Legal
Privacy notice
Last updated 27 July 2026
This notice explains what ILR Path stores about you and why. It is written to be read, not to be survived, so it is short and specific.
The data controller is Ehsan Ghavidel. If you have a question or want your data deleted, email ehsan.ghavidel@gmail.com.
What we store
- Your email address. It is how you sign in and the only way we can reach you.
- Your answers to the assessment. Route, endorsement details, relationship to the main applicant, and the knowledge-requirement answers.
- Your visa history. The periods you enter — type of visa, start and end dates, and any note you add.
- Your travel history. Departure and return dates, the country and the reason you give for each trip. Not the city — the rules turn on dates alone.
- Your progress. Which documents you have marked as held, needed or not relevant, and which stages you have marked as done.
- Assessment snapshots. A copy of each result, with the version of the rules that produced it, so an assessment stays explainable after the rules change.
- Payment records. Whether a case has paid, and the Stripe reference for it.
- Administrator access records. If an administrator opens your case, that is written to an append-only log with their identity and the time.
What we never store
- Your documents. There is no upload feature anywhere in this product and no file storage attached to it. Your passports, payslips, letters and certificates never reach us. The downloadable pack contains only files this tool generated from the data above.
- Passwords. Sign-in is by emailed link. There is no password to store, leak or reuse.
- Card details.Payment happens on Stripe’s own pages. We never see or hold your card number.
- Passport or BRP numbers, or national insurance numbers. Nothing asks for them, so please do not type them into free-text boxes.
The drafting assistant, specifically
If you use the letter-drafting feature, some of your case data leaves our systems and goes to a language-model provider. This is the only feature that does that, and it only runs when you ask it to.
What is sent is limited by design:
- The established facts of your case — your route, and only those requirements the rules engine has already resolved. Unresolved matters are sent as an explicit list of things the letter must not assert.
- Whatever you type into the context box. This is free text and it is sent verbatim. Do not put anything there you would not want to send to a third party.
Your raw questionnaire answers, your trip list and your email address are not sent. The provider is Anthropic, or OpenRouter where that is configured. Neither is asked to train on your data.
Who else receives your data
We use these processors, and no others. Each one gets only what its job requires.
| Processor | Purpose | What it receives |
|---|---|---|
| Supabase | Database hosting and sign-in emails | Everything stored about your case, and your email address |
| Vercel | Application hosting | Standard request data such as IP address and browser type |
| Stripe | Payment processing | Your email address and payment details, which you give to Stripe directly |
| Anthropic (or OpenRouter) | Drafting letters, only when you use that feature | The established facts of your case and any context you type into the drafting box |
We do not sell your data, share it with advertisers, or use it for any purpose other than running this service for you. Some of these processors operate outside the UK, under the transfer safeguards in their own terms.
Who inside the service can see it
Access is enforced by the database itself, not only by the application. Every table carries a rule that limits rows to the account that owns them, so a bug in a page cannot expose someone else’s case.
Administrators can open a case to help with a support request. Every such access is recorded in a log that administrators can add to but cannot edit or delete — including the administrator it records.
Cookies
One cookie, holding your sign-in session. There is no analytics, no advertising and no third-party tracking on this site, which is why there is no cookie banner asking you to accept any.
Videos
Some stages carry a short walkthrough hosted on YouTube. Until you press play, nothing is loaded from YouTube or Google — the still and the play button are drawn by us, and no request leaves for them. That is deliberate, so the paragraph above stays true for anyone who simply reads the page.
Pressing play loads the player from youtube-nocookie.com, Google’s privacy-enhanced host. From that moment Google can see that you watched, and may set storage in your browser under their own terms. It is your choice to make, and not making it costs you nothing: every video sits alongside the gov.uk source it explains.
How long we keep it
For as long as your account exists, because the point of the product is that you can come back to your case months later and find it as you left it.
Ask us to delete your account and we will remove your case data — answers, visa periods, trips, checklist, assessments — within 30 days. Two things survive: payment records, which we must keep for tax purposes, and administrator access log entries, which would be worthless as a safeguard if they could be erased. Neither contains your case data.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of what we hold about you;
- correct anything inaccurate;
- delete your data, subject to the two exceptions above;
- restrict or object to how we use it;
- provide it in a portable form.
Email ehsan.ghavidel@gmail.com and we will respond within one month. If you are unhappy with the response you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If this notice changes materially we will say so on this page and update the date at the top. The date reflects substantive changes only, not edits to wording.