Privacy Policy

Last updated: October 2026

This policy explains what the TS Autofill browser extension and the https://connect.tsglobal.site website collect, why, and how it is handled. By using them you agree to what is described below.

1. What we collect

Account information

When you sign in with Google we receive and store your name, email address and profile picture from your Google account. We never receive or store your Google password. This is used only to identify your account and its balance.

Where your profile is used

A saved profile can be used to fill these five forms:

• indianvisa-bangladesh.nic.in — Indian visa application (form pages and document upload)
• pcc.police.gov.bd — Bangladesh Police Clearance application
• billpay.sonalibank.com.bd/nbrTravelTax — Bangladesh travel tax form
• passenger.blpa.gov.bd — Land-port passenger charge form
• indianvisaonline.gov.in/earrival — India e-Arrival card

The data is read from your own browser storage and typed into the form on your screen — it is not sent to us or to anyone else.

Document data

When you use the extraction feature, the passport image or PDF you choose is sent to Google's Gemini API so the text on it can be read. The extracted fields are returned to your browser and saved in your browser's local storage as a profile.

We do not store your passport images or the extracted document data on our servers. The image is not kept after processing, and the extracted fields stay on your own device. You can delete any saved profile from the extension at any time.

Photo editing and background removal

The photo editor (crop, rotate, adjust, erase, pen tool) runs entirely inside your browser. The applicant photo itself is never uploaded.

When you use the background-removal feature, the work also runs inside your browser using a model packaged with the extension. Only a one-way fingerprint (a SHA-256 hash) of the photo is sent to our server, so that the same photo is not charged twice. That fingerprint cannot be turned back into the photo or used to identify you.

CAPTCHA images (only if you turn it on)

The extension has optional "auto-solve CAPTCHA" switches, off by default. When you turn them on, the CAPTCHA image shown on the Indian visa website (first page and other pages) and on the India e-Arrival card is sent to our server, which forwards it to a CAPTCHA reading service and returns the text. The image is not stored, and it contains no personal information — only the distorted characters. Credits are deducted per solve.

Visa undertaking letters (medical and tourist)

On the medical / medical-attendant visa document page, the hospital invitation letter, the visa undertaking and the consent letter (for a minor) are created and stored only in your browser. On the tourist visa document page, the visa undertaking is created the same way from your saved profile. These letters are not uploaded to our server and are not sent to any third party — they are attached to the official form on your screen, or downloaded to your device.

Only a one-way fingerprint (a SHA-256 hash) is sent to our server so that the same letter is not charged twice — for medical letters, of the invitation letter and the applicant; for tourist letters, of the passport number and the selected High Commission. A fingerprint cannot be turned back into the original data.

Signatures

You can add the applicant's signature (and, for a minor's consent letter, the parents' signatures) to a letter. Cropping, resizing and background removal of the signature happen inside your browser, and the signature is saved only in your browser's local storage with the profile.

If you choose "Via mobile", the extension shows a QR code. When you scan it with your own phone and send a photo, that photo is uploaded to our server only so it can be passed to your computer. It is linked only to a random one-time code, not to your account, and is deleted as soon as the extension receives it, or automatically after 10 minutes if it is never collected. It is not used for anything else.

Visa website session (cookies)

The Indian visa website accepts only a limited number of applications per browser session. After you reach that website's final confirmation page, the next time you open a page of the same website the extension removes only that website's own session cookies and reloads the page once, so the next application starts in a fresh session — the same as closing and reopening the browser. Cookie values are not read, stored or sent anywhere, and no other website's cookies are touched.

Saved places (India reference)

If you save your own hotel or reference address inside the extension, that address is stored on our server (action place_save) so it is available on your other devices. You can edit or delete it at any time from the same window.

Usage and payment records

We record how many extractions you perform, the credits deducted (including charges for document reading, CAPTCHA solving, background removal and visa undertaking letters), coupons you redeem, and top-up requests you submit (amount, method, transaction ID). This is needed to run the credit system and to answer billing questions.

2. What we do not do

• We do not sell, rent or trade your information to anyone.
• We do not use your data for advertising or profiling.
• We do not read pages you visit other than the five websites listed above and our own website.
• We do not store the contents of your documents, photos, signatures or undertaking letters on our servers. A signature photo sent from your phone passes through our server only briefly, as described above.
• We do not collect health information. The medical visa letters and the hospital invitation letter are used only inside your browser to prepare the document.

3. Who else is involved

• Google Sign-In — used to sign you in. See Google's own privacy policy.
• Google Gemini API — reads the text on the passport image or PDF you upload for extraction. This happens only when you start an extraction.
• TrueCaptcha — reads CAPTCHA images, only when you enable auto-solve. Our server calls it; the extension never contacts it directly.

No other third party receives your data.

4. Where data is stored

Account, billing and saved-place records are stored on our server. Passport details and extracted document data are not stored on our server. Your document profiles (including the applicant photo, the passport PDF, signatures and any visa undertaking letters you generate) are stored only in your browser, using chrome.storage.local. Removing the extension removes those files from your device.

5. Security

Connections use HTTPS. Access to your account is protected by a private token that you can reset at any time from your dashboard. Only you and the site administrator can see your account records.

6. Your choices

• Delete any saved profile, photo, passport PDF, signature, undertaking letter or saved place from within the extension.
• Switch off auto-fill and auto-solve CAPTCHA at any time from the extension panel.
• Reset your access token from the dashboard.
• Ask us to delete your account and its records — write to us and it will be done.

7. Children

This service is meant for adults handling visa applications and is not directed at children. A minor's data may appear in a profile because the parent or guardian fills the minor's application — that data is handled the same way as any other applicant's data and is kept only in the user's own browser.

8. Changes

If this policy changes we will update this page and the date above. Continued use after a change means you accept the updated policy.

9. Contact

For any question about this policy, or to request deletion of your data, contact us through https://connect.tsglobal.site.