YourVisaSite Autofill — privacy
The extension is a tool for migration professionals. It fills Australian government portal pages from your firm's matter records, inside your own signed-in browser session. This page explains exactly what it sends, what it never sends, and how to turn features off. Last updated 5 July 2026.
What the extension receives
- Your matter data, on request. When you choose a matter and click “Fill current page”, the extension fetches that matter's details from YourVisaSite over a paired connection you set up from your firm settings. Every fetch is recorded in your firm's audit log.
- A short-lived pairing token. Pairing uses a one-time code and creates a token that expires after 12 hours and is erased when you close the browser. Your YourVisaSite password is never entered into the extension.
What the extension sends
- Form layout, so autofill can improve. When you record a page — or, if auto-learn is on, when the extension sees a government form page it has no map for — it sends the page's structure: field labels, field names, and the options in dropdown lists. That is all.
- Fill receipts. After a fill, the extension logs which fields were filled and a one-way digital fingerprint (hash) of each value — so your firm has an audit record — but never the value itself.
- Breakage signals. If a mapped page stops matching (a field went missing, the page changed shape), the extension reports the field name and page identity so the map can be fixed. No personal data is included.
What it never collects
- Anything you or your client type into a government website.
- Passwords or password fields, on any site.
- Screenshots or page recordings.
- Payment pages — capture is blocked on any page that looks like a payment or card-entry step, both in the extension and again on our servers.
- Your government sign-in. The extension never logs in for you, never submits an application, and stops before every submit and payment button. You do those yourself.
Auto-learn and its off switch
Auto-learn helps keep form maps current: when the extension sees a government form page it has no map for (or a page that has changed), it sends the page's field layout as described above. It is explained the first time you pair, and you can turn it off at any time with the toggle in the extension's side panel. Turning it off never affects filling.
Where data lives
Everything the extension sends goes only to yourvisasite.com. Data is stored in Australia (Sydney). We never sell data, never share it with third parties for their own use, and never send personal information to AI services.
Questions or requests
Contact us via the contact & complaints page. Our full privacy policy covers export and deletion requests.