DocuFlag is a document compliance assistant for immigration professionals, not an immigration advisory service. Consulate requirements may change. Always verify with official sources.
DocuFlag

Terms of Service

Last updated: March 2026

1. Nature of service

DocuFlag is a document compliance assistant designed for immigration professionals. It helps check client documents against published consulate requirements. It is a technology service, not an immigration advisory service, legal service, or visa application submission platform.

DocuFlag does not assess visa eligibility, predict visa outcomes, or provide immigration or legal advice of any kind. All visa decisions are made solely by consular authorities.

2. Professional use

This service is designed for use by visa agencies, immigration consultants, and other professionals. By using DocuFlag, you represent that you have the professional qualifications and regulatory authorizations required in your jurisdiction to assist clients with visa applications.

You are solely responsible for the accuracy and completeness of any advice or assistance you provide to your clients, including any information derived from DocuFlag.

3. AI limitations

DocuFlag uses artificial intelligence to analyze documents and generate observations. AI systems can make mistakes, misread documents, produce inaccurate observations, or miss relevant information. You must independently verify all observations before relying on them for client cases.

Requirements databases may not reflect the most current consulate policies. Always verify with official consulate sources.

4. Subscriptions and billing

Paid plans are billed monthly. Each plan includes a fixed number of AI case analysis credits per month. Unused credits do not roll over to the following month. Credits reset on each billing cycle.

You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. No refunds are issued for partial months.

5. Right of withdrawal

Under the EU Consumer Rights Directive (2011/83/EU), you have a 14-day right of withdrawal from the date of your subscription. If you have used the service (consumed analysis credits) during this period, the right of withdrawal is waived to the extent of the service already provided.

6. Limitation of liability

To the maximum extent permitted by law, DocuFlag's total liability for any claim arising from or related to the service is limited to the fees you have paid in the 12 months preceding the claim.

DocuFlag is not liable for any loss arising from: reliance on AI-generated observations without independent verification, changes in consulate requirements not yet reflected in our database, visa application outcomes, or actions taken by consular authorities.

7. Data protection

Your use of DocuFlag is also governed by our Privacy Policy and Data Processing Agreement. By using the service, you acknowledge that you have read and understood our data handling practices, including the EU-hosted infrastructure and in-memory document processing described therein.

8. Sub-processors

DocuFlag uses OpenAI (EU endpoint) as a sub-processor for AI-powered document analysis. Documents are sent from your browser through our EU-hosted analysis server to OpenAI's EU infrastructure. Documents are processed in-memory and never stored. OpenAI operates with zero data retention under a Data Processing Agreement. See our Privacy Policy and Data Protection Impact Assessment for details.

9. Client consent obligation

As the data controller for your clients' personal data, you are responsible for obtaining appropriate consent from visa applicants before uploading their documents to DocuFlag. For passport photographs that may contain biometric data, explicit consent under GDPR Article 9(2)(a) is required. DocuFlag provides a suggested consent template on our Security page, but you are solely responsible for compliance with applicable data protection laws in your jurisdiction.

10. Optional E2EE cloud storage

Professional, Agency, and Enterprise plans may enable optional end-to-end encrypted (E2EE) cloud storage on a per-case basis. This feature is disabled by default.

  • Case data is encrypted client-side (AES-256-GCM) before upload to AWS S3 (EU region). DocuFlag servers store only encrypted blobs and encrypted key material, and cannot decrypt your data.
  • Encrypted blobs are retained for a maximum of 180 days, after which they are automatically deleted.
  • You are solely responsible for the security of your encryption passphrase and recovery key (256-bit, provided at setup).
  • If both your passphrase and recovery key are lost, your encrypted cloud data is permanently and irrecoverably lost. DocuFlag cannot recover it.
  • Cloud storage is a convenience feature and does not replace your obligation to maintain independent backups of client data as required by your professional obligations.
  • On plan downgrade below Professional, no new uploads are permitted, but existing encrypted blobs remain downloadable until their 180-day TTL expires.

11. Dispute resolution

For EU/EEA users: the European Commission provides an Online Dispute Resolution platform at ec.europa.eu/odr.

12. Governing law

These terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

13. Changes to these terms

We may update these terms from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.