Privacy Policy

Last updated: August 10, 2026 · Effective: August 10, 2026

1. Who We Are

Migrate Mate is a platform that helps users find visa-sponsored job opportunities in the United States. We provide a searchable database of verified roles, an E-3 visa filing service, and an AI-powered candidate search product that connects job seekers with recruiters and employers.

Migrate Mate is the "data controller" (under the GDPR) and the "business" (under the California Consumer Privacy Act, as amended by the CPRA) responsible for the personal information described in this policy. For privacy questions or requests, contact privacy@migratemate.co or use our privacy request form.

2. What Data We Collect

Depending on how you use Migrate Mate, we may collect the following personal data:

Identity and Contact Data: Name, email address, phone number, WhatsApp number, date of birth, gender, country of citizenship, and country, state, and city of residence.
Profile and Career Data: Your resume (including the parsed text of your resume), work experience, education history, skills, desired job title and function, years of experience, LinkedIn profile URL and imported LinkedIn data, links you add to your profile, GitHub username and public contribution activity, current visa status, visa eligibility details, and work-location preferences.
Account Information: Login credentials (we use passwordless email codes) and usage data for accessing the platform.
Payment Information: Processed securely through a third-party payment processor. We do not store your full card details.
E-3 Visa Service Data: If you use our E-3 visa filing service, we collect the additional information described in Section 3.
Communication Data: Messages or feedback you provide, including your onboarding form data and support correspondence.
Tracking and Analytics Data: Information collected via cookies, tracking pixels, session replay, and third-party tools to monitor engagement across our site (e.g. pages viewed, browsing behavior, device and approximate location data, heatmaps, and recordings of how you interact with pages).

3. E-3 Visa Filing Service

If you purchase our E-3 visa filing service, or complete our E-3 pre-screening questionnaire without going on to purchase, we collect and process the information required to assess your eligibility and, for customers, to prepare and file your visa application on your behalf. This includes:

Eligibility Data: Your answers to our pre-screening and eligibility questionnaires.
Identity and Travel Documents: Your passport (including scans and passport number), prior visas, degree certificates, photographs, and other documents you upload. We use automated tools (including AI) to read and extract data from these documents.
Visa Application Data: The information required for the DS-160 and Labor Condition Application (LCA) forms, which may include your address history, travel history, family information (including names of parents, spouse, or partner), education and employment history, social media identifiers, and answers to the security and background questions required by the U.S. government.
Employment Details: Your job offer, job title, duties, salary, and worksite details, and contact information for your sponsoring employer and its signing representative.
Scheduling and Case Data: Interview booking details, government receipt numbers, case correspondence, and delivery address for your documents.
Government Portal Credentials: With your authorization, the credentials and security answers needed to schedule your visa interview on the official U.S. visa scheduling portal. These are stored encrypted and used solely to act on your behalf.

E-3 service data is used exclusively to provide the service you requested. We never sell E-3 visa service data, and we share it only with service providers that help us prepare and file your application, with your sponsoring employer where required for your application, with government agencies as part of the filing process, and, where you ask us to refer you to another immigration provider, with that provider.

Referrals. When we are not able to take on new E-3 clients, we may offer to pass your questionnaire answers to another immigration provider so you do not have to complete their intake from scratch. This only happens if you ask us to, by choosing it on the screen where we offer it. We do not include anything you told us about criminal history or visa overstays. The provider receives your details as an independent controller and handles them under its own privacy policy, so if you later want them deleted you will need to contact that provider directly as well as us.

