver your purchased plan, ask follow-up questions, and respond to the included clarification round. Private order records and deliverables are stored through Vercel. Resend sends payment confirmations, starter questions, and private order links. Keep these links private. Do not include passport numbers, account numbers, passwords, or document attachments in your first email reply. Buying a plan does not subscribe you to marketing.
• Website and Analytics: Vercel hosts the site and provides Vercel Web Analytics (page views and custom events) only after you allow analytics. When you allow analytics, Google Analytics measures page usage and Google Ads measures advertising conversions. All three providers remain disabled until you make a choice, and every one is disabled if you decline.
• Past messaging: If you previously contacted us on WhatsApp, Meta/WhatsApp processed that conversation under its own terms
• Operational Providers: With providers needed for secure document transfer, translation coordination, scheduling, and service delivery
• Legal Requirements: When required by law, court order, or legal process
• Ecuadorian Government: When necessary to submit visa applications on your behalf (only with your explicit consent)

Some providers may process data outside Ecuador. Their own privacy terms and security practices also apply. We disclose only the information reasonably necessary for the requested function.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. These include:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our website (including Google Analytics, when you allow analytics)
• Marketing Cookies: Measure advertising and conversions when you allow analytics

We enable the following analytics providers only after you choose “Allow analytics”: Vercel Analytics (page views and custom events), Google Analytics (page usage), and Google Ads (conversion measurement). Declining keeps all three disabled for your session.

Each provider stores data under the EcuaPass account for that service: Vercel Analytics data is retained by EcuaPass through Vercel; Google Analytics and Google Ads data is retained by EcuaPass through its Google property. You may withdraw consent at any time through the site consent control, which stops new event delivery. To request deletion of analytics data attributable to you, contact EcuaPass and we will remove it from the accounts we control or ask the provider to delete it where deletion is performed by the provider.

You can use the site consent control or your browser settings to manage non-essential cookies. Essential functionality may still use limited storage.

5. Data Security

We use reasonable technical and organizational safeguards intended to reduce unauthorized access, alteration, disclosure, or destruction. No internet transmission or storage system can be guaranteed completely secure.

• SSL/TLS encryption for data transmission
• Access controls for systems used to deliver the service
• Security updates and provider safeguards
• Limiting access to people and providers who need the information
• Private document links that expire after 24 hours when sent for manual review

6. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Opt-Out: Unsubscribe from marketing communications at any time
• Data Portability: Request your data in a structured, machine-readable format

To exercise these rights, contact us at info@ecuapass.com

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

8. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When information is no longer needed, we securely delete or anonymize it.

We schedule daily cleanup of automated intake processing records that are at least 30 days old, including raw intake answers and the frozen initial email payloads in that pipeline. These records are separate from ongoing inquiry records, correspondence in our email mailbox, and purchased service records. Contact us at info@ecuapass.com to request access, correction, or deletion, subject to any records we must retain for legal obligations or an active service.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: