Privacy Policy

1. Overview

Travel Docs Express LLC, doing business as eGovRush ("eGovRush", "we", "us"), respects your privacy and is committed to protecting the personal information you share with us. This policy explains what we collect, how we use it, who we share it with, and the rights you have over your information.

This policy applies to information we collect on egovrush.com, through our applications, and through related services we provide. By using our services, you agree to this policy.

2. Information we collect

To process travel document applications on your behalf, we need to collect information directly from you and, in limited cases, from third parties.

From you, directly:

• Identity & contact information: name, date of birth, sex, place of birth, citizenship status, mailing and home addresses, phone, email.
• Government identifiers: Social Security Number (optional, encrypted), passport number, driver's license number, Alien Registration Number.
• Application content: answers to government form questions, employment history, travel history, criminal-history disclosures, biometric attestations.
• Documents: photos and scans of government-issued IDs, passport photos, proof of address, parental consent forms.
• Payment information: handled directly by Stripe; we never see your full card number. We retain the last 4 digits and card brand.
• Communications: messages, emails, and chat transcripts with our support team.

Automatically:

• IP address, browser type, device type, operating system, pages viewed, referring URL, time stamps.
• Email engagement: opens, clicks, bounces, complaints (via Resend webhooks).

From third parties (limited):

• Stripe — transaction confirmations, refund status.
• Government agencies — application status updates, KTN/PASSID issuance, appointment confirmations.

3. How we use your information

We use your information for the following purposes:

• To process and submit your travel document applications to the appropriate government agency.
• To validate your documents using AI vision technology (we use Anthropic Claude as a service provider; see Section 6).
• To send you email and SMS updates about your application status.
• To process payments and refunds via Stripe.
• To provide customer support and respond to your inquiries.
• To improve our service through aggregated analytics (we never sell or share individual data for advertising).
• To comply with legal obligations and respond to lawful government requests.
• To protect our service and customers from fraud and abuse.

4. Categories of personal information (California residents)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the following categories of personal information have been collected from California residents in the past 12 months:

Sources: directly from you, automatically through cookies/analytics, and from government agencies regarding application status only.

5. Business purposes for collection

We collect personal information for the following business and commercial purposes:

• Performing the services you've contracted us to provide (filing your government application).
• Detecting and preventing fraud and security incidents.
• Debugging, identifying and repairing errors in our service.
• Performing internal research for technological improvement.
• Quality control and verification of our services.
• Complying with legal obligations.

6. Third parties we share data with

We share personal information only with service providers who have contractual obligations to protect your data, and only as necessary to provide our service. We do not sell personal information to advertisers or data brokers.

Our current service providers:

• Supabase (database, authentication, document storage) — egovrush data is stored on their U.S. infrastructure.
• Stripe (payment processing) — they receive name, email, address, and card data; we never see your full card number.
• Resend (transactional email delivery) — they receive email address and message contents.
• Anthropic (AI document validation) — when our AI checks your uploaded documents, the document image is sent to Anthropic Claude. They do not retain or train on this data per their enterprise terms.
• Vercel (web hosting) — they receive standard web request logs.

Government agencies:

To complete your application, we transmit your personal information to the relevant government agency: U.S. Department of State (passport), TSA / UES contractor (PreCheck), U.S. Customs and Border Protection (Global Entry), or Alclear/CLEAR (CLEAR Plus). This is required for the service.

Legal requirements:

We may disclose information when required by law, subpoena, court order, or to protect rights, property, or safety.

7. Your California privacy rights

If you are a California resident, you have the following rights under CCPA/CPRA:

• Right to know — request a copy of the personal information we have collected about you in the past 12 months.
• Right to delete — request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to correct — request that we correct inaccurate personal information.
• Right to limit use of sensitive personal information — request that we limit our use of sensitive PI to that necessary for service provision.
• Right to opt out of "sale" or "sharing" — see Section 8.
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, visit our data request page or email privacy@egovrush.com. We will respond within 45 days; we may extend this once by an additional 45 days if reasonably necessary.

Verification: we may need to verify your identity before fulfilling a request — typically by matching information you provide against the information in your account.

Authorized agents: you may designate an authorized agent to make a request on your behalf. We will require written authorization and may require the agent to verify your identity directly.

9. Data security

We use industry-standard security measures to protect your information:

• TLS/HTTPS encryption for all data in transit.
• Encryption at rest for sensitive fields (SSN, government ID numbers).
• Document storage in private, access-controlled buckets.
• Multi-factor authentication for our admin accounts.
• Automated audit logging of all admin actions involving customer data.
• Annual security review and provider audits.

No system is 100% secure. If we ever experience a data breach affecting you, we will notify you in accordance with applicable law.

10. Data retention

We retain your information for as long as it is necessary to provide our service, comply with legal obligations, resolve disputes, and enforce our agreements:

• Application data: retained for 7 years to support audits and disputes, in line with industry standards for government-document services.
• Document uploads: retained for 90 days after application submission, then deleted from our systems.
• Payment records: retained for 7 years for tax and audit compliance.
• Email and support communications: retained for 3 years.
• Account data: retained until you request deletion or close your account.

11. Children's privacy

We do not knowingly collect personal information from children under 13. We do process applications for minor passports, but the application is submitted by the minor's parent or legal guardian, who provides all required information.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will notify you by email and post a notice on our website. The "Last updated" date at the top of this policy will be revised.

13. How to contact us

For questions about this policy or to exercise your privacy rights:

• Email: privacy@egovrush.com
• Web form: egovrush.com/data-deletion
• Mail: Travel Docs Express LLC, 4300 Biscayne Blvd, Suite 202, Miami, FL 33137

For California-specific requests, you can also use our dedicated data request form.