4. AI Recruiter Search & Candidate Profiles

Migrate Mate offers an AI-powered candidate search product that lets recruiters and employers discover job seekers. If you create a candidate profile (including through onboarding or by applying to a job through Migrate Mate), the following applies:

Your profile is searchable by recruiters. Recruiters and employers using our platform can find and view your profile, including your career history, education, skills, visa status and eligibility, and location.
Contact details can be shared with recruiters. Recruiters may access and export your name, email address, phone number, and LinkedIn URL so they can contact you about opportunities.
AI processing of your profile. We use third-party AI providers to process your profile and resume — for example, to generate the search representations ("embeddings") that power matching, and to produce summaries of your experience and explanations of why you match a recruiter's search.
Recruiter activity about you. We store recruiters' search queries, notes, pipeline statuses (e.g. shortlisted, contacted), and dismissals relating to candidate profiles.

Making your profile available to recruiters and employers may constitute a "sale" or "sharing" of personal information under California law. You can opt out at any time — see Section 9 (Sale and Sharing of Personal Information).

5. Applying for Jobs Through Migrate Mate

When you apply for a job you found on Migrate Mate:

Applications are completed on the employer's site. Clicking "Apply" redirects you to the employer or job board hosting the listing. Any information you submit there is governed by that party's privacy policy, not ours — we do not receive or forward your application.
We log your activity on our platform. We record which jobs you view, save, apply to, and dismiss (including any feedback you give), to improve your recommendations and our platform.
Some job pages collect a profile before you apply. On certain job listings, we ask you to complete a candidate profile (including your contact details, visa status, work history, and resume) before showing you the external application link. Submitting that form creates a Migrate Mate account for you, imports publicly available data from your LinkedIn profile to enrich it, and adds your profile to our candidate search product described in Section 4.

6. How We Use Your Data

We process your data for the following purposes:

Provide access to our searchable job database.
Process payments and subscriptions.
Prepare and file visa applications for E-3 service customers.
Operate our candidate search product, including matching your profile to recruiter searches.
Troubleshoot technical issues and improve the performance of our platform.
Send service updates and important notifications.
Send promotional or marketing communications if you have opted in. This may include messages to the phone or WhatsApp number you provide. You can opt out of marketing messages at any time — use the unsubscribe link in an email, or contact us at support@migratemate.co. Message and data rates may apply.
Track ad performance and user engagement using third-party advertising and analytics services to improve marketing campaigns and user experience.
Detect, prevent, and investigate fraud and abuse.
Comply with legal obligations.

7. AI and Automated Processing

We use artificial intelligence from third-party providers in parts of our platform, including: matching candidate profiles to recruiter searches, summarizing candidate experience, parsing resumes and LinkedIn data, reading data from documents you upload for the E-3 service, and drafting visa application forms and support letters for review.

These providers process your data as our service providers and are not permitted to use it for their own purposes. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing — hiring decisions are made by employers, and visa filings are reviewed by humans before submission.

8. Legal Basis for Processing Your Data

Where the GDPR applies, we process your data under the following legal bases:

Contractual Necessity: To provide access to our database, operate the E-3 filing service, and process payments.
Consent: For sending marketing communications, using non-essential cookies for analytics and ads, and making your candidate profile available to recruiters or selling it to third parties (see Section 9).
Legitimate Interest: To improve our platform, track ad performance, prevent fraud, and ensure the security of your data.
Legal Obligation: To comply with applicable laws, including record-keeping and government filing requirements.

9. Sale and Sharing of Personal Information

We may sell or share certain categories of your personal information with third parties, including recruiters, employers, and staffing and recruiting companies:

Identifiers: Name, email address, phone number, and LinkedIn URL.
Professional and Employment Information: Work history, education, skills, desired role, years of experience, resume contents, and work-location preferences.
Inferences: Profile summaries and match information derived from the above.
Visa and Work-Authorization Information: Your current visa status and visa eligibility, where included in your candidate profile. This is "sensitive personal information" under California law, and you may limit its use — see Section 12.

We never sell: E-3 visa service data (including visa application forms, uploaded documents, and anything described in Section 3); passport or other government identification numbers; account or government portal credentials; payment information; precise geolocation; data about family members or other non-users; or the personal information of anyone we know to be under 16 years of age.

