এক্সটেনশনের পিডিএফ ও পাসপোর্ট প্রসেসিং আপনার ডিভাইসে হয়। অটোফিল বা ডকুমেন্ট আপলোড চালু করলে নির্বাচিত তথ্য ভিসা ওয়েবসাইটে যায়। অ্যাকাউন্ট, পেমেন্ট ও সহায়তার তথ্য আলাদাভাবে আমাদের সার্ভারে সংরক্ষিত হয়। তথ্য মুছে ফেলার অনুরোধ করতে নিচের যোগাযোগ মাধ্যম ব্যবহার করুন।
1. About this policy
This policy explains how SoftNuvia handles information in the Indian Visa Form Auto Fill Max browser extension and its companion website at indianvisa-bangladesh.softnuvia.com. SoftNuvia is an independent software service, not an Indian or Bangladeshi government agency, embassy, consulate or visa application centre.
The extension helps you import documents, organise applicant profiles, prepare supporting documents and fill supported visa forms. This policy covers both information processed on your device and information received by our website. The government websites you use have their own privacy policies.
2. Information we handle and why
| Information | Purpose and location |
|---|---|
| Applicant profiles and selected documents | Names, birth dates, nationality, passport identifiers, contact details, travel details, photographs and other fields contained in files you import or profiles you enter. Supporting documents can contain family, employment, education, financial or medical information. These are processed on your device for extraction, document preparation and autofill. |
| Visa page content and application identifiers | Supported form fields, temporary/application IDs, page addresses and relevant request information are used to fill forms, resume applications and download application documents. This is not a general browsing-history collection service. |
| Website account and connection data | Name, email, optional WhatsApp number, password hash, login/session records and extension authorisation records support your account and connected extension. The extension stores its connection token in extension-local storage so sign-in can persist after closing the panel or browser. The connection remains valid until sign-out or revocation, subject to account status and security checks. |
| Payments and service activity | Selected plan, amount, payment provider, sender number, transaction reference, optional notes, credit entries and review status are stored on our server to administer purchases and resolve disputes. Service requests may include an operation type, request identifier and completion status; these metadata are distinct from passport or PDF contents. |
| Support and technical information | Contact-form name, email, subject and message are stored for support. Hosting and security systems may process IP addresses, browser/request details, timestamps and error records for delivery, diagnostics and abuse prevention. |
We do not ask for your mobile-wallet PIN, payment OTP or card security code. Do not include these, or unnecessary passport and medical documents, in support messages.
3. Local processing and information sent to visa sites
PDF extraction and passport OCR in the reviewed extension build run in your browser using bundled processing libraries. Saved profiles, selected attachments, preferences and application-ID records use extension-local storage. The document contents are not uploaded to SoftNuvia for OCR or used to train an AI model.
Local storage is not the same as anonymous or encrypted storage. Anyone with access to your browser profile or device may be able to access it. Use a trusted device and protect exported files and backups.
When you enable autofill, automatic navigation or document/photo filling, the extension can place your selected profile information and attachments into supported government forms. Those websites may receive information as their forms run or are submitted. Review your selected profile and the destination before enabling automation. Exporting or downloading a profile or PDF creates a separate file under your control.
4. Browser permissions
- Storage: save profiles, attachments, preferences and connection state.
- Side panel: display the extension workspace alongside visa pages.
- Active tab and scripting: interact with supported page fields and run the selected autofill and document tools.
- Downloads: save requested PDFs, application documents and exported profiles.
- Web request access: support relevant visa-page request and document workflows on permitted sites.
- Website access: operate on supported Indian visa domains and connect to the portal origin you approve. Development builds can also include localhost access; that is not a reason to grant access to unrelated sites.
You can manage site access, disable automation or remove the extension in Chrome. Denying a permission can prevent the corresponding feature from working. We do not use these permissions to monitor unrelated browsing or target advertising.
For account security and service analytics, we record successful sign-ins and authenticated extension activity with account ID, timestamp and IP address, approximate device type, operating system, browser and traffic source. Referral tracking stores only the referring domain, not the full URL or query string. Activity records are retained for up to 90 days. We use trusted Cloudflare headers when available; if location is unavailable, the IP address is sent over HTTPS to ipwhois for approximate country/city lookup and cached for up to 24 hours. Location may be inaccurate. These records are accessible to authorised administrators. Document contents, passwords and authentication tokens are not included in this analytics log.
6. Cookies and third-party services
The website uses session and security cookies for sign-in, form protection and account workflows. Hosting infrastructure and Cloudflare process requests to deliver and protect the site; Cloudflare Web Analytics may also receive page-load and performance information on the website. This website processing is separate from the extension's local document processing.
Embedded tutorial videos use YouTube's privacy-enhanced player. Loading or playing the player can still disclose network and device information to YouTube/Google. WhatsApp support opens WhatsApp when you select it. Telegram or Tawk.to may be available if enabled; using them shares information with the selected provider under its own policies.
When enabled, Cloudflare Turnstile protects direct email login, signup and password-reset requests. Cloudflare processes browser and network signals for abuse prevention; our server validates the resulting token. Social sign-in does not require this Turnstile check.
If a social sign-in option is offered and you choose it, the provider shares an account identifier, name and email to create or authenticate your account. We do not receive your provider password. Our current sign-in integration does not request access to your email messages, Drive files or contacts. External providers may process information outside your country.
7. Retention, deletion and your choices
Extension-local profiles remain until you delete them, clear extension data or remove the extension. Exported files and backups must be deleted separately. Disconnecting or signing out of the portal does not automatically erase local applicant profiles.
Server records are retained while needed for account operation, payment reconciliation, fraud prevention, support and applicable recordkeeping duties. There is no single fixed retention period for every category. Deletion requests are reviewed against those purposes; records that must be retained are restricted to those purposes. Backup copies may remain until the relevant backup cycle expires.
You can edit account details in account settings, revoke extension sessions and manage browser permissions. To request access, correction, account closure or deletion of server-held data, email [email protected] or use our contact form. We may ask for proportionate proof of account ownership. We will explain any information we must retain. Rights and response requirements depend on applicable law; you may also contact your relevant privacy regulator.
8. Security and applicants' authority
The live portal uses HTTPS, password hashing and account-access controls. No system can guarantee absolute security. Keep your device, browser and credentials secure and tell us promptly about suspected unauthorised access.
The service is intended for adults and authorised representatives. If you process another applicant's information, including a child's or sensitive medical information, obtain the required authority and consent before importing or sharing it. We do not knowingly invite children to create accounts independently.
9. Policy updates
We will update this page and its revision date when practices change. Material changes will be brought to users' attention through the service where appropriate. A materially different collection or use of sensitive information requires the disclosures and consent applicable to that change; this policy is not blanket consent for future uses.
Contact SoftNuvia
For privacy, access or deletion requests, contact our support team.
[email protected] ↗যোগাযোগ ফর্ম · Contact form →Effective date: 27 September 2026 · The Bengali summaries are for convenience. Read the complete English sections for the full policy or terms.