What we do with your details.

• We collect what we need to prepare and send your DV entry, and nothing for advertising.
• Your form is saved on our server as you fill it in, so you don’t lose it.
• What reaches our server is stored encrypted, on a server we run ourselves.
• Your passport scan and entry photos are deleted once your confirmation number comes back.
• We never sell your details, never use them for ads, and never use them to train AI.
• There are no analytics or tracking scripts on this site.
• Write to [email protected] and we’ll delete your account and everything in it.

“DVcompass”, “we” and “us” mean the team that runs dvcompass.com. We are an independent service, not the US government, and not lawyers.

When you sign in with Google: your name, email address and Google’s account id for you. We don’t receive your Google password, contacts or anything else in your Google account.

While you fill in the form: each step is saved on our server as you go. Signed in, it’s saved to your account with your photos, so you can carry on from any device. Signed out, it’s saved without photos and without an account; if the same person fills the form again, we combine the two so we hold one copy, not several.

When you ask us to submit your entry for you: the details the official DV entry form asks for. For you, that’s your name, sex, date and place of birth, country of eligibility, address, phone, email, country of residence, marital status, education, and passport number, country and expiry. For your spouse and children, it’s their names, sex, and dates and places of birth. We also receive a photo of each person and a scan of your passport.

We also keep a record of your consent to submit: the wording you agreed to, the name you typed, the time, your IP address and your browser’s user agent. We keep a one-way fingerprint of your name, date and country of birth and DV year, so we can stop a second entry, which would disqualify you. We keep the confirmation number and a screenshot of the official confirmation page.

When you save a photo to your account: the photo, its label (such as “Me” or “Spouse”) and its size.

When you book an expert call: your name, email, phone or WhatsApp number, the time you chose and any note you add.

When you use the contact form: your name, email, topic, message and IP address.

When you tell us about your plans (for example, that you’ve already entered this year): your answer. If you choose to add them, also your confirmation number, family name and birth year.

When you pay: you pay by scanning a QR code with eSewa or Khalti. We record what you bought, the amount, the wallet you chose, the QR code you were shown, and the transaction ID if you give it to us. Your wallet login and balance stay with your wallet: we never see them.

Logs: like any website, our server records requests (IP address, time, page, browser) to keep the site working and secure. We also log each email we send you: which email it was, when, and whether it was delivered.

• Checking a photo happens on your device; the photo checker doesn’t send it to us.
• The free photo fix sends the photo to our server, fixes it and sends it straight back without keeping it, unless you save it to your account.
• The Vault and the case-number tool keep what you type on your device; we never receive it.

• To prepare, check and submit your DV entry on the official site when you ask us to, and to show you the result.
• To stop duplicate entries, which would get you disqualified.
• To run expert calls, answer your messages and give you what you paid for.
• To send emails about your account and orders, such as a welcome email, booking confirmations and replies to you.
• To keep the site secure and working, and to prevent abuse and fraud.
• To meet legal, tax and accounting obligations.

We don’t sell your information. We don’t use it for advertising, and we don’t use it to train AI models. We don’t send marketing emails without asking you first.

Only these, and only what each one needs:

• The US Department of State. When you ask us to submit your entry, we send your entry details, photos and passport information to the official E-DV website on your behalf. From then on, the Department’s own privacy rules apply to what it holds.
• Google, to sign you in.
• Brevo, which delivers our emails. It receives your name, email address and the email we send you.
• Cloudflare, which carries traffic to our site and protects it from attacks. Your requests pass through it on the way to us.
• eSewa and Khalti, when you pay with them. Your payment goes to the account of the person named on the QR code, who works with us; they see your payment as they would any transfer to their account.
• Our email provider, which hosts our own inbox. Messages you send us are stored there.

We share information with others only if the law requires it, to protect someone’s safety, or with your permission. If DVcompass were ever sold or merged, your information would only move under this policy, and we’d tell you first.

• Passport scan and entry photos: deleted as soon as your confirmation number comes back. They are also deleted when an unpaid entry is replaced by a newer one.
• After submitting: we keep your name, confirmation number, the confirmation screenshot, your consent record and payment record. That lets you check your result with us, lets us show that you asked us to submit, and lets us meet accounting rules.
• An entry you started with us but never paid for or sent: kept so you can come back to it, until you ask us to delete it.
• A form you’re still filling in: signed in, until you submit it or press “Clear draft”. Signed out, deleted after 30 days without changes.
• Payment records: with your account; we may have to keep some longer to meet accounting rules.
• Saved photos: until you delete them, which you can do yourself at any time.
• Your account, bookings and messages: until you ask us to delete them.
• Server logs: kept for a limited time, for security.

• Everything you send us is encrypted in transit (HTTPS).
• Your entry, account details and files are encrypted with AES-256 before they’re stored. A stolen copy of our storage wouldn’t be readable without a key we keep separately.
• Only a few named staff can see customer data. They sign in with Google, must sign in again every few hours, and every time they look at anything it’s logged.

No system is perfectly secure. If something went wrong that affected your information, we would tell you promptly, and tell the authorities where the law requires it.

We use cookies only to keep you signed in and to make Google sign-in safe. There are no advertising or tracking cookies, and no analytics. The site also keeps small settings in your browser, such as which form you’re filling during a visit, and the Vault and case-number tool keep what you type there.

You can ask us to:

• show you the information we hold about you, or give you a copy of it;
• correct anything that’s wrong;
• delete your account and everything in it;
• stop using your information for something you didn’t agree to.

Write to [email protected] from the email address on your account. We’ll reply within 30 days, usually much sooner. Depending on where you live, you may have more rights under local law, and you can complain to your data protection authority.

A few things are outside our control. An entry already sent to the US government stays with them, and deleting it from DVcompass doesn’t withdraw it. We may also have to keep payment records for as long as the law requires.

An account is for the adult entering the DV lottery. Your entry can include your spouse and children, because the official form requires them. When you give us their details, you’re confirming you have the right to share them for that purpose. We use them only for your entry and protect them exactly like your own. If you think a child has given us information without a parent, write to us and we’ll delete it.

If we change this policy, we’ll update the date at the top. If it’s a big change, we’ll also email you before it applies.

Questions, or anything you’d like deleted: [email protected]. For more about who we are, see Trust.