Wayform is operated by Nestr LLC. This notice explains the information used to provide our form, photo and document tools, process purchases, prevent abuse and respond to support requests. Features process information only when you use them; payment provisions apply when checkout is available.
Your form answers
Your answers are kept in this tab while you work. When you generate a PDF or start checkout, your answers are sent over an encrypted connection to our service for validation and PDF generation. We do not save form answers or completed PDFs in our database, and we do not send them to an immigration authority. Optional translation suggestions are described below.
During checkout, a temporary copy of your English answers and any original-language entries is kept in this browser tab’s session storage so you can return to the form. “Clear my answers” removes that copy. Closing the tab normally removes it; browser restore features may retain tabs. On a shared device, clear your answers and remove downloaded files when finished.
Optional English suggestions
You can enter an original-language answer and a separate English version. When you allow suggestions and choose “Suggest English”, only that selected descriptive answer and its field label are sent through our server to Replicate’s Qwen model. Names, addresses, document identifiers and declaration answers are not offered for automatic translation. Suggestions can be wrong; review and edit the English version before using it.
We do not save original answers or translation outputs in our database. To limit use and prevent duplicate requests, we keep a hashed browser token, request and source hashes, form and field identifiers, a prediction reference and creation time. These records stop providing access after an hour and are deleted by later suggestion requests when older than 24 hours. Replicate normally removes API inputs, outputs and logs after an hour. Clearing your answers removes your browser copy, not the provider’s copy immediately.
Form previews
Completed-form previews are rendered temporarily on our server as watermarked images. They are not saved in our database or file storage. Original-language entries are not included in the PDF; only the English answers you review are used. Preview usage limits use a hashed browser token and an hourly count.
Photo and document tools
The photo framing controls run locally. After your consent, preview and download actions send a re-encoded JPEG copy of up to 8 megapixels and your crop settings to Wayform for temporary processing. We do not store the uploaded photo or generated files, or send them to an AI service for sizing. Preview responses contain only a watermarked, reduced-size image. We keep a hashed browser token, selected format/version, preview reference, readiness and creation time for abuse prevention and checkout validation; these records are removed by later photo requests after 24 hours. You must re-upload your original after checkout or when returning. Document tools and original-file checks still run locally. Files you download remain on your device until you delete them.
Optional background cleanup
Background cleanup is different: after you agree and choose “Create white-background preview”, we send a resized JPEG copy through our server to Replicate’s BiRefNet model. Re-encoding removes embedded metadata. Replicate processes the image and returns a cutout; your browser places it on white. We do not use face generation or beauty filters.
Replicate automatically removes API prediction inputs, outputs and logs after an hour by default. See Replicate’s retention information. Download your result before leaving the page. Clearing this tool removes local working copies; it does not immediately delete Replicate’s copy.
Wayform does not save photo bytes in its database or file storage. We temporarily store a hashed browser token, request and image hashes, processing status, prediction reference, temporary output URL and creation time to protect access, prevent duplicate submissions and limit usage. Records become inaccessible after one hour and are removed during subsequent creation requests once older than 24 hours. Photos may also appear in the Replicate account’s prediction history during its retention period.
Orders and payment
When payments are enabled, Stripe handles card information on its hosted checkout. We store an order reference, amount, currency, purchased form or photo format and version, timestamps, payment status, Stripe references, a hashed browser access token, and a keyed hash of the checkout email used to find purchases. We do not store your checkout email in our order database. We do not receive or store your full card number. Order and payment-event records remain after the 30-day download period for support, fraud prevention, disputes and accounting. These records currently have no automatic deletion schedule. You can request deletion or ask what must be retained for legal obligations; closing a tab or clearing a tool does not delete order records. We save your selected language with the order to send purchase emails in that language.
Purchase recovery
When email recovery is enabled, Resend delivers purchase confirmations and access links to the checkout email. Messages contain order information, never your passport answers or PDF. Recovery links last 15 minutes and work once. We store a hash of each link and its expiry, plus short-lived keyed hashes for request limits. Expired recovery records are removed during recovery requests. A recovery link restores eligible purchase access, not form answers.
Essential cookies and service providers
An essential browser cookie lets you access your order for 30 days. The service uses hosted infrastructure from OpenAI Sites and Cloudflare; Stripe processes payments when enabled. Infrastructure providers may process request metadata such as IP addresses and security logs. We do not add advertising trackers or sell your form answers.
We count page loads by page group and day, without visitor identifiers or tracking cookies. When enabled, Sentry receives sanitized technical error reports, without form answers, photos, email addresses or URL query strings. Daily counters older than 90 days are removed when new activity is recorded. Error reports follow our monitoring project's retention settings. We also count uploads, previews, checkout sessions, verified payments and prepared files by product and language, without identifying visitors. Cloudflare Web Analytics also measures traffic sources, countries, devices and performance on public pages without tracking cookies. Its reports are available for 6 months; this does not extend photo or document storage.
Support and email providers
Resend processes the recipient address and message content needed to deliver confirmation and recovery emails. Support messages sent to our domain pass through Cloudflare Email Routing to our Gmail support inbox. Google and Cloudflare therefore process the messages and attachments you send us. Support correspondence is separate from form processing and is retained in that inbox until deleted. Please include an order reference instead of passport scans or completed application forms.
Our providers may process information outside your country. Their privacy information explains their own processing: Stripe, Resend, Replicate, Cloudflare, Google and OpenAI.
Your choices
You can use official government application routes directly, decline optional AI processing, clear your answers or photo from the current tool, and delete files you download. Clearing local copies does not immediately delete information already processed by a provider.
Contact us below to ask about access, correction or deletion of your information, or to raise a privacy concern. We may need to verify your request using your checkout email or order reference. We will explain any information we must retain and why. Any additional privacy rights available under the law where you live remain unaffected.
Signature capture
Signature strokes and uploaded signature images are processed only in the current browser tab. They are not sent to Wayform, a translation provider or Replicate, and are not saved in browser storage. Clearing the signature or leaving the page removes the working copy. Downloaded files remain on your device until you delete them.
Family packs and agency workspaces
Family photo previews and exports send your original JPEG, including any embedded metadata, to Wayform only after consent. We process it temporarily and do not save the image or generated file. A one-way file digest binds each paid slot to the same original; selected formats and export counts enforce the allowance. Expired slot digests are removed during later family checkout or download requests, so removal may occur after the access deadline. Payment records remain separate.
For an agency workspace, we store the signed-in owner identifier, a keyed email hash to exclude self-referrals, business name, optional website, default format, approval status, referral code and settlement records. The approved referral page displays the business name publicly. Orders can store a referral code for attribution. Partners receive aggregate results, not customer names, email addresses, photos or answers. Business and settlement records have no automatic deletion schedule. Contact support@wayform.io to correct details or request account closure; records needed for accounting or disputes may remain.