ImmiIQ eLodge, Privacy Policy

ImmiIQ eLodge is a Chrome browser extension that auto-fills the Australian Department of Home Affairs ImmiAccount portal with data from your ImmiIQ client records. This page describes what the extension does and does not do with your data.

1. What we access

• Your ImmiIQ session cookie, for authentication only. Same cookie your browser already holds when you're signed into immiiq.com.
• Read access to the active tab, only when that tab is on online.immi.gov.au, to render the inline banner and fill the form.
• Read access to the ImmiIQ application API, to fetch the active client's profile data when you initiate a fill.

2. What we store

• Nothing on disk. We hold a short-lived (15-minute) JSON Web Token inchrome.storage.session, which clears automatically when you restart your browser.
• Client values (names, dates, passport numbers) are loaded into the extension's memory only at the moment of fill and discarded when the tab closes.

3. What we transmit

1. Audit-log entries. Your fills are recorded in your existing ImmiIQ audit log: which fields were filled, on which form page, for which client, when. This is what your MARA registration requires you to keep anyway.
2. Anonymous fill-rate telemetry. Visa subclass, hashed page signature, fields-attempted vs fields-filled, extension version. No client identifier, organisation identifier, field values, or user identifier. We use this to detect when the Department of Home Affairs renames a form label so we can ship a fix before our customers complain.

4. What we never do

• We never read existing values out of an ImmiAccount form back to our servers. Data flows one way: your record → the form.
• We never sell your data, share it with third parties or use it for marketing.
• We never access tabs that are not on online.immi.gov.au or app.immiiq.com.

5. Your org admin controls

ImmiIQ Premium org admins can disable the eLodgement module from their workspace settings. Once disabled, the extension shows an "upgrade" empty state and the API refuses to issue tokens.

6. Data deletion

Ask your ImmiIQ workspace admin to delete the client's record; the extension's audit-log entries reference that record and will be removed alongside it within 30 days of deletion.

7. Contact

Questions about this policy: [email protected].