Privacy Policy

1. Introduction

This Privacy Policy explains how esta-usa.online ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our ESTA application assistance service. We are a private company, not a government agency, and we handle the passport and personal data you provide with the same care required for travel-related documents.

2. Data we collect

To prepare and submit your ESTA application, we collect:

• Identity information: full name, date and place of birth, gender, national ID number (if provided)
• Passport details: passport number, issuing country, issue and expiry dates, and a scan/photo of your passport photo page
• A selfie photograph for identity verification
• Contact details: home address, phone number, and email address
• Family information: your parents' names
• Employment information
• U.S. travel and emergency contact details
• Answers to the CBP eligibility questions
• Payment information, processed by our payment provider, Stripe (we do not store full card numbers)
• Technical data such as IP address, browser type, and usage data for security and analytics purposes

3. How we use your data

We use your data solely to prepare, validate, and submit your ESTA application to CBP; to communicate with you about your application status; to process payment; to provide customer support; and to comply with our legal and record-keeping obligations. We do not sell your personal data.

4. Sharing your data

We share the data necessary to complete your application with U.S. Customs and Border Protection, as required to submit an ESTA application. We also share limited data with trusted service providers who support our operations, including payment processing (Stripe), secure document storage, and email delivery — each bound by appropriate confidentiality and data-protection obligations. We do not share your data with third parties for their own marketing purposes.

5. Data retention

We retain your application data for as long as necessary to provide our service, support your ESTA validity period (up to 2 years), and meet our legal, accounting, and fraud-prevention obligations. Passport images and selfies are retained only as long as needed to complete and support your application and are deleted or anonymized thereafter, in line with our internal retention schedule.

6. Data security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (SSL/TLS), restricted access controls, and secure payment processing through Stripe. No method of transmission or storage is completely secure, but we work to protect your information to a high standard.

7. Your rights (including GDPR)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar protections, you have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us via our Contact page. We will respond within the timeframe required by applicable law.

8. Cookies

We use cookies and similar technologies to operate our website and remember your application progress. See our Cookie Policy for details.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

10. Contact us

For any privacy-related questions or requests, please reach out via our Contact page.