Privacy Policy

1. Information We Collect

We may collect:

• account information such as your email address and authentication status when you sign up or log in
• billing and subscription information needed to manage paid access, while payment details are handled by Apple, Google Play or Stripe as applicable
• job and form input data you submit to our tools, including role details, salary text, company name, and location
• CV files and CV text extracted to generate CV match and sponsorship-fit outputs, when you upload a CV
• saved analyses and analysis history linked to your account
• product usage and device data, but only for optional analytics or advertising tools where you have given consent
• marketing preference data, including whether you opted in or unsubscribed from product and promotional emails
• messages you send us through support, CV review, or contact forms
• VisaAtlas Data sample and commercial enquiry details, including your name, work email, organisation, website, intended use and requested update frequency
• VisaAtlas Data purchasing records, including the purchasing organisation, licence acceptance, dataset version, invoice, payment status and download activity

2. How We Use Your Data

We use your data to:

• provide the core VisaAtlas service, including account access, paid features, saved tools, and support workflows
• run sponsorship-fit and CV matching analysis workflows and return results inside your account
• process subscriptions, payments, and account recovery
• improve the service, troubleshoot issues, and understand product usage where analytics consent has been given
• send product updates, feature announcements, and promotional emails only where you have opted in
• provide requested dataset samples, respond to commercial enquiries, administer dataset licences, fulfil paid downloads, prevent abuse, and maintain transaction and attribution records

3. Legal Bases We Rely On

Depending on the situation, we process personal data because it is necessary to provide the service you asked for, because we have a legitimate interest in operating and securing VisaAtlas, or because you gave consent.

We rely on consent for optional analytics, optional advertising technologies, and marketing emails.

For VisaAtlas Data, we rely on steps requested before entering a contract and performance of a contract to supply samples, respond to purchase requests and deliver paid datasets. We rely on legitimate interests to answer business enquiries, secure download access, measure the commercial funnel and prevent fraud. We rely on legal obligations for tax, accounting and dispute records.

4. AI and CV Processing

When you use sponsorship-fit or CV analysis features, we process your submitted inputs (and uploaded CV content where applicable) to generate analysis outputs.

This processing may involve AI service providers acting as processors on our behalf. We do not sell your CV data.

Please avoid uploading unnecessary sensitive personal data in CVs or free-text fields.

5. Payments

Payments are processed by third-party providers, including Apple for App Store subscriptions, Google for Google Play subscriptions and Stripe for web purchases.

We do not store your payment details.

6. Cookies, Local Storage, and Similar Technologies

VisaAtlas uses essential cookies and similar storage technologies for sign-in, security, and core product functionality.

Optional analytics and advertising technologies are loaded only after you give consent through our cookie banner.

• essential technologies keep login, security, and core product flows working
• analytics technologies help us measure usage and improve the site when you opt in
• advertising technologies such as AdSense load only when you opt in to advertising consent

7. Marketing Emails

We send product updates, feature announcements, and promotional offers only to users who have opted in.

You can unsubscribe at any time through the unsubscribe link in marketing emails or through your marketing preferences page inside VisaAtlas.

8. Data Sharing

We do not sell your personal data.

We only share data with:

• service providers who help us operate VisaAtlas, such as Supabase, Apple, Google, Stripe, Vercel, Resend, and AI providers used for analysis features
• optional analytics or advertising providers, such as Google Analytics or Google AdSense, only where you have consented

Where data is processed outside the UK, we use appropriate safeguards required by law.

9. Your Rights (UK GDPR)

You have the right to:

• access your data
• request correction or deletion where applicable
• withdraw consent for marketing, analytics, or advertising
• object to certain processing or lodge a complaint with the ICO

10. Data Security

We use encrypted HTTPS connections, authenticated account access, database access controls, and restricted service-provider access to protect personal data. We limit access to people and providers who need it to operate or support the service.

11. Data Retention

We keep personal data only for as long as it is needed for service delivery, billing, security, legal obligations, and dispute handling.

This includes account records, saved analyses, support requests, and uploaded CV-related processing data. Retention may vary by data type and legal requirement.

If you request account deletion, we remove or de-identify personal data from active systems, except for limited records retained for billing, fraud-prevention, legal, or compliance requirements.

Billing and transaction records required for tax or legal compliance may be retained for up to 7 years. They are not retained to continue providing account access or marketing.

VisaAtlas Data sample requests, commercial enquiries and related correspondence are normally retained for up to 24 months after the latest interaction, unless a contract is formed or a longer period is needed for a legal claim. Dataset download and security events are normally retained for up to 24 months. Marketing preferences are retained until consent is withdrawn and as needed to honour suppression requests.

You can delete your account through the Account area or use our account deletion page. If you cannot sign in, email privacy@visaatlas.uk for help with a verified deletion request.

12. Children

VisaAtlas is not intended for children under 16.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be posted on this page with a revised effective date.

14. VisaAtlas Browser Extension

The VisaAtlas Sponsor Check browser extension only runs on the job-search pages of LinkedIn, Indeed, Reed, Totaljobs, and CV-Library. While active on those pages, it reads the company name, job title, and salary text of the listings visible on your screen, and sends that specific information to VisaAtlas's servers to check UK Skilled Worker sponsor-licence status and, for signed-in Pro subscribers, whether the advertised salary is likely to meet the applicable visa salary threshold.

The extension does not track your general browsing history or activity on other sites, and does not read anything from pages other than the job-search results of those five sites.

The extension works without an account for sponsor-licence checks. If you don't sign in, requests are rate-limited by IP address to prevent abuse; if you sign in with your VisaAtlas account to unlock Pro salary checks, sign-in uses the same account system as the website, and your session is stored locally in your browser (via the browser's extension storage) so you stay signed in between visits. That session data stays on your device and is not shared with any of those job boards, or any other party.

15. Contact

privacy@visaatlas.uk

VisaAtlas Ltd is registered with the UK Information Commissioner's Office (ICO) as a data controller. ICO Registration Reference: ZC193332.