Privacy Policy

Who we are

This Privacy Policy applies to VOLAURA, Inc., a Delaware C-Corporation. We operate VOLAURA, a verified professional talent platform for skill assessment and verification.

This policy explains: what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have.

Contact: hello@volaura.app

What we collect

We may collect: email address, name or display name, account details, assessment answers, assessment results and scores, profile information, optional profile photo, basic data from Google OAuth if you sign in with Google, payment metadata from Stripe, technical data such as IP address, browser/device data, and security logs.

We do not store your payment card details ourselves.

Where the data comes from

We collect personal data: directly from you, from Google OAuth if you choose that sign-in method, from Stripe for payment and subscription status, from an organization or user that invites you, from technical logs created while operating the service.

This section is intended to support GDPR Article 13 and 14 transparency requirements.

Why we use your data

We use personal data to: create and manage your account, deliver assessments and generate results, show your profile and verified outcomes, protect the service, prevent abuse, and keep audit logs, respond to support requests, manage payments and subscriptions, improve the platform, comply with legal obligations.

Legal bases

For users in the EEA, our main legal bases are: performance of a contract, consent, legitimate interests, legal obligations. For users in Azerbaijan, processing is mainly based on your consent, what is necessary to provide the service, or another legal basis allowed by law. Optional photos and optional profile fields are generally based on your choice.

AI processing and automated decision-making

VOLAURA may use AI systems and rule-based systems to: score assessment responses, explain results, generate insights and recommendations, create matching or quality signals.

This may involve profiling and automated processing.

Important: we aim not to make decisions about you that are based solely on automated processing where those decisions produce legal effects or similarly significant effects. VOLAURA results are meant to support decisions, not replace human judgment. If this kind of processing applies, you may ask for human review, an explanation, a chance to express your point of view, and a way to contest the outcome.

This section is intended to reflect GDPR Article 22.

Who we share data with

We share personal data only where needed: Supabase (database and authentication infrastructure, US/EU), Vercel (frontend hosting and EU edge delivery), Railway (backend hosting, US), Google OAuth (sign-in), Stripe (payments), courts, regulators, or authorities where legally required, other parties if you clearly ask us to or consent to it.

We do not sell your personal information.

International transfers

Your data may be processed outside your country, including in the United States and the European Union. Where required, we use contractual, organizational, and technical safeguards for international transfers.

How long we keep data

We keep data only as long as needed: account data while your account is active, assessment answers and results as long as needed to provide the service, history, and verification, optional photo until you remove it or close your account, payment and accounting data for the period required by law, security logs for a reasonable security and audit period.

When we no longer need data, we delete it, anonymize it, or archive it where legally required.

Your rights

Depending on where you live, you may have the right to: access your data, correct your data, delete your data, restrict processing, object to processing, withdraw consent, export your data, ask about the source of the data, object to automated decision-making, and file a complaint.

For GDPR requests, we usually respond within 1 month. For California requests, where applicable, we usually respond within 45 days. For Azerbaijan, we follow the timelines required by applicable law.

To make a request, email: hello@volaura.app

California privacy notice

If you are a California resident and the CCPA/CPRA applies to you, you may have the right to: know what personal information we collect, access a copy of it, request correction, request deletion, and not be discriminated against for using your rights.

We currently do not sell personal information or share it for cross-context behavioral advertising.

Age limit

VOLAURA is for people 18 and older. It is not intended for minors.

Changes

We may update this Privacy Policy from time to time. If a change is important, we may notify you in the product or by email.

Contact

For privacy questions or rights requests: hello@volaura.app