IndianVisa Autofill Helper — Privacy Policy

Last updated: 17 October 2026

This policy explains what information the IndianVisa Autofill Helper Chrome extension (“the extension”) and the website autofill.ivacslot.com (“the website”) handle, why, and what choices you have. Both are run by ivacSlot (“we”).

1. Your account on the website

You sign in with Google. Google tells us your email address, name, profile picture link and Google account ID. We never see your Google password. We use these to create your account, show who is signed in, and keep your credits.

For each account we also keep:

• your credit balance;
• a history of credit changes: each paid use (date and time, the feature, for example “Passport extract”, and the credits charged), the start-up bonus, credits you bought, and credits added or removed by an admin together with which admin did it and a short note (for example the transaction ID of a payment you made to the admin);
• activity details: when the account was created, your last sign-in, your last paid use, the last time your extension contacted the website (updated at most every 10 minutes), and your totals of uses, credits spent and credits added;
• the sign-in keys that connect your extension to your account. We store them only as one-way scrambled codes (hashes), together with your email, a short device label such as “Chrome on Windows” and the dates they were made and last used. A key works until the extension signs out, an admin signs out your extensions, or it is replaced after 10 newer sign-ins.

An admin can add credits to a Google email before its owner signs in for the first time. That creates an account record holding only the email, the balance and that history entry.

The admins of the service can see the account details above in order to run the service and help you.

2. Buying credits

Online payment (PayStation), when it is switched on: you pay on PayStation’s own pages; we never see or store your card number, PIN, wallet password or OTP. We send PayStation the order number, the amount, and your name and Google email address for the payment. From PayStation we receive and keep the payment status, the payment method name and PayStation’s transaction number. We keep these order records with your email, the credits, the amount and the times, so we can add your credits and answer payment questions.

Paying an admin directly: when online payment is off, you pay the admin and the admin adds the credits to your account, as described in section 1.

3. The browser extension

• Applicant profiles (names, passport details, addresses, contact details, photos, medical details for medical visas, and other form data) that you extract or type are saved in your browser’s extension storage on your computer. They are not uploaded to us. While a form is being filled, the profile you chose is also kept in that website tab’s session storage, which is cleared when you close the tab. If you use Export, the profiles and lists you choose (applicant profiles, saved hotels and NOC companies, and the recent lists described below, which can include passport numbers, dates of birth and phone numbers) are saved to a backup file on your computer; that file is only lightly scrambled, not encrypted, so keep it safe.
• The extension also keeps, in the same extension storage, short lists (up to 20–30 entries each) of the temporary and final application IDs it reads from the visa portal’s pages while you fill a form, and of your recent status checks, resumed applications, BGD downloads, and travel-tax and port-tax checks. Depending on the list, an entry holds the ID, the applicant’s name, passport number, date of birth, phone number, age, Indian mission or land port, and the time. It also keeps the hotels and NOC companies you save. These lists are not sent to us. You can remove entries from them, and removing the extension deletes them.
• Visa application PDFs you select are read on your computer. The file and its contents are not sent to us.
• Passport extraction: when you click Extract, the passport image or PDF file you chose (the whole file) is sent over HTTPS through autofill.ivacslot.com to Anthropic (Claude, an automated AI reading service), and the details read from it come back to your browser. Our server does not keep the file or the result. If that service cannot be used, you see an error, no credits are used, and the passport is not read in any other way.
• Captcha reading is on by default. When a supported page shows a captcha (for example the first page of the visa form, a status-check page, or the travel-tax and passtrack.net pages), the extension automatically sends that captcha picture over HTTPS through autofill.ivacslot.com to a captcha-reading service: TrueCaptcha (apitruecaptcha.org), an automated reading service. Only the recognised text comes back. Our server does not keep the picture. To stop this, open the extension’s side panel, click Captcha & Popups, and switch off both “Advance visa captcha” and “General captchas”.
• Web pages: the extension reads and fills the visa form on indianvisa-bangladesh.nic.in. Only after you allow each site, it also works on indianvisaonline.gov.in (status check, e-Arrival), passtrack.net (application status), airsuvidha.civilaviation.gov.in, billpay.sonalibank.com.bd (travel tax) and passenger.blpa.gov.bd (port tax), filling their forms with the profile you choose. On the visa site it can also upload the applicant photo and the supporting documents you pick to the official portal for you; documents waiting in an upload queue are kept in that site’s storage in your browser until they are uploaded or you cancel. The extension does not send the content of these pages to us, apart from captcha pictures, and it does not collect your browsing history.
• What the extension sends to autofill.ivacslot.com: your sign-in key, the name of the feature you are paying for, and the passport files and captcha pictures described above.
• Deleting: you can delete a profile in the extension at any time, and removing the extension deletes all profiles kept in it. Backup files you exported stay on your computer until you delete them, and an unfinished upload queue stays in that website’s storage until it finishes or you clear that site’s data.

