The controller of your personal data is: Vasora - Together Worldwide Sridhar Reddy Maddhi IČO: 29776171 Registered address: Prague, Czech Republic Contact: privacy@vasora.app If you have questions about how we handle your personal data, please contact us at the address above.
Welcome to Vasora ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our mobile application and our Employer Portal (vasora.app/employer-portal.html). It covers individual users ("community members"), businesses ("employers") who post job listings, and job seekers who apply for positions, as well as candidates who create a Vasora Talent profile (see section 10).
From community members (mobile app): • Account Information: your name, email address, and profile photo when you register. • Profile Data: location, language preference, and any other information you choose to add to your profile. • Content You Post: messages, events, questions, and other content you submit within the app. • Technical Logs: error and diagnostic logs generated by our hosting and database provider (Firebase) when the app communicates with our servers. • Device Information: device type, operating system, and app version for technical support. Vasora does not use any third-party analytics or advertising SDKs. We do not track your activity across other apps or websites, and we do not build advertising profiles. From job seekers (when applying for a job): • Application Data: your name, email address, and phone number that you provide when submitting a job application through the app. • CV / Resume: if you attach a CV or resume file as part of your application, it is transmitted directly to the employer. We do not store your CV on our servers beyond what is necessary for transmission. From users requesting a partner referral: • Referral Data: your first name, surname, email address, phone number, and the service details you choose to provide (for example the language, level, course type or service you are interested in) when you ask to be referred to one of our partner organisations. From employers (Employer Portal): • Account credentials: work email address and password used to sign in to the portal. • Company information: company name, registered Czech business ID (IČO), and registered address (retrieved from the ARES public business registry). • Contact person details: name and email address of the person managing the listing. • Job listing content: job title, location, job type, work mode, salary, relocation details, visa requirements, language requirements, job description, required skills, and benefits. • Company profile: logo, about text, website URL, company photos, and Q&A content you upload to the portal. • Application routing data: apply email address and/or external application URL if provided. • Portal activity: listing creation dates, status changes, and the number of times candidates tapped "Apply".
Candidates with a Talent profile: see section 10 for exactly what we collect. Browser storage: our website and app use your browser's local storage and similar technology only for what you ask us to do: to keep you signed in, to save an unfinished profile on your own device, and to remember your light or dark theme. We do not use advertising or tracking cookies.
For community members: • Provide and operate the Vasora service. • Personalise your experience (language, location-based content). • Enable you to connect and communicate with other expats. • Send you notifications about community activity (if you opt in). • Contact you occasionally by email to request feedback, share important service updates, or invite you to participate in surveys about your experience. You may opt out of these communications at any time by contacting us at privacy@vasora.app. • Improve app performance and fix technical issues. • Comply with legal obligations. For job seekers: • Transmit your application details (name, email, phone number, and any attached CV) directly to the employer who posted the job listing. We act as an intermediary — the employer becomes the data controller for your application data once it is received. • Legal basis: your explicit consent given at the point of submitting the application. For partner referrals: • Transmit your referral details to the partner organisation you have chosen, so that they can contact you about their services. We always identify the specific partner to you before you submit your request. • Once the partner receives your details they become an independent data controller and process your data under their own privacy policy. Vasora cannot delete or amend the partner's copy of your data on your behalf. • We may receive a commission from the partner if you go on to purchase their service. This does not affect the price you pay unless we state otherwise. • Legal basis: your explicit consent, given at the point of submitting the referral request. You may withdraw your consent at any time. See section 8. For employers: • Create and publish job listings visible to expat community members in the Vasora app. • Verify your company registration status and name via the ARES Czech public business registry. • Send transactional emails: confirmation that your listing was received, and notification when your listing goes live. • Display your contact details (name and email) to candidates who apply directly via email. • Track listing performance (apply-tap count) and display it to you in the portal. • Legal basis: performance of a contract (your use of the Employer Portal service).
We do not sell your personal data. We may share your information with: • Employers: when a job seeker submits an application, their name, email address, phone number, and any attached CV are shared directly with the employer who posted the listing. Job seekers are informed of this before submitting. • Partner organisations: when you ask to be referred to a partner, your name, email address, phone number and the service details you provided are sent to that specific partner organisation. We name the partner before you submit your request. We never send your details to a partner without your explicit consent, and we do not share your details with partners you have not chosen. • Other Users (community members): your profile name and photo are visible to other signed-in users of the community. • Job Seekers: employer-submitted job listings (company name, location, job details) are publicly visible in the Vasora app. Your contact email is only shared when a candidate taps "Apply via Email". • ARES (Czech Business Registry): we send your IČO to the publicly available ARES API (ares.gov.cz) solely to verify your company's registration status and legal name. No personal data is sent — only the IČO you provide. • Resend (email delivery): we use Resend (resend.com) to deliver transactional and service emails to both employers and community members. Your email address is processed by Resend solely for this purpose under a data-processing agreement. • Firebase (Google): authentication, database, and file storage for both the app and the portal. Data is processed on our behalf under strict data-protection agreements. • Cloudflare and Google (web delivery): our web pages are delivered through Cloudflare and load fonts and code libraries from Google servers. These providers can see your IP address and browser details when you load a page. • Companies that receive your Talent profile details: see section 10. • Legal Requirements: if required by law or to protect the rights and safety of our users.
