EZMig Browser Extension — Privacy Policy
Effective Date: 2026-05-08
Last Updated: 2026-05-19
This Privacy Policy describes how EZMig Inc. (“EZMig”, “we”, “us”) collects, uses, stores, and discloses information when you use the EZMig Browser Extension (the “Extension”) for Google Chrome and other Chromium-based browsers. This policy applies only to the Extension. For our main service privacy policy, see EZMig Privacy Policy.
1. About the Extension
The Extension has a single purpose: to take immigration form data that you have already entered into your EZMig account and automatically type it into the corresponding fields of the USCIS online filing portal at my.uscis.gov and myaccount.uscis.gov. The Extension is a typing-automation tool — it does not collect new data from you, does not analyze your browsing, does not display advertisements, and has no user-facing feature beyond the auto-fill workflow.
The Extension is not affiliated with, endorsed by, or sponsored by U.S. Citizenship and Immigration Services or any U.S. government agency.
The Extension requires an active EZMig account and a USCIS online account to function. It performs no action and handles no data until you are signed in to EZMig and click “Fill Form” for a specific case. It has no standalone functionality without an EZMig account.
2. Information the Extension Handles
The Extension handles the following categories of data only when you explicitly initiate an auto-fill session by clicking “Fill Form” from your EZMig dashboard.
2.1 Form data you entered in your EZMig account
This includes the answers you provided in the EZMig wizard for a specific case (for example, an I-130 petition): names, dates of birth, addresses, identification numbers (Social Security Number, Alien Registration Number, USCIS Online Account Number, passport number), marital status, biographic information (race, height, weight, eye color, hair color), employment information, and information about beneficiaries and family members. The Extension receives this data from your authenticated EZMig session at the moment you initiate filling.
2.2 Authentication token
A short-lived bearer token issued by EZMig to your active session is passed to the Extension so it can request the e-filing automation script from EZMig’s backend. The token is the same one your browser already holds for your dashboard tab and lasts only as long as your EZMig session.
2.3 Operational data
- The internal case form ID and form type code (e.g.
I-130) - Browser tab identifiers used solely to route runtime messages between the dashboard tab and the USCIS tab
- Filling progress counters (number of fields filled, skipped, failed) and the path of the field being processed — the values being typed are not included in progress messages
- The URL of the in-progress USCIS draft (a
my.uscis.gov/pdf-intake/<form>/<id>link). When detected, this URL is sent once to EZMig’s backend (see Section 5.1) so your dashboard can later show a “resume draft” link. This URL does not contain your form-field answers.
2.4 What the Extension does NOT collect
To be explicit, the Extension does not collect, transmit, or have access to:
- Your browsing history outside of
my.uscis.gov,myaccount.uscis.gov, and the EZMig dashboard - Cookies, passwords, or credentials beyond the EZMig session token described in 2.2
- Page content, keystrokes, or form input on any website other than the USCIS subdomains and the EZMig dashboard
- Personally identifiable information beyond what you have already entered into your EZMig account
- Health data, financial-account data, or location data
- Audio, video, screenshots, or screen recordings
- Information about other extensions installed in your browser
The Extension also does not use any:
- Third-party analytics services (no Google Analytics, no Mixpanel, no Sentry, no PostHog, etc.)
- Advertising networks or trackers
- Machine-learning training pipelines
- Cross-site tracking technology
- Telemetry beacons of any kind
3. How the Extension Uses Information
The Extension uses the data described in Section 2 exclusively for the following operational purposes:
| Purpose | Data used |
|---|---|
| Fetch the e-filing automation script that matches your form | Authentication token, form type code |
| Type your answers into the USCIS portal | Form data |
| Resume an interrupted filling session if the USCIS portal navigates the page | Form data, filling progress |
| Show you status updates in the Extension popup and dashboard | Filling progress counters |
| Detect when the USCIS tab is closed early so the run can be cleaned up | Tab identifiers |
| Save a resume link to your USCIS draft so your dashboard can offer a “continue draft” shortcut | USCIS draft URL, authentication token |
Data is never used to build user profiles, to train AI models, to generate advertising, or for any purpose other than the single purpose stated in Section 1.
4. How Information Is Stored
4.1 Local browser storage
While an auto-fill session is active, the Extension stores data in two places within your own browser:
chrome.storage.local: holds the pending payload (form data + authentication token + dashboard tab ID) so the service worker can resume after Manifest V3 lifecycle restarts.chrome.storage.session: holds the resumable filling state (current page index, partial progress) for up to 30 minutes, so navigations between USCIS subdomains do not require re-clicking “Fill Form”.
These storage areas are isolated to the Extension and are not accessible to other websites or extensions. Chrome encrypts both at rest using the operating-system-level encryption key tied to your user account.
4.2 No remote storage of your form data by the Extension
The Extension itself does not maintain a server-side store of your form data, and it never transmits your form-field answers to any server other than the USCIS portal you are filling. Your form data flows one direction: from EZMig (already in your authenticated account) → Chrome local storage → typed into the USCIS portal.
The only data the Extension writes back to EZMig’s backend is the USCIS draft link (the my.uscis.gov/pdf-intake/… URL), sent once per session with your authentication token so your dashboard can offer a “resume draft” shortcut. This is described in Section 5.1.
4.3 Retention
- Pending payload in
chrome.storage.local: cleared automatically when the filling completes, when you click “Reset Extension” in the popup, or when you uninstall the Extension. - Resumable state in
chrome.storage.session: cleared when the browser session ends or after 30 minutes of inactivity, whichever comes first. - Uninstalling the Extension permanently deletes all data stored by the Extension on your device.
