YourVisaSite Assistant — privacy

The extension is a reference tool for migration professionals. It shows your firm's matter records in a side panel so you can copy each value into a government form yourself — it has no access to government websites at all. This page explains exactly what it sends, what it never sends, and how to turn features off. Last updated 14 July 2026.

Install from the Chrome Web Store ↗

What the extension can reach

One website: www.yourvisasite.com — your own account. The public extension requests no permissions for any other site and contains no scripts that run on web pages. It cannot see, read, or change anything on a government website (or any other website). You can verify this yourself on the extension's details page in your browser.

What the extension receives

Your matter data, on request. When you pick a client, the side panel fetches that matter's details from YourVisaSite over a paired connection you set up from your firm settings. Every fetch is recorded in your firm's audit log. The last-viewed matter is kept briefly in the browser's session memory so a connection blip doesn't blank the panel; it is erased when you close the browser.
A pairing token. Pairing uses a one-time code and creates a working token that expires after 12 hours and is erased when you close the browser, plus a renewable pairing key stored on your own device that keeps the pairing active for up to 7 days so you don't re-enter a code every session. Both are cleared when you unpair or when your firm removes your access, and your YourVisaSite password is never entered into the extension.

What the extension sends

Copy receipts. When you copy a value (or reveal a sensitive one), the extension logs which field it was and a one-way digital fingerprint (hash) of the value — so your firm has an audit record of what was used — but never the value itself.
Outcomes you type in. After you lodge personally, you can record the TRN, a decision, or a VEVO check result in the panel — that goes to your own matter, with a file note, exactly as if you had typed it in your workspace.

What it never collects

Anything from any web page — it has no ability to read pages at all.
Anything you or your client type into a government website.
Passwords, on any site. Your government sign-in stays yours.
Screenshots or page recordings.
Your lodgement. The extension never logs in for you, never fills a form, and never submits an application. You do those yourself.

Sensitive answers stay covered

Character and health answers in a matter are collapsed in the panel until you choose to reveal them, and each reveal is written to your firm's audit log the same way copies are.

Where data lives

Everything the extension sends goes only to yourvisasite.com. Data is stored in Australia (Sydney). We never sell data, never share it with third parties for their own use, and never send personal information to AI services.

Our internal mapping tools (not in the public extension)

Separately from the public extension, our own team uses an internal build to study the structure of government form pages — field labels, field names and dropdown options, never anything typed, never screenshots, never payment pages — using our own accounts on draft applications. That tooling is how we keep the panel's section ordering accurate. It is never distributed to practitioners and is not part of the Web Store extension.