Last updated: October 2026
This policy explains what the TS Autofill browser extension and the
https://connect.tsglobal.site website collect, why, and how it is handled.
By using them you agree to what is described below.
1. What we collect
Account information
When you sign in with Google we receive and store your name, email address
and profile picture from your Google account. We never receive or store
your Google password. This is used only to identify your account and its balance.
Where your profile is used
A saved profile can be used to fill these five forms:
- indianvisa-bangladesh.nic.in — Indian visa application (form pages and document upload)
- pcc.police.gov.bd — Bangladesh Police Clearance application
- billpay.sonalibank.com.bd/nbrTravelTax — Bangladesh travel tax form
- passenger.blpa.gov.bd — Land-port passenger charge form
- indianvisaonline.gov.in/earrival — India e-Arrival card
The data is read from your own browser storage and typed into the form on your
screen — it is not sent to us or to anyone else.
Document data
When you use the extraction feature, the passport image or PDF you choose is sent
to Google's Gemini API so the text on it can be read. The extracted fields
are returned to your browser and saved in your browser's local storage as a profile.
We do not store your passport images or the extracted document data on our
servers. The image is not kept after processing, and the extracted fields stay
on your own device. You can delete any saved profile from the extension at any time.
Photo editing and background removal
The photo editor (crop, rotate, adjust, erase, pen tool) runs entirely inside
your browser. The applicant photo itself is never uploaded.
When you use the background-removal feature, the work also runs inside your
browser using a model packaged with the extension. Only a one-way
fingerprint (a SHA-256 hash) of the photo is sent to our server, so that the
same photo is not charged twice. That fingerprint cannot be turned back into
the photo or used to identify you.
CAPTCHA images (only if you turn it on)
The extension has optional "auto-solve CAPTCHA" switches, off by default.
When you turn them on, the CAPTCHA image shown on the Indian visa website
(first page and other pages) and on the India e-Arrival card is sent to our
server, which forwards it to a CAPTCHA reading service and returns the text.
The image is not stored, and it contains no personal information — only the
distorted characters. Credits are deducted per solve.
Visa undertaking letters (medical and tourist)
On the medical / medical-attendant visa document page, the hospital invitation
letter, the visa undertaking and the consent letter (for a minor) are created
and stored only in your browser. On the tourist visa document page, the
visa undertaking is created the same way from your saved profile. These letters
are not uploaded to our server and are not sent to any third party — they are
attached to the official form on your screen, or downloaded to your device.
Only a one-way fingerprint (a SHA-256 hash) is sent to our server so that the
same letter is not charged twice — for medical letters, of the invitation letter
and the applicant; for tourist letters, of the passport number and the selected
High Commission. A fingerprint cannot be turned back into the original data.
Signatures
You can add the applicant's signature (and, for a minor's consent letter, the
parents' signatures) to a letter. Cropping, resizing and background removal of
the signature happen inside your browser, and the signature is saved only
in your browser's local storage with the profile.
If you choose "Via mobile", the extension shows a QR code. When you scan
it with your own phone and send a photo, that photo is uploaded to our server
only so it can be passed to your computer. It is linked only to a random
one-time code, not to your account, and is deleted as soon as the extension
receives it, or automatically after 10 minutes if it is never collected. It
is not used for anything else.
Visa website session (cookies)
The Indian visa website accepts only a limited number of applications per
browser session. After you reach that website's final confirmation page, the
next time you open a page of the same website the extension removes
only that website's own session cookies and reloads the page once, so the
next application starts in a fresh session — the same as closing and reopening
the browser. Cookie values are not read, stored or sent anywhere, and no other
website's cookies are touched.
Saved places (India reference)
If you save your own hotel or reference address inside the extension, that
address is stored on our server (action place_save) so it is
available on your other devices. You can edit or delete it at any time from
the same window.
Usage and payment records
We record how many extractions you perform, the credits deducted (including
charges for document reading, CAPTCHA solving, background removal and visa
undertaking letters), coupons you redeem, and top-up requests you submit (amount, method,
transaction ID). This is needed to run the credit system and to answer billing
questions.
2. What we do not do
- We do not sell, rent or trade your information to anyone.
- We do not use your data for advertising or profiling.
- We do not read pages you visit other than the five websites listed above
and our own website.
- We do not store the contents of your documents, photos, signatures or
undertaking letters on our servers. A signature photo sent from your phone
passes through our server only briefly, as described above.
- We do not collect health information. The medical visa letters and the
hospital invitation letter are used only inside your browser to prepare
the document.
3. Who else is involved
- Google Sign-In — used to sign you in. See Google's own privacy policy.
- Google Gemini API — reads the text on the passport image or PDF you
upload for extraction. This happens only when you start an extraction.
- TrueCaptcha — reads CAPTCHA images, only when you enable auto-solve.
Our server calls it; the extension never contacts it directly.
No other third party receives your data.
4. Where data is stored
Account, billing and saved-place records are stored on our server. Passport
details and extracted document data are not stored on our server. Your document
profiles (including the applicant photo, the passport PDF, signatures and any
visa undertaking letters you generate) are stored only in your browser, using
chrome.storage.local. Removing the extension removes those files
from your device.
5. Security
Connections use HTTPS. Access to your account is protected by a private token that
you can reset at any time from your dashboard. Only you and the site administrator
can see your account records.
6. Your choices
- Delete any saved profile, photo, passport PDF, signature, undertaking letter
or saved place from within the extension.
- Switch off auto-fill and auto-solve CAPTCHA at any time from the extension panel.
- Reset your access token from the dashboard.
- Ask us to delete your account and its records — write to us and it will be done.
7. Children
This service is meant for adults handling visa applications and is not directed
at children. A minor's data may appear in a profile because the parent or
guardian fills the minor's application — that data is handled the same way as
any other applicant's data and is kept only in the user's own browser.
8. Changes
If this policy changes we will update this page and the date above. Continued use
after a change means you accept the updated policy.
9. Contact
For any question about this policy, or to request deletion of your data, contact us
through https://connect.tsglobal.site.