We also "share" (as defined by California law) identifiers and internet activity data with third-party advertising networks and partners for cross-context behavioral advertising.

You can opt out of the sale and sharing of your personal information at any time by submitting our Do Not Sell or Share My Personal Information form or emailing privacy@migratemate.co. We also honor opt-out preference signals such as the Global Privacy Control (GPC).

10. Who We Share Your Data With

In addition to the sale and sharing described in Section 9, we share your data with the following categories of parties. Most of them process your data on our behalf under contractual confidentiality and data protection obligations, and the specific providers we use may change as our platform evolves. The exception is referral partners, who receive your details as independent controllers, as described below:

Payment Processors: Third-party payment providers, for secure payment processing.
Hosting and Infrastructure: Cloud hosting, database, security, and search providers, to host and operate our website, database, and search.
AI Providers: Third-party artificial intelligence providers, for the processing described in Section 7.
Email and Communications: Email and messaging providers, to deliver login codes, service emails, marketing you have opted into, and text and WhatsApp messages.
Analytics and Advertising: Analytics providers (including session replay) and advertising networks, to track usage and ad performance.
Government Agencies: For E-3 service customers, U.S. government agencies as required to file your visa application.
Referral Partners: Where we are not able to take you on as a client and you ask us to refer you, the immigration provider you asked us to contact. They receive your details as an independent controller and use them under their own privacy policy, not ours. This only happens at your request (see Section 3).
Legal: Authorities, courts, or advisers where required by law or to protect our rights, and a successor entity in the event of a merger or acquisition.

International Data Transfers: Migrate Mate is a U.S.-based company. Your data is hosted and processed in the United States, the United Kingdom, and other countries where we, our service providers, and any referral partner you ask us to contact operate, which includes Australia. Where personal data is transferred out of the European Economic Area or the United Kingdom (for example, to our service providers in the United States), we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or transfer to recipients certified under approved frameworks like the EU-U.S. Data Privacy Framework and its UK Extension.

11. Your Rights

Depending on where you live, you have some or all of the following rights:

Access / Know: Request a copy of the personal data we hold about you and information about how we use and disclose it.
Delete: Request that we delete your personal data.
Correct: Request that we correct inaccurate personal data.
Portability: Receive your data in a portable format.
Opt Out of Sale/Sharing: Opt out of the sale or sharing of your personal information (see Section 9).
Withdraw Consent: Withdraw consent for processing based on consent at any time.
Complain: File a complaint with your local data protection authority.

To exercise any of these rights, submit our privacy request form or email privacy@migratemate.co. We will verify your identity (typically by confirming control of the email address on your account) before fulfilling access, deletion, or correction requests, and we will respond within the timeframes required by law. We will never discriminate against you for exercising your privacy rights.

12. California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the rest of this policy.

Categories of personal information we collect (and have collected in the preceding 12 months): identifiers (name, email, phone, online identifiers); customer records (payment information); characteristics of protected classifications (citizenship, immigration status, date of birth, gender); commercial information (subscription and purchase history); internet or network activity (browsing and usage data, session replay); geolocation data (approximate location from IP; city/state you provide); professional or employment-related information (work history, resume, skills); education information; audio/visual information (photos and documents you upload for the E-3 service); sensitive personal information (see below); and inferences drawn from the above. The sources, purposes, and recipients for each category are described in Sections 2–10.

Sensitive personal information. We collect sensitive personal information including citizenship and immigration status, government identification numbers (e.g. passport numbers for E-3 customers), account log-in credentials, and the contents of visa application forms. With one exception, we use sensitive personal information only for the purposes permitted by the CCPA: providing the services you request, security, and legal compliance. Referring you to another immigration provider at your request (see Section 3) is one of those permitted purposes. The exception is visa and work-authorization status: where your candidate profile includes it, it can be disclosed to recruiters and employers as described in Section 9, and you have the right to limit that use by submitting a Limit the Use of My Sensitive Personal Information request.

