Privacy Policy

1. Data we collect

• Account: mobile phone number (sign-in with a one-time code; the number is stored encrypted on our servers).
• Profile: name, city and district, desired occupations, experience, education, languages, schedule, salary expectation, skills and a short self-description.
• Optional files: profile photo, video introduction, CV files (PDF/DOCX) and CVs created in CV Studio.
• Hiring process: applications and their statuses, messages and attachments exchanged with employers, interview times, job offers, start-of-work confirmation and the 30/90-day outcome.
• Hourly work (Saatlıq): worker profile (categories, rate, availability, photo), bookings, address notes and reviews.
• Employer accounts: company name, tax ID (VÖEN), contact details, team members’ phone numbers and roles.
• Technical data: IP address, browser/device type (user agent), time of sign-ins and key actions — for security and abuse prevention.
• Consents: the history of consents you gave or withdrew (with the text version).

We do not collect precise device location (GPS), your contacts or advertising identifiers. The app contains no ads and no third-party tracking SDKs. No face, emotion or voice scoring is performed.

2. How we use data

• Creating your account and signing you in.
• Showing how your profile matches vacancies, managing applications and their statuses.
• Messaging with employers, interviews and hiring steps.
• Notifications (in the app; via Telegram/WhatsApp only with your consent).
• Preventing fraud and fake vacancies, moderation and security.
• Measuring service quality (internal, de-identified statistics).

Legal bases: providing the service (contract), your consent (consents C1–C9) and legal obligations. AI never makes the final rejection decision about a candidate — only a human can.

3. Who can see your data

• The employer you apply to — your profile, the CV you choose, screening answers and (if added) your video introduction. Your phone number is revealed only at the stage defined by the hiring rules.
• Verified employers — only if you make your résumé visible in the “Rezümelər” database, within the visibility level you choose.
• The open web — only if you make your résumé public; phone, address, photo and video are never shown publicly.
• Hourly-work counterparties — contact details after a booking is accepted.
• Service providers: hosting (OVH, France); WhatsApp (Meta) and Telegram to deliver one-time codes and notifications; when certain optional text features are enabled — an AI provider (Anthropic), with minimal text context only.

We do not sell personal data or share it for advertising.

4. Retention

Data is kept while your account is active. After you request deletion, a 30-day grace period starts during which you can cancel; after it ends your personal data is deleted or irreversibly anonymized.

The security audit log and consent history are kept in tamper-proof form with de-identified references, as required for legal accountability.

5. Your rights

• Access and export your data: one tap in the “Məxfilik” (Privacy) section (JSON file).
• Correct your data: in your profile and the CV editor.
• Withdraw consent: in the “Məxfilik” section (except the mandatory C1 consent).
• Delete your account: “Məxfilik” → “Delete account”, or follow the steps at vaka.az/legal/en/delete-account.
• Questions and complaints: support@vaka.az.

6. Security

All traffic is encrypted with HTTPS. Phone numbers and documents are stored encrypted, uploads are scanned, employer staff access is limited by role and store/region, and every export of personal data is logged.

7. Age

VAKA is intended for users aged 16 and older.

8. Changes and contact

When this policy changes, the new version is published on this page and the date above is updated. We notify you in the app about material changes.

Contact: support@vaka.az · ORMUS TECHNOLOGIES · vaka.az