Privacy Policy

1. Information We Collect

We may collect:

• account information such as your email address and authentication status when you sign up or log in
• billing and subscription information needed to manage paid access, while payment card details are handled by Stripe
• job and form input data you submit to our tools, including role details, salary text, company name, and location
• CV files and CV text extracted to generate CV match and sponsorship-fit outputs, when you upload a CV
• saved analyses and analysis history linked to your account
• product usage and device data, but only for optional analytics or advertising tools where you have given consent
• marketing preference data, including whether you opted in or unsubscribed from product and promotional emails
• messages you send us through support, consultation, CV review, or contact forms

2. How We Use Your Data

We use your data to:

• provide the core VisaAtlas service, including account access, paid features, saved tools, and support workflows
• run sponsorship-fit and CV matching analysis workflows and return results inside your account
• process subscriptions, payments, and account recovery
• improve the service, troubleshoot issues, and understand product usage where analytics consent has been given
• send product updates, feature announcements, and promotional emails only where you have opted in

3. Legal Bases We Rely On

Depending on the situation, we process personal data because it is necessary to provide the service you asked for, because we have a legitimate interest in operating and securing VisaAtlas, or because you gave consent.

We rely on consent for optional analytics, optional advertising technologies, and marketing emails.

4. AI and CV Processing

When you use sponsorship-fit or CV analysis features, we process your submitted inputs (and uploaded CV content where applicable) to generate analysis outputs.

This processing may involve AI service providers acting as processors on our behalf. We do not sell your CV data.

Please avoid uploading unnecessary sensitive personal data in CVs or free-text fields.

5. Payments

All payments are processed by third-party providers such as Stripe.

We do not store your payment details.

6. Cookies, Local Storage, and Similar Technologies

VisaAtlas uses essential cookies and similar storage technologies for sign-in, security, and core product functionality.

Optional analytics and advertising technologies are loaded only after you give consent through our cookie banner.

• essential technologies keep login, security, and core product flows working
• analytics technologies help us measure usage and improve the site when you opt in
• advertising technologies such as AdSense load only when you opt in to advertising consent

7. Marketing Emails

We send product updates, feature announcements, and promotional offers only to users who have opted in.

You can unsubscribe at any time through the unsubscribe link in marketing emails or through your marketing preferences page inside VisaAtlas.

8. Data Sharing

We do not sell your personal data.

We only share data with:

• service providers who help us operate VisaAtlas, such as Supabase, Stripe, Vercel, Resend, and AI providers used for analysis features
• optional analytics or advertising providers, such as Google Analytics or Google AdSense, only where you have consented

Where data is processed outside the UK, we use appropriate safeguards required by law.

9. Your Rights (UK GDPR)

You have the right to:

• access your data
• request correction or deletion where applicable
• withdraw consent for marketing, analytics, or advertising
• object to certain processing or lodge a complaint with the ICO

10. Data Security

We take reasonable measures to protect your data.

11. Data Retention

We keep personal data only for as long as it is needed for service delivery, billing, security, legal obligations, and dispute handling.

This includes account records, saved analyses, support requests, and uploaded CV-related processing data. Retention may vary by data type and legal requirement.

If you request account deletion, we remove or de-identify personal data from active systems where feasible, subject to billing, fraud-prevention, legal, and compliance retention requirements.

12. Children

VisaAtlas is not intended for children under 16.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be posted on this page with a revised effective date.

14. Contact

privacy@visaatlas.uk