Sale and sharing. We sell and share the categories of personal information described in Section 9 to the categories of third parties described there. You have the right to opt out via the Do Not Sell or Share My Personal Information form, and we honor Global Privacy Control signals as a valid opt-out request. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Exercising your rights. California residents may exercise the rights in Section 11 via the privacy request form or by emailing privacy@migratemate.co. You may designate an authorized agent to submit requests on your behalf; we will require proof of the agent's authority and may verify your identity directly. We will respond to verifiable requests within 45 days (extendable by a further 45 days where reasonably necessary, with notice).

13. Other US State Privacy Rights

If you live in Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you may have the following rights with respect to your personal data, subject to the exceptions in your state's law:

Confirm whether we are processing your personal data and access it.
Correct inaccuracies in your personal data.
Delete your personal data.
Obtain a copy of the personal data you provided to us in a portable format.
Opt out of the sale of your personal data and of its use for targeted advertising.

We do not use your personal data for profiling in furtherance of decisions that produce legal or similarly significant effects. Where your state's law requires consent to process sensitive personal data (such as citizenship or immigration status), we process it only to provide the services you request or with your consent.

To exercise these rights, submit our privacy request form or email privacy@migratemate.co. We will verify your identity before fulfilling access, correction, or deletion requests, and we honor Global Privacy Control signals as an opt-out of sale and targeted advertising. Nevada residents may opt out of the sale of their personal information by emailing us a "Nevada Opt-Out of Sale Request."

Right to appeal. If we decline to act on your request, you may appeal by replying to our decision or emailing privacy@migratemate.co with the subject "Privacy Request Appeal." We will respond to appeals within the timeframe required by your state's law. If we deny your appeal, you may submit a complaint to your state Attorney General — for example: Colorado, Connecticut, Texas, Virginia, or your own state's Attorney General office.

14. Children

Migrate Mate is not directed at children. You must be at least 16 years old to use the platform. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us personal information, contact privacy@migratemate.co and we will delete it.

15. Data Retention

We retain your data only as long as necessary for the purposes outlined in this Privacy Policy or to comply with legal obligations. In general: account and profile data is retained while your account is active and deleted or de-identified after you request deletion; E-3 case records are retained as needed to support your application and meet legal and immigration record-keeping requirements; and payment records are retained as required by tax and accounting law.

Where you asked us to refer you to another immigration provider (see Section 3), that provider holds its own copy of the details we sent. Deleting your data here does not delete theirs, so contact them directly if you want it removed.

16. Cookies & Tracking

We use cookies and other tracking technologies to:

Improve your user experience.
Track usage for analytics and performance insights.
Deliver personalized ads.

Cookie Categories:

Essential Cookies: Required for the operation of our website.
Analytics Cookies: Set by our third-party analytics providers to understand user behavior and improve our platform.
Marketing Cookies: Set by third-party advertising networks to deliver targeted advertisements and track ad performance.

Marketing cookies and pixels involve "sharing" data with advertising partners as described in Section 9; you can opt out via the privacy request form or a Global Privacy Control signal, and EU/UK visitors are asked for cookie consent via our consent banner.

17. Data Security

We take the following measures to protect your data:

Encryption of data in transit (SSL/TLS) and encryption of especially sensitive fields (such as document numbers and portal credentials) at rest.
Periodic security reviews and access controls.
Restricted access to personal data, limited to authorized personnel only.

Data Breach Notification:

In the unlikely event of a data breach, we will notify the relevant authorities within the timeframes required by applicable law (for example, within 72 hours under the GDPR) and will notify affected users without undue delay.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We review this policy at least once every 12 months.

Notification of Changes:

If we make significant changes, we will notify you via email or through a prominent notice on our website at least 14 days before the changes take effect.

19. Contact Us

For privacy questions or to exercise your rights, use our privacy request form or email privacy@migratemate.co. For general support, email support@migratemate.co.