ZIPMI
Last Updated: September 2026
ZipVisa, Inc. (“ZipVisa,” “we,” “us,” or “our”) publishes this Privacy Policy to describe how we collect, use, and share personal information through the Zipmi platform (the “Platform”).
This Policy applies to: (a) individual nonimmigrant visa applicants, including B-1/B-2 visitor visa applicants, who use the Platform to prepare and submit their own visa applications (“Individual Users”); (b) H-2 visa workers (“Workers”); (c) employers certified by the U.S. Department of Labor as H-2 employers (“Employers”); and (d) agents engaged by Employers to facilitate the H-2 visa process (“Agents”). We are a U.S. company, and our Services are used by people in many countries. Sections 1 through 13 apply to all users of the Platform, wherever located. Sections 14 through 17 contain additional terms specific to Employers and Agents. Section 18 contains additional rights for California residents. Section 19 contains additional information for users located in the European Union, the United Kingdom, and the European Economic Area; Mexico; India; and, for everyone else located outside the United States, a general set of additional rights.
We collect the following types of information:
Emergency contact and reference information is used only for safety and verification purposes and is never used for marketing.
2.1 Necessary Purposes
We use your information as necessary to provide the Services, including for:
2.2 Marketing and Other Optional Purposes
Unless you opt out, we may use your name, contact information, preferred language, country, and the type of service you have used to send you information, offers, and promotions about ZipVisa products and services for you or your family, by email, SMS, WhatsApp, or in-app notification. You may opt out of these marketing communications at any time as described in Section 6.
With your consent, we may also use your information for:
For these purposes, we use only your name, contact information, preferred language, country, and the type of service you have used. You may withdraw this consent at any time as described in Section 6.
We may share your information with:
Where we upload hashed contact information (such as a hashed email address) to advertising partners to reach audiences with similar characteristics (“Hashed Audience Matching”), we do so only with your consent as described in Section 2.2, and you may opt out at any time as described in Section 6.
We do not sell your personal data for money. However, some of our advertising activities — including Hashed Audience Matching described above — may be considered a “sale” or “share” of personal information under certain U.S. state privacy laws, such as the California Consumer Privacy Act. See Section 18 for how to opt out of this activity.
When enabled, the Platform may monitor your location to coordinate interviews or travel, and track job site arrival or return travel for H-2 program compliance.
The Platform uses cookies to remember preferences, analyze activity, and optimize performance. You can manage cookie settings through your browser. Zipmi may not respond to “Do Not Track” browser signals. Where required by law, we honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information as described in Section 18.
You can:
You may opt out of marketing communications at any time, without affecting your ability to use the Services, by using the unsubscribe link in any marketing message, replying STOP to a text message, updating your account settings, or writing to info@zipmi.ai.
If you are located in the European Union, the United Kingdom, the European Economic Area, Mexico, India, or any other country outside the United States, you have additional rights described in Section 19, which supplements this Section for users in those jurisdictions.
If you are a California resident, you have additional rights described in Section 18.
We will not discriminate against you, deny you the Services, or charge you a different price for exercising any privacy right described in this Policy.
ZipVisa is a U.S. company, and our Services operate primarily from the United States. Wherever you are located, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country of residence.
Where we transfer personal data out of the European Union, the United Kingdom, or the European Economic Area, we do so under the European Commission's Standard Contractual Clauses (SCCs) or another data transfer mechanism recognized under applicable law. See Section 19.1 for additional information for users in these jurisdictions.
For users in other countries, your data is transferred to and processed in the United States on the legal basis described in the applicable country-specific subsection of Section 19 — typically that the transfer is necessary for the performance of our contract with you, or that you have consented to it. Section 19 describes additional rights available to users in certain specific countries.
We retain personal data as needed to provide the Services or comply with legal requirements. We implement industry-standard safeguards but cannot guarantee absolute security.
We retain marketing contact data only until you withdraw your consent, or until 18 months have passed since your last interaction with our marketing communications or the Platform, whichever occurs first, after which we will delete or de-identify that data.
Third-party vendors handle payments, email, and analytics under compliance requirements consistent with this Policy.
Our own accounts are limited to individuals 18 years of age or older; a person under 18 may not create an account or independently agree to our Terms of Service. A parent or legal guardian may, however, use the Platform to submit a visa application on behalf of their minor child, consistent with the Terms of Service governing applications submitted on behalf of another individual. In that case, we process the child's personal data — such as name, passport information, photograph, and other visa application data — only as necessary to prepare and submit that application, and the submitting parent or legal guardian represents that they have the legal authority to provide the child's information and to agree to this Policy on the child's behalf. We do not use a child's personal data for the voluntary purposes described in Section 2.2, including marketing. If we become aware that a child has created their own account or is using the Platform independently of a parent or legal guardian, we will take steps to delete that account and the associated data.
