YourVisaSite Companion · version 0.7.0
YourVisaSite Companion privacy notice
This is the privacy notice for the YourVisaSite Companion, the Chrome extension available to practitioners an Admin has invited. It is the exact text packaged with the extension and named in its Chrome Web Store listing. The YourVisaSite privacy notice covers the rest of the service.
The extension's purpose is to show reviewed YourVisaSite facts beside an ImmiAccount draft for an invited practitioner and to copy one chosen value to the clipboard for the practitioner to paste. With the optional page reading on, it also shows which recognised fields on the open page are empty, match the saved detail or differ from it. It never enters, changes or submits anything on ImmiAccount. It is independent of the Australian Government and the Department of Home Affairs.
It requests sidebar, script-injection, clipboard-write, storage and alarms permissions. Storage holds only the value-free outcome delivery queue described below; alarms drives a thirty-second heartbeat that checks snapshot expiry and delivery, with no data of its own. Optional persistent host access is limited to https://online.immi.gov.au/elp/*, the application form path. The code reads only supported application pages while the sidebar has a live authorised connection. It has no cookies, browsing history, network-interception, clipboard-read or all-sites permission.
YourVisaSite sends a reviewed, expiring factual snapshot to the installed extension selected by the practitioner. It remains in memory. To show whether a recognised field is empty, matches or differs, the extension gives the page reading code one-way hashes (SHA-256) of the saved values for that page only. The reading code hashes each field's contents the same way, compares the hashes on the page and returns only a category for each field (empty, matches, matches except capitalisation, differs or cannot be checked). Field contents never leave the page, and nothing about them is sent to YourVisaSite. No government credentials, MFA, existing government form answers, document files or signed document URLs are sent to YourVisaSite by page inspection.
YourVisaSite records limited descriptions of page structure, each use authorisation (with hashes of the values, never the values), reported copy outcomes and explicit mapping assessments. These records are used for access auditing, operational counts and human-reviewed mapping improvement. They are not sold or used for advertising. Client answers and document contents are not used to train a model. No external AI endpoint is called by this build.
The only data the extension keeps on the device is a small delivery queue of reported copy outcomes: operation identifiers, the names of the fields used and a categorical result (copied or failed; earlier versions also recorded filled or skipped), with no values. It exists so that an outcome the sidebar already produced reaches YourVisaSite's audit record even if the connection closes or Chrome restarts first. Each entry stops being retried once YourVisaSite confirms it or definitively refuses it. Up to thirty completed results remain for the delivery display. Queued and completed entries expire seven days after creation; the next running heartbeat or extension startup removes expired entries. Removing the extension deletes the queue. Upgrading from YourVisaSite Assistant removes its old browser pairing tokens and caches; the practitioner must connect again.
Verify documents opens the YourVisaSite application, which checks current permissions and any required security verification. Opening a document is not certification of authenticity, completeness or immigration eligibility.
An administrator can revoke access. The extension can be paused, disconnected or removed, and Chrome's site permission can be withdrawn from the sidebar or from Chrome's extension settings. Clipboard content already copied is controlled by the device; disconnecting cannot remove copies already made outside the extension. Account privacy requests use YourVisaSite's existing processes. Declared professional/security metadata retention is described in the application's data inventory; withdrawing access does not silently erase audit history.
The practitioner uses their own ImmiAccount and credentials and remains responsible for every answer. Under clause 4.5 of the ImmiAccount terms and conditions, software automation techniques or solutions must not be used when using ImmiAccount; under clause 4.6, misuse may be referred to the Office of the Migration Agents Registration Authority (OMARA). The extension therefore never types into a field, ticks a box, presses Next or moves between pages. By default it reads no page at all (copy-only mode): the practitioner copies one saved value at a time from the sidebar and pastes it. Reading the open page to suggest which saved detail to copy next is an optional setting, off until the practitioner turns it on. The Department of Home Affairs does not endorse this extension.
This notice describes version 0.7.0 of the YourVisaSite Companion as packaged from the reviewed source. The same text is published at https://yourvisasite.com/extension/privacy and is the privacy notice named in the Chrome Web Store listing. Access remains invitation-only: an Admin grants each practitioner an expiring invitation and can withdraw it at any time.