Your data is stored on Google Firebase (Google Cloud) servers, mainly in the United States. We implement industry-standard security measures including encrypted transmission (HTTPS/TLS) and role-based access controls. No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account. Because your data is stored in the United States, it is transferred outside the European Economic Area. For these transfers Google and Cloudflare rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law. Job application data (name, email, phone number) transmitted to employers is held by the employer as a separate data controller and subject to their own retention policies. Partner referral records — your name, contact details, the partner involved, the details you submitted, and the date they were sent — are retained for 24 months from the date of transmission, after which the personal details are deleted. We keep these records to administer the referral and to meet our accounting obligations. Details already received by a partner are held by that partner as a separate data controller under their own retention policy.
Vasora Talent profiles and CVs are covered in section 10.
If you are located in the European Economic Area, you have the following rights: • Right of Access: request a copy of your personal data. • Right to Rectification: correct inaccurate or incomplete data. • Right to Erasure: request deletion of your data ("right to be forgotten"). Community members can delete their account from within the app. Employers can delete their account and all associated listings directly from the Employer Portal (vasora.app/employer-portal.html) using the "Delete account" option. To delete a Vasora Talent profile, see section 10. • Right to Restriction: request that we limit processing of your data. • Right to Portability: receive your data in a portable format. • Right to Object: object to processing based on legitimate interests. • Right to Withdraw Consent: where we rely on your consent (for example for your Vasora Talent profile), you can withdraw it at any time. Withdrawing does not affect processing that took place before. To exercise any of these rights, or if you need assistance, contact us at privacy@vasora.app. You also have the right to lodge a complaint with the Czech data protection authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or with the authority in your country of residence.
Vasora is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly. Vasora Talent is for adults only.
Vasora Talent lets you create a candidate profile that verified companies in Czechia can search, so that employers can find you instead of waiting for applications. It is optional and free for candidates. This section explains exactly what happens to your data if you create a profile. Current status: Company search is not open yet. Until it opens, nobody outside Vasora can see your profile. Before it opens we will email you so that you can review your profile or hide it. Once it is open, we will tell you each time a company requests access to your details. What we collect: • Account details: your email address and how you sign in. If you sign in with Google, Google shares your name, email address and profile picture link with us. We never see or store your password; it is handled by Google Firebase Authentication. • Profile details you enter: first name, surname, city, work authorisation status in Czechia (for example EU citizen, permanent residence or a visa type), job title, skills, years of experience (as a range), languages with your level, notice period, and the month you are available from. • CV (optional): a PDF or Word file you upload. A CV can contain more than we ask for, such as an address, phone number, date of birth or photo. Please leave out anything you do not want shared, and do not include sensitive information such as health or religion. • Settings and records: whether your profile is visible, the version and time of the consent you gave, and when your profile was created and last changed. We do not add anything from your job applications or your community activity to your Talent profile. Applications you send through Vasora are shown only to you, under "My jobs". What companies see: • Before a company requests access: an anonymised card with your initials, city, work authorisation status, experience range, skills, languages and the month you are available from. It does not show your full name, photo, CV, email address or phone number. • After a company requests access to contact you: your full name, your email address, your CV (if you uploaded one) and the profile details above. Why we use your data, and our legal basis: • To create your profile and show you your dashboard: performance of our agreement with you (Article 6(1)(b) GDPR). • To make your anonymised profile searchable by verified companies, and to share your details with a company that requests access: your explicit consent (Article 6(1)(a)), given with the checkbox when you finish your profile. You can withdraw it at any time by hiding your profile in Settings or by deleting it. Withdrawing consent does not affect processing that already took place. • To suggest jobs: your browser compares your skills and city with open job listings on Vasora and ranks them. This is a suggestion only. We make no automated decisions that have legal or similarly significant effects on you. • To keep the service secure and prevent misuse: our legitimate interests (Article 6(1)(f)). Providing this data is voluntary, but we need the required fields to build a profile that companies can search. Who receives your data: • Verified companies: only companies whose Czech company registration number (IČO) we have checked in the public ARES registry, and only as described above. Once a company receives your details it becomes an independent controller of its copy and handles it under its own privacy policy. We cannot delete or change that copy. Companies will be required to use your details only to contact you about work and not to share them further. • Our service providers, who process data on our behalf: Google (Firebase Authentication, database, and storage for your CV) and Cloudflare (delivery of our web pages). We do not sell your data and we do not share it with advertisers. How long we keep it: We keep your Talent profile and CV until you delete them. We also delete profiles that have not been signed in to for 12 months. When you ask us to delete your profile, we remove it and your CV within 30 days. Deleting your profile: Email privacy@vasora.app from the address on your account and we will delete your profile and CV. Deleting your Vasora account inside the app does not yet remove your Talent profile automatically, so please email us as well. Your choices: In your dashboard you can edit your profile, replace your CV, and hide your profile from company search at any time. Age: Vasora Talent is for adults aged 18 and over. You may only create a profile about yourself.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the app. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.
If you have any questions or concerns about this Privacy Policy, please contact us: Email: privacy@vasora.app We aim to respond to all privacy-related enquiries within 30 days.