In the event of a merger, acquisition, or similar transaction, your data may transfer to the successor entity. We will notify you of any such transfer.
We will notify you of material updates to this Policy through the Platform or by email. If we introduce a new purpose for processing your personal data that requires your consent under applicable law, we will request that consent before processing your data for that new purpose.
Questions about this Policy may be directed to: info@zipmi.ai
Employers and Agents provide contact and identity information, including name, job title, business email address, phone number, and business affiliation, as well as certification, compliance, usage, and optional location data.
This information enables eligibility verification, job matching, worker communication, platform improvement, and legal compliance maintenance.
Data goes to job applicants, government agencies, service providers, and legal authorities as necessary. We do not sell employer or agent data to third parties.
Employers and Agents may access their accounts, request deletion (subject to regulations), and opt out of non-essential messages. They must provide accurate postings and ensure legal compliance.
This Section 18 applies to California residents and supplements the rest of this Policy, in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”).
18.1 Categories of Personal Information We Collect
In the preceding 12 months, we have collected the following categories of personal information, as defined by the CCPA:
18.2 Sensitive Personal Information and Your Right to Limit Its Use
We collect sensitive personal information, including Social Security numbers, passport numbers and other government identification numbers, precise geolocation, and immigration status information. We use this information only as reasonably necessary to provide the Services described in Section 2.1 (Necessary Purposes) and do not use it to infer characteristics about you. You have the right to limit our use of sensitive personal information to these purposes. Because we do not use sensitive personal information for any purpose beyond what is reasonably necessary to provide the Services, no additional action is required to exercise this right; you may still contact us at info@zipmi.ai with questions.
18.3 Sales and Sharing of Personal Information
We do not sell personal information for money. Likewise, when you or your Employer directs us to share your information with a third-party product or service partner described in Section 3 (such as a payment or paycard provider) so that you can use that partner’s product or service, that disclosure is made at your own direction for the purpose of interacting with that partner and is not a “sale” or “share” of your personal information under the CCPA. As described in Section 3, certain advertising activities (Hashed Audience Matching) may be considered a “sale” or “share” of personal information under the CCPA. You may opt out of this activity at any time by [Drafting note for ZipVisa: insert your “Your Privacy Choices” link or mechanism here] or by writing to info@zipmi.ai. We honor opt-out preference signals, including the Global Privacy Control, as described in Section 5.
18.4 Your California Rights
Subject to certain exceptions, California residents have the right to:
18.5 Exercising Your Rights
You may submit a request to exercise these rights by writing to info@zipmi.ai. We will verify your identity before responding, using a method reasonably calculated to match the sensitivity of the information requested, which may include confirming information already on file. You may designate an authorized agent to make a request on your behalf, subject to our ability to verify the agent's authority and your identity. We will respond within 45 days, subject to a possible 45-day extension where permitted by law. If we deny your request in whole or in part, you may appeal that decision by replying to our denial notice.
This Section 19 supplements the rest of this Policy for users located in the jurisdictions listed below. Where a conflict exists between this Section and the rest of this Policy, this Section controls, but only for users located in the applicable jurisdiction.
The H-2 visa program is available only to nationals of countries the U.S. Department of Homeland Security designates as eligible, a list DHS redetermines annually (countries have been added and removed in past cycles). India is not currently one of the DHS-designated H-2 eligible countries. Accordingly, Sections 19.2 and 19.3 below apply to Workers, Employers, and Agents — who are necessarily nationals of a DHS-designated H-2 eligible country — as well as to Individual Users from any country, while Section 19.4 (India) applies only to Individual Users of our B-1/B2 consumer product, since H-2 Workers, Employers, and Agents located in India are not currently part of the Platform's H-2 user base.
19.1 European Union, United Kingdom, and European Economic Area (GDPR)
This Section applies to individuals located in the European Union, the United Kingdom, and the European Economic Area, under the EU General Data Protection Regulation and the UK GDPR (together, “GDPR”).
Controller: ZipVisa, Inc. is the controller of your personal data for purposes of the GDPR.
Legal bases for processing: we process personal data for the necessary purposes described in Section 2.1 on the basis that it is necessary for the performance of a contract with you or to comply with a legal obligation. We process sensitive data, such as passport information and immigration status, on the basis of your explicit consent or as necessary for the establishment, exercise, or defense of legal claims. We process personal data for the marketing purposes described in Section 2.2 on the basis of our legitimate interest in informing you about relevant ZipVisa products and services, unless you opt out as described in Section 6, and we process personal data for satisfaction surveys and referral programs on the basis of your consent, which you may withdraw at any time as described in Section 6, without affecting the lawfulness of processing before withdrawal.
