Privacy Policy

Last updated: 22 September 2026

Vasora ("we", "our", or "us") is a community app for Indian expats living in the Czech Republic. This Privacy Policy explains how we collect, use, and protect your information when you use the Vasora mobile application.

1. Information We Collect

Account information: Email address, display name, and profile photo when you register.
Profile data: Optional information you add to your profile such as city, bio, and links.
User-generated content: Posts, comments, event listings, service listings, hub content, and messages you create in the app.
Device information: Push notification token to deliver in-app notifications.
Technical logs: Error and diagnostic logs generated by Firebase when the app communicates with our servers.
Referral data: If you ask to be referred to one of our partner organisations, the first name, surname, email address, phone number and service details you submit in the referral form.

Vasora does not use any third-party analytics or advertising SDKs. We do not track your activity across other apps or websites.

2. How We Use Your Information

To provide and operate the Vasora community platform.
To send push notifications you have opted into (community updates, messages, reminders).
To authenticate your identity and secure your account.
To display your profile and content to other community members.
To improve the app based on usage patterns.

3. Information Sharing

We do not sell or rent your personal information to third parties. Your public profile and community content (posts, events, services) are visible to other Vasora users. Private messages are only visible to the sender and recipient.

Partner referrals: If you ask to be referred to one of our partner organisations, we send the name, email address, phone number and service details you provided to that specific partner so they can contact you. We name the partner before you submit your request, and we may receive a commission if you purchase their service. We never send your details to a partner without your explicit consent. Once a partner receives your details they act as an independent data controller under their own privacy policy. Referral records are kept for 24 months and then deleted.

We use the following third-party services which have their own privacy policies:

Firebase (Google): Authentication, database, storage, and push notifications.
Expo: Mobile app infrastructure and push notification delivery.
Resend: Delivery of transactional and service emails.
Cloudflare and Google (web delivery): Our web pages are delivered through Cloudflare and load fonts and code libraries from Google servers, which can see your IP address and browser details when you load a page.

4. Data Retention

We retain your account data as long as your account is active. You may request deletion of your account and associated data by contacting us at the email below. Some data may be retained as required by law or for legitimate business purposes.

Vasora Talent profiles and CVs are covered in section 8.

5. Children's Privacy

Vasora is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

6. Security

We use industry-standard security measures including Firebase's built-in security, encrypted data transmission (HTTPS), and Firestore security rules to protect your data. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security. Because your data is stored in the United States, it is transferred outside the European Economic Area. For these transfers Google and Cloudflare rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your account and data.
Withdraw consent for push notifications at any time through your device settings.
Withdraw any other consent you have given, for example for your Vasora Talent profile, at any time. Withdrawing does not affect processing that took place before.

You also have the right to lodge a complaint with the Czech data protection authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or with the authority in your country of residence.

8. Vasora Talent (candidate profiles)

Vasora Talent lets you create a candidate profile that verified companies in Czechia can search, so that employers can find you instead of waiting for applications. It is optional and free for candidates. This section explains exactly what happens to your data if you create a profile.

Current status: Company search is not open yet. Until it opens, nobody outside Vasora can see your profile. Before it opens we will email you so that you can review your profile or hide it. Once it is open, we will tell you each time a company requests access to your details.

What we collect:

Account details: your email address and how you sign in. If you sign in with Google, Google shares your name, email address and profile picture link with us. We never see or store your password; it is handled by Google Firebase Authentication.
Profile details you enter: first name, surname, city, work authorisation status in Czechia (for example EU citizen, permanent residence or a visa type), job title, skills, years of experience (as a range), languages with your level, notice period, and the month you are available from.
CV (optional): a PDF or Word file you upload. A CV can contain more than we ask for, such as an address, phone number, date of birth or photo. Please leave out anything you do not want shared, and do not include sensitive information such as health or religion.
Settings and records: whether your profile is visible, the version and time of the consent you gave, and when your profile was created and last changed.

We do not add anything from your job applications or your community activity to your Talent profile. Applications you send through Vasora are shown only to you, under "My jobs".

What companies see:

Before a company requests access: an anonymised card with your initials, city, work authorisation status, experience range, skills, languages and the month you are available from. It does not show your full name, photo, CV, email address or phone number.
After a company requests access to contact you: your full name, your email address, your CV (if you uploaded one) and the profile details above.

Why we use your data, and our legal basis:

To create your profile and show you your dashboard: performance of our agreement with you (Article 6(1)(b) GDPR).
To make your anonymised profile searchable by verified companies, and to share your details with a company that requests access: your explicit consent (Article 6(1)(a)), given with the checkbox when you finish your profile. You can withdraw it at any time by hiding your profile in Settings or by deleting it. Withdrawing consent does not affect processing that already took place.
To suggest jobs: your browser compares your skills and city with open job listings on Vasora and ranks them. This is a suggestion only. We make no automated decisions that have legal or similarly significant effects on you.
To keep the service secure and prevent misuse: our legitimate interests (Article 6(1)(f)).

Providing this data is voluntary, but we need the required fields to build a profile that companies can search.

Who receives your data:

Verified companies: only companies whose Czech company registration number (IČO) we have checked in the public ARES registry, and only as described above. Once a company receives your details it becomes an independent controller of its copy and handles it under its own privacy policy. We cannot delete or change that copy. Companies will be required to use your details only to contact you about work and not to share them further.
Our service providers, who process data on our behalf: Google (Firebase Authentication, database, and storage for your CV) and Cloudflare (delivery of our web pages).

We do not sell your data and we do not share it with advertisers.

How long we keep it: We keep your Talent profile and CV until you delete them. We also delete profiles that have not been signed in to for 12 months. When you ask us to delete your profile, we remove it and your CV within 30 days.

Deleting your profile: Email privacy@vasora.app from the address on your account and we will delete your profile and CV. Deleting your Vasora account inside the app does not yet remove your Talent profile automatically, so please email us as well.

Your choices: In your dashboard you can edit your profile, replace your CV, and hide your profile from company search at any time.

Age: Vasora Talent is for adults aged 18 and over. You may only create a profile about yourself.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

support@vasora.app