4. Cookies and outside resources

The website uses one session cookie, which holds only a random session ID, to keep you signed in (up to 30 days). The matching session record on our server holds your email and a security code against forged requests, and it ends when you sign out. The Google sign-in button is provided by Google and may use Google’s own cookies. We use no advertising, analytics or tracking cookies.

Some things are loaded straight from Google, so Google receives your IP address and browser details when they load:

• the Google Fonts typeface used by the website, the extension’s own screens, and the panels the extension adds to the visa and other supported pages (so this also happens when you open a page on a supported site);
• your Google profile picture, shown on your dashboard when you are signed in.

5. How we use information

Only to run the service: signing you in, connecting the extension, keeping and charging credits, processing payments, reading the passport files and captcha pictures you send, preventing abuse, and answering your questions. We do not use it for advertising, profiling, credit decisions or anything unrelated to the service, and we do not sell it.

6. Who else handles information

• Google — sign-in, your profile picture and the Google Fonts typeface (see section 4).
• PayStation — online payments (see section 2).
• Anthropic (Claude) — receives the passport files described in section 3 only to return the details read from them. Anthropic does not use them to train its models and deletes them automatically within 30 days at most (content flagged for misuse may be kept longer).
• TrueCaptcha (apitruecaptcha.org) — receives the captcha pictures described in section 3 only to return their text.
• Our web hosting provider — stores the website and its data, and may keep standard server logs (such as IP address and time of a request) for security.

We share information with others only if the law requires it.

7. Chrome Web Store user data

The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

8. How long we keep it

• Account details, balance and activity details: until you ask us to delete your account.
• History of uses and credit changes, and payment records (kept with your email): for accounting and to answer questions about past uses and payments.
• Extension sign-in keys: until the extension signs out, an admin signs it out, or it is replaced after 10 newer sign-ins.
• Website sign-in: the session ends after at most 30 days or when you sign out.
• Passport files and captcha pictures: not kept on our servers after the result is returned.

9. Security

All traffic uses HTTPS. Account data is kept in a private folder that cannot be opened from the web, extension sign-in keys are stored only as hashes, and only listed admins can open the admin page.

10. Your choices

• See your balance, your latest activity (up to the 30 most recent entries from about the last three months) and your recent online payments on your dashboard; ask us for older records.
• Sign the extension or the website out at any time; ask us to sign out all of your extensions.
• Delete profiles in the extension, or remove the extension to delete all of them.
• Switch captcha reading off in the extension’s side panel (Captcha & Popups).
• Ask us to correct your details or delete your account. We then delete your account details and sign-in keys; records of past uses and payments are kept for accounting.

11. Children

The service is not meant for children under 13, and we do not knowingly collect their information.

12. Not a government service

IndianVisa Autofill Helper is an independent tool. It is not affiliated with, endorsed by, or operated by the Government of India, the High Commission of India, or IVAC.

13. Changes

If this policy changes, we will update this page and the date at the top.

14. Contact

Questions or requests about your information: m.sohagali97@gmail.com.