Cross-border transfers: because we are based in the United States, transfers of your personal data outside the EU/UK/EEA are made pursuant to the European Commission's Standard Contractual Clauses or another valid transfer mechanism recognized under the GDPR.
Your rights: you have the right to access, rectify, and erase your personal data; restrict or object to our processing of it (including for direct marketing); receive a portable copy of it; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority or, for UK users, the Information Commissioner's Office (ICO).
Contact: for GDPR-related requests, contact info@zipmi.ai.
19.2 Mexico (Aviso de Privacidad)
This Section is provided for users located in Mexico in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, or “LFPDPPP”).
Responsable del tratamiento de sus datos personales: ZipVisa, Inc., con domicilio en 1401 Pennsylvania Ave, STE 105, #1967, Wilmington, DE 19806, Estados Unidos, es responsable del tratamiento de sus datos personales conforme al presente aviso de privacidad.
Datos personales que se recaban: nombre, número de pasaporte, fotografía, fecha de nacimiento, nacionalidad, información de contacto, y datos relacionados con su solicitud de visa. Algunos de estos datos, como el número de pasaporte y el estatus migratorio, podrán considerarse datos personales sensibles.
Finalidades necesarias: sus datos se utilizan para la preparación y presentación de solicitudes de visa, la coordinación con empleadores certificados, y el cumplimiento de obligaciones legales, sin las cuales no podríamos prestarle el Servicio.
Finalidades voluntarias: con su consentimiento, podremos utilizar sus datos de contacto para enviarle información, ofertas o promociones sobre los productos y servicios de ZipVisa, para encuestas de satisfacción, y para programas de referidos.
Mecanismo para negar u oponerse al uso de sus datos para finalidades voluntarias: usted podrá negarse u oponerse en cualquier momento mediante el enlace de cancelación de suscripción, respondiendo STOP a un mensaje de texto, en la configuración de su cuenta, o escribiendo a info@zipmi.ai.
Derechos ARCO: usted tiene derecho a acceder, rectificar, cancelar u oponerse al tratamiento de sus datos personales (derechos ARCO), así como a revocar el consentimiento que, en su caso, nos haya otorgado. Para ejercer estos derechos, escriba a info@zipmi.ai indicando su nombre, el derecho que desea ejercer, y documentación que acredite su identidad.
Transferencias internacionales: sus datos personales serán transferidos, almacenados y tratados en los Estados Unidos, donde ZipVisa, Inc. tiene su domicilio. Dicha transferencia es necesaria para el cumplimiento de la relación jurídica entre usted y ZipVisa (la prestación del Servicio conforme al presente aviso) y, en su caso, se realiza también con su consentimiento, de conformidad con el artículo 36 de la LFPDPPP.
Cambios al presente aviso: cualquier modificación a este aviso de privacidad le será informada a través de la Plataforma o por correo electrónico.
19.3 Other International Users
If you are located outside the United States in a country not specifically addressed above, we extend to you the same core rights described in Section 6 of this Policy: the right to access your information, request correction of inaccurate information, request deletion of your information, object to or opt out of marketing, and receive a response to your request without discrimination, consistent with applicable local data protection law where one exists. Your personal data is transferred to and processed in the United States because that transfer is necessary for the performance of our contract with you or because you have consented to it. You may exercise these rights, or ask questions about how a specific country's law applies to you, by writing to info@zipmi.ai.
19.4 India — Additional Requirements
This Section applies to Individual Users of our B-1/B2 consumer product located in India (“Data Principals”) under India's Digital Personal Data Protection Act, 2023 and its implementing rules; it does not apply to Workers, Employers, or Agents, since India is not currently designated by DHS as an H-2 eligible country. For your general rights — access, correction, deletion, and objection to marketing — see Section 19.3. In addition, before requesting your consent for a voluntary purpose described in Section 2.2, we will provide an itemized notice describing the personal data to be processed and the purpose of that processing, in clear and plain language.
Children: our own accounts are limited to individuals 18 years of age or older. Where a parent or legal guardian submits an application on behalf of a child (an individual under 18) under India's Digital Personal Data Protection Act, 2023, we obtain verifiable consent from the parent or legal guardian, in the manner prescribed under the Act and its rules, before processing the child's personal data. We process a child's personal data only as necessary to prepare and submit that application, and we do not track or monitor a child's behavior or serve targeted advertising directed at a child, consistent with Section 9 of the Act.
