Privacy policy

nomadaze.com is operated by BitUnion L.L.C-FZ, a company registered in the United Arab Emirates (licence number 2529770.01), whose registered address is Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E. We are the data controller for the personal data described here.

For any privacy question, or to exercise the rights below, email [email protected].

Reading visa and country pages requires no account and no sign-in. We do not ask for personal data to browse, and we do not sell or share data with data brokers or advertisers.

Two things still happen automatically when you load a page:

• Analytics. We use PostHog to count page views and understand which pages are useful. This processes your IP address and basic device and browser information, and PostHog is hosted in the United States by default.
• Maps. The interactive globe and maps load tiles from Mapbox. Doing so reveals your IP address to Mapbox, which is unavoidable when loading map imagery from their servers.

If you subscribe to the newsletter we collect your email address and pass it to Beehiiv, which stores it and sends the emails. We use it only to send visa updates. Every email includes an unsubscribe link, and unsubscribing removes you from the list.

An eligibility report is generated from information you choose to give us about your situation. Depending on what you fill in, that can include your email address, your nationality or nationalities, your country of residence, your age, your highest level of education, your work and passive income and where they come from, your savings, your family situation, and any notes you add.

This is the most sensitive data we handle, so here is exactly where it goes:

• Your answers are attached to a checkout with Polar, our payment provider and merchant of record, and are stored by Polar alongside the resulting order.
• Once payment succeeds, the answers are passed to a private automated workflow running on GitHub infrastructure, where they are written to a file for processing.
• The report itself is written by an automated system built on Claude (an AI model provided by Anthropic), which reads your answers and assesses them against our visa data.
• The finished report is emailed to you via Resend, our transactional email provider.

Because a report is produced by an automated system, it is a research document and not a decision about you: it does not grant, refuse, or affect any legal status, and no government sees it. If you would rather a human assessed your situation, use an immigration adviser instead — and you can ask us for a human review of anything a report says.

Card details never reach us. Payment is taken by Polar, and we receive confirmation that an order was paid, not your card number.

A subscription is keyed to your email address, which is held by Polar along with your subscription status. We do not run a user database or store passwords.

Signing in works by magic link: you enter your email, and if it has an active subscription we email you a sign-in link via Resend. Following it sets a cookie named nv_reality_session, which contains your email address and an expiry date, cryptographically signed so it cannot be altered. It lasts 30 days, after which you sign in again. It is strictly necessary for the subscription to work, and it is not used for tracking or advertising.

Emailing us means we hold your email address and whatever you write, for as long as needed to deal with your message and keep a record of the correspondence.

These are all the third parties involved, and what each one does:

• Polar — payments, orders, and subscription status (merchant of record).
• GitHub — runs the private workflow that produces eligibility reports.
• Anthropic — provides Claude, which generates eligibility report content.
• Resend — sends transactional email (sign-in links, reports).
• Beehiiv — stores newsletter subscribers and sends the newsletter.
• PostHog — website analytics.
• Mapbox — map and globe imagery.

These providers are located outside the UAE, mainly in the United States and the European Union, so using this site involves transferring your data internationally. Where data protected by the GDPR or UK GDPR is transferred, we rely on the providers' standard contractual clauses or equivalent safeguards.

• Newsletter subscriptions: until you unsubscribe.
• Sign-in sessions: 30 days from sign-in.
• Order and payment records: 7 years, to meet UAE tax and accounting record-keeping requirements. These records cover what was bought and when, not the answers you gave.
• Eligibility report answers: 90 days from purchase, held in the payment and workflow systems described above, then deleted. You can ask us to delete them sooner at any time.

We extend the following rights to everyone who uses the site, wherever you live, and they apply in addition to any rights you have under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, the GDPR, or the UK GDPR:

• Ask what personal data we hold about you, and get a copy of it.
• Have inaccurate data corrected.
• Have your data deleted.
• Receive your data in a portable format, or have it sent to someone else.
• Object to processing, or ask us to restrict it.
• Withdraw consent — for example by unsubscribing — without affecting past processing.

Email [email protected] and we will respond within 30 days. If you are in the EEA or UK and think we have handled your data badly, you can also complain to your national data protection authority.

This site is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.

If this policy changes materially we will update the date at the top of this page. Continuing to use the site after a change means the updated policy applies. See also our terms of service.