Privacy policy

1. Information we collect

We collect the following categories of information to provide our visa application service:

Personal identity information

• Full name, date of birth, place of birth, gender, nationality, and marital status
• Passport details: passport number, issue date, expiry date, and passport scans
• CNIC (Pakistani national identity card) number and scans
• Contact information: WhatsApp number, email address, and residential address in Pakistan

Travel, employment, and family information

• Travel dates, destination, purpose of visit, and accommodation details
• Previous visa and travel history
• Employment details: employer name, address, phone, and job title, or educational institution
• Details of family members you apply for from your account
• Your answers to the questions asked for your chosen visa

Documents

• Passport, CNIC, and visa-size photographs
• Bank statements and financial documents
• Travel insurance certificates, flight bookings, and hotel reservations
• Employment letters, invitation letters, and any other document your visa requires
• Information we extract from these documents to fill in your application, and any issues our checks flag on them

Technical and usage data

• IP address, browser type, device information, and operating system
• Server logs of requests made to our platform
• Records of the automated checks and document processing run on your application
• Records of which of our staff viewed the documents in your vault, and when

2. How we use your data

We use the collected information exclusively for the following purposes:

• Preparing the visa application forms required for your chosen visa and delivering them to you as a PDF to print and file yourself
• Providing step-by-step guidance on paying the embassy fee and filing your application
• Reading your uploaded documents to fill in your application and checking them against embassy requirements
• Having a case reviewer check your application before it is delivered to you
• Sending you one-time sign-in codes and updates about your application over WhatsApp
• Reusing documents stored in your vault on future applications for you and your family, so you do not have to upload them again
• Keeping our platform secure and diagnosing problems

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data storage and security

Your data is stored and processed using secure cloud infrastructure:

• Your data is stored in encrypted databases and storage hosted by trusted cloud infrastructure providers
• Uploaded documents are stored securely and are not publicly accessible. Access is restricted to you and to authorised staff working on your application, and every staff access is recorded
• All data is transmitted over encrypted connections (HTTPS)
• We regularly review our infrastructure and security practices to ensure your data is protected

4. Third-party data sharing

We share your data only with the following categories of third-party services, and only as necessary to provide the Service:

• Embassies and visa application centres: Niklo does not send your data to any embassy, consulate, or visa application centre. The completed application we prepare is delivered to you, and you submit it yourself. What you share with those bodies, and how they handle it, is governed by their own policies.
• Payment processors: Payment information is processed by our payment processor. We do not store your full card numbers.
• Messaging providers: Your WhatsApp number and name are used to send sign-in codes and application updates through the WhatsApp Business platform operated by Meta.
• AI and technology providers: We use third-party AI services to read your documents, fill in forms, and check your application. These providers process data under agreements that prohibit them from using your data for their own purposes, including to train their models.
• Cloud infrastructure providers: Our platform is hosted on third-party cloud infrastructure that processes data as part of securely hosting and operating the Service.

We do not share your data with any other third parties. We do not sell or rent your personal information.

5. Data retention

We retain your data for the following periods:

• Application data: Retained for the duration of your visa application process plus 12 months after completion
• Vault documents: Retained while your account is active so they can be reused on future applications. You can delete any document from your vault at any time.
• Account information: Retained as long as your account is active, plus 6 months after a deletion request to handle any pending matters
• Automated processing records: Retained for 12 months, then deleted
• Payment records: Retained for 6 years as required by Pakistani tax and commercial law

6. Your rights

Under applicable Pakistani law and our commitment to data privacy, you have the following rights:

• Right of access: You can request a copy of all personal data we hold about you.
• Right of correction: You can request correction of any inaccurate or incomplete personal data.
• Right of deletion: You can request deletion of your personal data, subject to legal retention requirements. We will delete your data within 30 days of a verified request.
• Right of portability: You can request your data in a structured, machine-readable format.
• Right to withdraw consent: You can withdraw consent for data processing at any time, though this may affect our ability to provide the Service.

To exercise any of these rights, contact us at support@niklo.ai. We will respond within 15 business days.

7. Security measures

We implement industry-standard security measures to protect your data:

• All data transmitted between you and our servers is encrypted
• Data stored in our systems is encrypted at rest
• Sign-in codes are stored only in hashed form and expire after a short time
• Access to production systems is restricted to authorised personnel
• Every time a member of staff views a document in your vault, the access is logged
• We conduct regular security reviews and monitor our systems for potential threats

While we take every reasonable precaution, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we will promptly notify affected users in the event of a data breach.

8. Cookies and tracking

We use a small set of cookies and similar technologies:

• Essential cookies: Your sign-in token and basic account details, so you stay signed in between visits. These are strictly necessary for the Service to function.
• Advertising measurement: Our public website uses the Meta Pixel to measure how well our advertising works and to reach people who have shown interest in Niklo. It sets a cookie and shares page views, sign-ups and similar events, along with your browser information, with Meta Platforms. Meta may combine this with data it holds about you and processes it under its own privacy policy. We do not share the contents of your visa application or your documents with Meta.

You can clear cookies at any time through your browser settings, and you can control how Meta uses this data through your Facebook or Instagram ad settings. Disabling essential cookies will sign you out and may prevent you from using the Service.

9. Children's privacy

Niklo is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@niklo.ai and we will promptly delete it. A parent or guardian may use the Service on behalf of a minor applicant, in which case the parent or guardian is responsible for the data provided.

10. Legal compliance

Niklo complies with the laws of Pakistan governing personal data and electronic transactions. This includes:

• Processing personal data only with your consent or as necessary to provide the Service you requested
• Implementing appropriate technical and organisational measures to protect personal data
• Notifying the relevant authorities and affected users in the event of a data breach, as required by law
• Ensuring that transfers of your data outside Pakistan, including to embassies and to our service providers, are limited to what is necessary to provide the Service and are protected by appropriate safeguards

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by WhatsApp, email, or a prominent notice on our website at least 14 days before they take effect. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes. We encourage you to review this page periodically.

12. Contact us

For privacy-related questions, data requests, or concerns, please contact us:

Email:

support@niklo.ai

Entity:

Deepo Solutions (Private) Limited

Address:

Islamabad, Pakistan

See also our Terms of Service and Refund Policy .