5. With Whom Information Is Shared
The Extension transmits data to only two endpoints, both under your control:
5.1 EZMig’s own backend
The Extension communicates with EZMig’s backend in exactly two ways, both carrying your authentication token and neither including your form-field answers:
- One GET to
https://www.ezmig.ai/api/e-filing/sequences?formCode=…(or the equivalent endpoint configured by your EZMig administrator) to load the automation script that tells the Extension how to navigate each USCIS page. - One PUT to
https://www.ezmig.ai/api/case-forms/<id>/uscis-draftcarrying the URL of your in-progress USCIS draft (amy.uscis.govlink containing a draft identifier), so your EZMig dashboard can later show a “continue draft” link. This is sent at most once per filling session.
EZMig’s processing of any data received through these endpoints is governed by EZMig’s main Privacy Policy.
5.2 USCIS online filing portal
The Extension types your form data into the USCIS portal at my.uscis.gov / myaccount.uscis.gov. This is the intended destination of the filing — when you click “Fill Form”, you are choosing to submit the data to USCIS through their official portal. USCIS’s handling of the submitted information is governed by USCIS, not by EZMig.
5.3 No other parties
We do not sell, lease, rent, share, transfer, or grant access to your data to any other party. We do not share information with advertisers, data brokers, insurers, employers, government agencies (other than USCIS as your filing destination), or any other third party. We do not transfer data internationally except to the extent USCIS or EZMig already does so as part of the services you authorized.
6. Permissions Justification
The Extension’s manifest.json requests the following permissions. Each is requested for a specific operational reason tied to the single purpose described in Section 1.
| Permission | Why the Extension needs it |
|---|---|
storage | Persist the pending payload and resumable state across Manifest V3 service-worker restarts and page navigations on the USCIS portal. |
tabs | Open the USCIS portal in a new tab when you click “Fill Form”; route runtime messages between the dashboard tab and the USCIS tab; detect when the USCIS tab is closed so the run can be cleaned up. |
host_permissions: my.uscis.gov, myaccount.uscis.gov | Read the USCIS form’s DOM to locate input fields and dispatch synthetic keyboard events to fill them. |
host_permissions: ezmig.ai, *.ezmig.ai | Bridge the EZMig dashboard tab with the Extension via DOM CustomEvents so you can initiate filling from the dashboard, and send the two requests described in Section 5.1. |
The Extension does not request <all_urls>, webRequest, cookies, history, downloads, clipboardWrite, clipboardRead, geolocation, notifications, bookmarks, or any other broad permission.
7. Security
The Extension transmits data exclusively over HTTPS / WSS. All endpoints (my.uscis.gov, myaccount.uscis.gov, ezmig.ai, *.ezmig.ai) enforce TLS 1.2 or higher. Data at rest in chrome.storage is encrypted by Chrome using the operating-system key associated with your user profile. Authentication tokens are short-lived bearer tokens issued by EZMig and lose all power once they expire.
The Extension does not introduce any external network connection beyond:
- One GET (load the automation script) and one PUT (record the USCIS draft link) to EZMig’s backend, as detailed in Section 5.1.
- The browser’s normal traffic to
my.uscis.govandmyaccount.uscis.govwhile you are filling the form.
8. Your Rights and Controls
You can at any time:
- Stop a filling session: close the USCIS tab or click “Reset Extension” in the Extension popup.
- Clear all locally stored data: click “Reset Extension”, or uninstall the Extension. Both actions wipe
chrome.storage.localandchrome.storage.session. - Revoke the Extension’s access: uninstall the Extension from
chrome://extensions. - Request deletion of data held by EZMig: see your rights under EZMig’s main Privacy Policy.
If you are in the European Union, the United Kingdom, or California, you have additional rights including access, rectification, portability, and erasure under GDPR / UK GDPR / CCPA. Exercise them by contacting privacy@ezmig.ai.
9. Children’s Privacy
The Extension is intended for use by adults filing immigration petitions on behalf of themselves or family members. It is not directed to children under 13 and does not knowingly collect data from children. If you believe a child has provided information through the Extension, contact us at privacy@ezmig.ai and we will delete the data.
10. Changes to This Policy
We may update this Policy from time to time. When we do:
- The “Last Updated” date at the top of this page will change.
- Material changes will be announced in the Extension’s popup and on your EZMig dashboard at least 14 days before they take effect.
- Continued use of the Extension after the effective date constitutes acceptance of the updated policy.
Previous versions of this policy are available upon request at privacy@ezmig.ai.
11. Limited Use Disclosure
The EZMig Browser Extension’s use of information received from Google APIs and from any other source through the Chrome Extension runtime will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
In particular:
- We use this data only to provide or improve the Extension’s single user-facing purpose: filling USCIS forms with data the user has already authorized.
- We do not transfer this data to others, except as necessary to provide or improve that single purpose, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with explicit user notice.
- We do not use or transfer this data for personalized advertising, including re-targeting, personalized advertising, or interest-based advertising.
- We do not use or transfer this data to determine credit-worthiness or for lending purposes.
- No human at EZMig reads this data, except (a) with the user’s affirmative consent, (b) for security investigations or to enforce our Terms of Service, (c) to comply with applicable law, or (d) for internal operations and only where data has been aggregated and de-identified.
12. Contact
EZMig Inc.
Email: privacy@ezmig.ai
For privacy-specific concerns, please use the email above and put “Extension Privacy” in the subject line so we can route the request quickly.
