ImmiIQ eLodge, Privacy Policy

1. What the extension does

ImmiIQ eLodge is a Chrome extension for migration agents who use ImmiIQ. When you are signed in to the Australian Department of Home Affairs ImmiAccount portal or VEVO Agent in your own browser, it fills the page you are looking at with data from the ImmiIQ client record you have chosen. It records a trail of what it filled in your own ImmiIQ workspace.

• You sign in to ImmiAccount and VEVO Agent yourself. The extension does not sign in for you and cannot.
• The extension fills fields and - where your firm has turned driving on - presses Continue once it has read back every value it wrote. It stops at the declaration every time: it does not fill a declaration page, does not tick the Department's declaration and does not press Submit. You do.
• It only acts on pages under online.immi.gov.au and only talks to app.immiiq.com.
• It is available for Chrome only, from the Chrome Web Store. It updates through the store.

2. What we collect

Everything below is sent to your firm's own ImmiIQ workspace and nowhere else. "Collect" here means the extension reads it in your browser and sends it to ImmiIQ.

1. Your ImmiIQ session. The extension reads the sign-in your browser already holds for app.immiiq.com so it can act as you in your workspace. It holds a short-lived token for that in Chrome's session storage, which clears when you close the browser.
2. Which client is being filled. The identifier of the ImmiIQ client record you chose in the side panel plus the lodgement or VEVO check it belongs to.
3. Which ImmiAccount page you are on. The page's heading and the path part of its address (for example the application step the page represents), so your lodgement register can show where each lodgement is up to.
4. A hashed signature of the page's structure. A one-way hash of the field labels and layout of the page. It says what shape the form has - it contains no field values and cannot be turned back into them. We use it to notice when the Department changes a form.
5. Fill counts. How many fields the extension attempted on the page, how many it filled and how many already held a different value.
6. Corrections you make. If you change a field the extension filled, the extension records the field's name, the old value and the new value on the ImmiIQ client record you already hold, so the record is right next time. This is the only case in which a form value travels from the page to ImmiIQ.
7. The transaction reference number. When you submit an application, the TRN shown on the confirmation page is recorded on that lodgement in your register.
8. VEVO results. When you run a VEVO Agent lookup, the extension reads the result page and records the visa subclass, status, grant and expiry dates, work rights and conditions on the client's VEVO check. If it cannot read the result page it takes a screenshot of that page and attaches it to the check instead, so you can record the result by hand.
9. Anonymous telemetry. Separately from your workspace, the extension reports hashed page signatures, fill counts and the extension version. This carries no client identifier, organisation identifier, user identifier or field value. It tells us when a field map stops matching.

3. What we never collect

• Your ImmiAccount or VEVO Agent password, verification codes, cookies or session. None of it is read, stored or sent. It never leaves your browser.
• The values in the ImmiAccount form. The extension writes values into the form; it does not read them back, except for a correction you make to a field it filled (section 2.6) and the TRN on the confirmation page (section 2.7).
• Anything from a page that is not under online.immi.gov.au. The extension has no access to your other tabs, your browsing history or your bookmarks.
• Anything on disk. Client values live in memory only while a page is filled.
• Anything for advertising, profiling or sale. We do not sell data and we do not share it with third parties.

4. Where it goes

• Everything in section 2 goes to your firm's own ImmiIQ workspace at app.immiiq.com over HTTPS. It is stored encrypted at rest, keyed per organisation, alongside the client records your firm already holds there. It is visible only to people in your organisation.
• Nothing goes to any third party. There is no analytics vendor, no advertising network and no other service behind the extension.
• Anonymous telemetry (section 2.9) goes to ImmiIQ only. It cannot be linked to a client, a user or a firm.

5. Retention and deletion

• The lodgement register, the page trail, VEVO results and corrections live on the client record for as long as your firm keeps that record. Your ImmiIQ workspace admin can delete a client record at any time; everything the extension recorded against it is removed with it within 30 days.
• A VEVO screenshot (section 2.8) is stored with the check it belongs to and is deleted with the client record in the same way.
• The session token in Chrome's session storage clears when you close the browser or sign out of the extension.
• Anonymous telemetry holds nothing that identifies anyone, so there is nothing to delete on request; it is kept only as long as it is useful for maintaining the field maps.

6. Your org admin controls

The extension works only for firms whose admin has turned on the ImmiAccount eLodge module and acknowledged responsibility for the firm's lodgements. An admin can revoke that acknowledgement or turn the module off from the workspace settings at any time. Once off, the extension shows a disabled state and the workspace stops issuing it tokens.

7. Contact

Questions about this policy: legal@immiiq.com.