Where your case data actually lives.
ImmiFlo RFE is a browser-based web app: it necessarily stores your uploaded files server-side to work at all — there is no local device to keep them on. Here is exactly what that means.
Your files are stored, in the US
There is no local device to keep files on — the files themselves have to live somewhere for the app to work.
Uploaded files are used only to extract text
The web app has no access to a local case folder, so notice letters and filing documents you upload are sent over an encrypted connection to our servers in the US, where they are used only to extract their text.
Only extracted text is stored — not the original file
Once the text is extracted, the original file is not kept. We store the extracted text, plus the file name, size, and page count, to produce your analysis and let you check it against the original wording on your case page. This is a different data model from the desktop app.
Retained for your case, deletable any time
Case content (including extracted text) stays available for the life of your case, capped at 90 days of inactivity, matching our general storage retention policy. Deleting a case from the app removes it from our storage — you don't need to email us.
Web: what we store, server-side
| Case record | Applicant name, case type/stage — the case record itself |
| Text from your uploads | Text extracted from the files you upload, plus file name, size, and page count — not the original file itself |
| Cached AI analysis | Cached structured output from RFE parse/diff/plan/response, so reopening a case doesn’t require re-running AI |
| Purchase records | What you bought, keyed by case_key |
| Feature usage log | case_key + which paid feature was used — used for refund eligibility, not case content |
Web: what we don't store
- ✓The original files you upload — discarded once their text is extracted
- ✓Your payment card details (handled entirely by Stripe)
- ✓AI provider training on your documents — we don’t opt in to training on your data
- ✓Anything beyond what’s listed in the table on the left
Unlike the desktop app, the web app does store the text extracted from your uploads, file names, and case content such as the applicant name — that's what makes it work without a local install. The original files themselves are not kept once their text is extracted. Delete a case in the app to remove it from our storage, any time.
Who else touches your data, and why
A vendor's SOC 2 certification is not the same as ours. We list it here because it's a real, verifiable signal about the infrastructure we build on — not a substitute for our own compliance work.
ImmiFlo itself has not obtained SOC 2 Type II certification. We rely on infrastructure providers who are already SOC 2 Type II certified (see above), but that does not itself make ImmiFlo certified.
ImmiFlo is not a law firm and does not provide legal advice. See our Terms of Service and Privacy Policy for the complete legal terms.
← Back to ImmiFlo