Privacy Policy

Last updated: 3 November 2026

This Privacy Policy explains how Linkora SARL ("Voyalo", "we", "us"), operator of the Voyalo app and website voyalo.ai, collects, uses, and protects your personal data. Voyalo is an independent visa and travel information and preparation service. Voyalo is NOT a government body, embassy, or law firm, and does not provide legal advice. Official visa decisions are made solely by the relevant government authorities.

1. Who we are (Data Controller)

Linkora SARL, registered in Algeria, trade register (RC) no. 26 B 1206095-16/00 (CNRC, 26 October 2026).
Contact: aminek@linkoraglobal.net. Postal address: Local 09, Building 56, 4th floor, Cité Kaid El Bab, Bir El Khadem, Algiers, Algeria.

2. The data we collect

3. How we use your data

We do NOT sell your personal data.

4. Legal bases

We process your data based on: your consent (which you may withdraw at any time); performance of our contract with you; our legitimate interests in operating and securing the service; and compliance with legal obligations.

5. Sensitive data & passport photos

Passport details and photos are collected only with your explicit consent and used solely to prepare your visa materials. We encrypt this data, restrict internal access, and delete passport images when they are no longer needed. We never post them publicly. When you use the passport-photo tool, your photo is processed in your own browser: face detection, background removal and cropping run on your device, and the photo is not uploaded to Voyalo or to any third party. The finished photo stays on your device until you save it. Server-side photo processing, including the optional remove.bg setting, is switched off. e-Visa filing service: if you use it, the details you enter (names, date of birth, passport number and expiry, email, arrival date), your passport page, photo and any document you add are used only to check and file your application on the destination government's official website, which receives them as part of your application and processes them under its own rules. Your uploads, the issued visa and your passport number are deleted 30 days after your order closes; an application you never pay is closed and deleted 30 days after your last change. Order and payment records, without your documents or passport number, are kept for accounting.

6. How we share data

We share data only with: service providers who help us run Voyalo (hosting, cloud storage, payment processing, analytics, customer support) under confidentiality obligations; and authorities where required by law. When you choose to apply for a visa, Voyalo directs you to the relevant OFFICIAL government portal — we do not submit applications to governments on your behalf unless expressly stated.

Plan Visa uploads are private. You and authorised Voyalo review/support staff can access them; hosting, private cloud storage and the AI providers above process them to deliver your review. They are not public or shared with other applicants, and we do not send them to embassies on your behalf.

The service providers we use are: Render (application hosting, Frankfurt, Germany); Neon (database, Frankfurt, Germany); Google Cloud Storage (private file storage, Frankfurt, Germany); Cloudflare (network delivery and protection in front of our host); Clerk (account sign-in and authentication); Resend (service emails such as reminders and receipts); Google Gemini (AI analysis, see section 3); Stripe (card payments for purchases made outside Algeria); Telegram (only if you choose to use our Telegram bot); and Meta (only with your consent, see section 12). If we add another AI provider for Lea, such as Anthropic, we will list it here before it processes any of your data.

7. International transfers

Your data may be processed on servers located outside your country of residence. Where this happens we apply appropriate safeguards to protect your data consistent with this Policy and applicable law.

In practice, hosting, the database and file storage are in the European Union (Frankfurt, Germany). Account sign-in (Clerk), service emails (Resend), AI analysis (Google Gemini) and card payments (Stripe) may involve processing in the United States.

8. Data retention

We keep personal data only as long as needed to provide the service or meet legal obligations. Passport images are deleted after 90 days or once no longer needed, whichever is sooner. You may request deletion at any time. Meta attribution identifiers and consent evidence attached to manual prepaid orders are cleared when those order records are anonymized, normally 90 days after a final order status.

Plan Visa uploaded files and their upload metadata are automatically deleted 30 days after the plan ends, or earlier on your deletion request. A plan ends when it is marked ready or refunded, or at the end of its purchased calendar-month term (including extensions), measured from delivery of the initial diagnostic, or activation if no diagnostic was delivered. A daily scheduled cleanup enforces this rule. Request earlier deletion at aminek@linkoraglobal.net, or delete your account in the app. We retain anonymised payment amounts, currency, status and dates for accounting, without account or Plan Visa links. Document-review summaries remain in your account until you request their deletion or erase the account.

Documents you upload for a Pro assessment (for example your passport, bank statements and bookings) are automatically deleted 30 days after your report is completed. Uploads to an unpaid draft are deleted 30 days after upload. A daily scheduled cleanup enforces this rule. Your report (score, findings and checks) stays in your account until you request its deletion or erase the account. Request earlier deletion at aminek@linkoraglobal.net, or delete your account in the app.

Appeal letters and court self-filing packs you buy stay in your account for 30 days after delivery so you can reopen them, then their content is deleted automatically (download or print them before then). We keep only a record that the order was delivered. The refusal text you paste to write them is not stored.

9. Security

We protect your data with encryption in transit and at rest, access controls, and secure storage. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authority of a data breach where required.

10. Your rights

Depending on your country, you have the right to access, correct, delete, or export your data, to withdraw consent, to object to or restrict certain processing, and to lodge a complaint with your data protection authority. To exercise these rights, contact aminek@linkoraglobal.net or use the tools in the app (Download my data / Delete my account).

Your data protection authority:

11. Children

Voyalo is intended for users aged 18 and over. Where information about a minor is provided as part of a family application, it must be supplied by a parent or legal guardian who consents on the minor's behalf.

12. Cookies & analytics

We use essential cookies to run the service and, with your consent, analytics to improve it. You can control non-essential cookies via the in-app/website settings. With separate explicit consent, Voyalo may use the Meta Pixel in your browser and Meta Conversions API on our server to measure completed purchases and campaign performance. For this purpose we may share a randomly generated event identifier, Meta attribution identifiers (_fbp and _fbc), the purchase amount, currency, product, and a page URL with Meta Platforms Ireland Limited. We do not include your name, phone number, email address, or order reference as event fields. The browser Pixel may automatically transmit your browser IP address, user agent, and current page URL, which can contain the random order reference; we remove the one-time order claim token from the URL before any Pixel event. The server-side Conversions API does not include your browser IP address, user agent, or order reference. You may withdraw this analytics consent before approval; we do not send a Purchase event without active consent. Service and account messages are kept separate from advertising. We send promotional email only after a separate, optional opt-in, and you may withdraw that promotional consent in your profile or using the withdrawal link in each email. Service-update emails also include a withdrawal link. We do not use passport, document, visa decision, or other sensitive application details for advertising audiences.

13. Third-party (government) links

Voyalo links to official government visa portals for you to apply directly. Those sites have their own privacy policies, which we do not control. Always ensure you are on the official government website.

14. Changes

We may update this Policy. We will post the new version with an updated "Last updated" date and, for material changes, notify you in the app.

15. Contact

Questions or requests: aminek@linkoraglobal.net.