Legal
Privacy Policy
Last updated: October 13, 2026
NomadPacket is a small independent tool for assembling D8 visa documents (see the Terms of Service for details on the operating entity). This policy explains what data NomadPacket collects, why, and who it's shared with. The short version: this product handles your financial and immigration paperwork, so data is treated as sensitive by default, shared with as few third parties as the Service requires to function, and never sold.
1. What we collect
- Account information: your email address, obtained via Google sign-in. NomadPacket does not see or store your Google password.
- Questionnaire answers: everything you enter to generate your packet — name, nationality, employment and income details, family/dependents information, accommodation and travel plans, and similar details required to prepare your D8 visa documents.
- Generated documents: the letters, income summary, and pre-filled visa form NomadPacket produces from your answers.
- Payment records: that a payment was made, its status, and a reference id from our payment processor. NomadPacket does not receive or store your full card number — that's handled entirely by our payment processor, Dodo Payments.
- Session analytics: PostHog records coarse page categories (landing, questionnaire, etc.) and funnel milestones such as questionnaire progress and purchases. It does not record form inputs, questionnaire answers, application IDs, or generated document content. Session recordings are masked (all form inputs redacted).
- Marketing analytics: on public marketing and resource pages only, Meta Pixel may collect page-view and advertising-measurement data if enabled in the deployment configuration. It is not loaded on authenticated questionnaire or application pages and is not sent your questionnaire answers or generated document content.
2. Why we collect it
Solely to run the Service: to generate your documents accurately, to let you sign in and return to an in-progress application, to process payment for your packet, and to send you the transactional emails the Service depends on (e.g. letting you know your packet is ready). We don't use your questionnaire answers or generated document content for advertising, and we don't run third-party analytics or ad-tracking scripts against document content.
3. Who we share it with
NomadPacket relies on a small number of service providers to operate, each receiving only what they need to do their specific job:
- Google — authentication (sign-in only; NomadPacket only receives your email address from Google, nothing else).
- Dodo Payments — payment processing.
- Resend — sending transactional emails (e.g. packet-ready notifications).
- Vercel — application hosting, database hosting, and file storage for your generated documents.
- PostHog — product analytics, only when enabled in the deployment configuration. It receives sanitized page categories and coarse funnel events; session replay and automatic click or form tracking are disabled.
- Meta — marketing measurement on selected public pages, only when the optional Meta Pixel is enabled.
We do not sell your data, and we do not share your questionnaire answers or generated documents with Meta, PostHog, or any party beyond what's listed above.
4. How long we keep it
Generated documents (your letters, income summary, and pre-filled form) are automatically deleted 30 days after generation. Re-generating your packet resets that window.
[RETENTION PERIOD FOR ACCOUNT AND QUESTIONNAIRE-ANSWER DATA — TO BE FINALIZED] — how long we retain your account, questionnaire answers, and payment records after your application is complete is still being finalized. This section will be updated with a specific policy before this is treated as final; until then, contact us using the details below if you'd like your data deleted sooner.
5. Security
Your questionnaire answers and generated documents are stored in access-controlled infrastructure — the underlying database and document storage are not publicly accessible, and generated documents specifically are stored privately and only ever served through an authenticated, entitlement-checked request. We rely on our infrastructure providers' own encryption and security practices; no method of storage or transmission is perfectly secure, and we can't guarantee absolute security.
6. Your choices
You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data, by emailing us at the address below. We'll respond and act on reasonable requests promptly.
7. Changes to this policy
This policy may be updated as the Service changes. Material changes will update the "Last updated" date above.
8. Contact
Questions about this policy, or requests regarding your data, can be sent to hello@nomadpacket.app.
This tool assembles documents based on publicly available Portuguese consulate and AIMA requirements. It does not provide legal advice and cannot guarantee visa approval — no service can. Requirements vary by consulate and may change; always confirm current requirements with your nearest Portuguese consulate or an immigration lawyer, particularly if your situation involves a criminal record, prior visa refusals, or unusual income sources.