Privacy Policy — Oversite Tracker

Last updated: July 3, 2026

Oversite Technologies, LLC (“we,” “us,” or “our”) operates the Oversite Tracker application (the “Service”). This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over your information. By using Oversite Tracker you agree to the practices described in this policy.

1. Data We Collect

We collect only the data necessary to provide the Service. Specifically, we may collect:

Account information: your name, email address, password (hashed), and role (petitioner, beneficiary, or attorney).
USCIS case data: receipt numbers you enter and the case status information returned by the official USCIS API on your behalf.
Usage data: device type, operating system, app version, IP address, pages or features accessed, and session duration — collected automatically for diagnostics and service improvement.
Communication data: messages or support requests you send us.
Payment data: subscriptions are billed and processed by Google Play (on Android) or the App Store (on iOS). We never receive or store your card number or full billing details.

We do not collect geolocation data, medical information, genetic or family health history, financial account numbers, or government-issued identification numbers beyond what you voluntarily provide in support requests.

2. How We Use Your Data

We use your data solely to operate and improve the Service:

To create and manage your account and authenticate your identity.
To retrieve USCIS case status on your behalf using the official USCIS Case Status API.
To send you push notifications and email alerts when your case status changes.
To provide customer support and respond to your inquiries.
To detect, prevent, and address technical issues, fraud, or abuse.
To improve the Service through aggregated, anonymized usage analytics.

3. Data Sharing and Third Parties

We do not sell your personal data to any third party, for profit or any other monetary transaction, under any circumstances.

We share data only with the following service providers, strictly to operate the Service:

Railway / PostgreSQL — cloud database hosting. Bound by Railway’s Data Processing Agreement.
Google Play Billing / Apple App Store — subscription payment processing. See the Google Privacy Policy and Apple Privacy Policy.
SendGrid (Twilio) — transactional email. Bound by Twilio’s Data Protection Addendum.
Expo / Apple / Google — push notification delivery for mobile alerts.
USCIS — we query the official USCIS Case Status API using only the receipt numbers you provide. No personal account information is transmitted to USCIS.

All third-party service providers are contractually required to use your data only as directed by us and to comply with this Privacy Policy. All third parties are bound by the terms and conditions of this Privacy Policy with respect to your data. Third-party use or re-disclosure of your information — including de-identified, anonymized, or pseudonymized data — for any purpose beyond operating the Service on our behalf is prohibited without your active consent.

We do not share data with marketers, data brokers, or advertisers for commercial purposes.

We may disclose information if required by law or in response to valid legal process.

4. Your Data-Sharing Choices and Risks

Using the Service requires us to query the USCIS API with your receipt number. You may choose not to provide one, but the core case-tracking functionality will not be available. You may opt out of email and push notifications in your account settings at any time.

Because Oversite Tracker processes only immigration receipt numbers — not genetic, medical, family history, or financial data — sharing your case data through the Service does not create material risks to third parties. The main impact of sharing is that a co-user you invite (e.g., a petitioner or beneficiary) will also see your case status updates.

5. Data Retention

We retain your account and case data for as long as your account is active. If your account is dormant (no login for 12 consecutive months), we will send an email notice and permanently delete your account and all associated data within 30 days of that notice unless you log in to reactivate.

Aggregated, anonymized usage statistics that cannot be linked to any individual may be retained indefinitely for product improvement.

6. Your Right to Delete Your Data

You have the right to permanently delete your account and all personal data at any time. To do so:

In-app: Settings → Account → Delete Account. Deletion is immediate and permanent.
By email: Send a “Data Deletion Request” to help@oversitetechnologies.com. We will complete deletion within 30 days and confirm by email.

After deletion, your data is removed from all active systems. Residual copies in automated backups are purged within 90 days per our backup rotation schedule.

7. Closing Your Account

You may close your account at any time via Settings → Account → Delete Account, or by emailing help@oversitetechnologies.com. Closing your account permanently deletes all personal data as described in Section 6.

8. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users by email within 72 hours of becoming aware of the breach (or as soon as reasonably practicable). The notification will describe: the nature of the breach, the categories of data affected, steps we have taken to address it, and any actions you should take to protect yourself.

9. Transfer of Ownership

If Oversite Technologies undergoes a merger, acquisition, or sale of substantially all its assets, we will notify you by email and post a prominent notice on this page at least 30 days before any data transfer occurs. You will have the choice to export your data or request permanent deletion before any transfer takes place. We will notify you of ownership changes as they occur. Any acquiring entity must honor this Privacy Policy or obtain your active consent before applying different data practices.

10. Data Security

All data is encrypted in transit (TLS 1.2 or higher) and at rest. Authentication uses hashed passwords (bcrypt) and signed JWT tokens. We conduct regular security reviews and follow industry best practices. If you suspect unauthorized access, contact us immediately at help@oversitetechnologies.com.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request a copy of the personal information we have collected about you in the past 12 months.
Right to Delete: Request permanent deletion of your personal information (see Section 6).
Right to Opt Out of Sale: We do not sell personal information. There is nothing to opt out of.
Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA right.

To exercise your CCPA rights, email help@oversitetechnologies.com with the subject “CCPA Request.” We will respond within 45 days.

12. Children’s Privacy

Oversite Tracker is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have done so, we will delete that data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display an in-app notice, including a plain-language summary of what changed. Material changes will not apply to your account until you have actively reviewed and accepted the updated policy through an affirmative in-app confirmation. Continued use alone is not treated as consent. If you do not accept the updated policy, you may delete your account before the changes take effect.

14. Contact Us

Privacy questions: help@oversitetechnologies.com

Oversite Technologies, LLC — United States