Privacy Policy

Product Scope

MyF1Status is an educational, planning, organization, and readiness product for users age 18 or older. It is not legal advice and does not determine immigration status, legal eligibility, compliance, employment authorization, admissibility, or guaranteed outcomes.

Information We Collect

We collect account identifiers and email addresses, name, country, university, degree information, STEM-degree information where applicable, immigration/status/stage information, I-20 and program dates, passport and visa expiration dates, CPT dates, OPT and STEM OPT EAD dates, H-1B-related planning information where collected, employment history and employer information, Life Events / Change & Guidance information, readiness/checklist states, follow-up tasks, document metadata, feedback/support information, and limited email-delivery, operational, and security records.

The current product does not require passport numbers, visa numbers, Social Security numbers, or SEVIS numbers.

Authentication

Authentication is provided through our current authentication infrastructure, including email/password authentication and optional Google authentication. Application code does not store users' plaintext passwords.

Google Drive

Connecting Google Drive is optional. When you use connected document tools, uploaded file bytes reside in the connected user's Google Drive appDataFolder. MyF1Status stores associated metadata and connection information, which can include connected Google email, encrypted connector information, connection and revocation status, file identifiers, file names, MIME types, and related metadata.

Disconnecting Google Drive or deleting a MyF1Status account does not guarantee deletion of files that remain in the user's Google account. Use of Google user data is limited to providing the user-facing connected functionality.

Service Providers

MyF1Status currently uses Lovable for application hosting, build/runtime support, OAuth integration, email-related infrastructure, and error reporting; Supabase for authentication and database services; Google and Google Drive for optional Google authentication and connected document functionality; PostHog for website and product analytics that help us understand how people use the site and features and improve the service; application and transactional email infrastructure for account, operational, and support communications; and Stripe for preserved historical billing/subscription relationships. New paid subscription purchases are disabled during the Free Public Beta.

The current implementation does not include behavioral advertising or cross-site profiling. The current PostHog integration is configured not to intentionally send user-entered immigration or profile form contents to PostHog.

Browser Storage

The current browser implementation uses localStorage for authentication/session persistence and certain interface preferences. Website and product analytics may use technical analytics identifiers. We do not currently use advertising tracking cookies.

Tracking and Do Not Track

MyF1Status does not currently use the application for behavioral advertising or cross-site profiling, and does not currently track users' online activities over time across unrelated third-party websites for behavioral advertising. Because MyF1Status does not currently engage in that cross-site behavioral tracking, it does not currently take a separate action in response to browser Do Not Track signals. MyF1Status does not knowingly permit third parties to use the service to collect personal information about users' activities across unrelated websites for behavioral advertising.

Communications

We may send account, authentication, transactional, operational, security, and support-related emails. Future product deadline-reminder communications are separate. Product deadline-reminder sending is currently disabled and signup does not automatically opt users into reminder emails.

Retention and Deletion

Users can request account deletion by emailing support@myf1status.com. Identity verification may be required. Deleting an auth user has been verified to cascade core MyF1Status user-owned application records, but some operational, email, security, and history records may remain. Third-party providers may retain information according to their own practices, and Google Drive files are not guaranteed to be automatically deleted by MyF1Status account deletion.

MyF1Status does not promise instantaneous or universal deletion from every system.

Security and User Choices

We use technical and organizational measures intended to protect information. Users can update many profile and planning fields through Settings and may contact support@myf1status.com for privacy, correction, or deletion questions.

Policy Updates

New material policy versions may require renewed acknowledgement before authenticated app use. Formatting or typo fixes may not require renewed acknowledgement unless the policy version is intentionally changed.