Privacy policy

Who we are

Visavi is operated by Ramen Labs Ltd (Companies House listing in progress), a UK limited company (‘we’, ‘us’, ‘our’). Ramen Labs Ltd is the controller of the personal information described in this policy. That means we decide how and why it is used, and we are responsible for it under UK data protection law.

Privacy requests: privacy@visavi.uk
General support: hello@visavi.uk
Registered office: Companies House listing in progress
ICO registration number: to follow once the Companies House listing is complete
Data protection contact: privacy questions, including anything you would raise with a data protection officer, go to privacy@visavi.uk.

The laws that apply are the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), each as amended, including by the Data (Use and Access) Act 2025.

What this policy covers

This policy covers personal information about:

people who use the Visavi app on iOS or Android;
people who visit visavi.uk, including people who use the free sponsor licence checker;
people who join the launch waitlist;
people who apply to, or take part in, the Visavi Creators programme;
people who tested Visavi before launch and rated it;
people who email us; and
people at employers who write to an application email address we created for a Visavi user.

Visavi is an app on iOS and Android. There is no Visavi web app. Once an employer receives your application, what it does with it is covered by that employer’s own privacy notice, not this one. The same goes for Apple, Google and other services that have their own relationship with you.

What the product does

Visavi helps you find UK jobs whose employers can sponsor a visa, tailor a CV (and an optional cover letter) for a job, and apply. Swiping is free. Credits pay for tailoring and for sending applications, and the app shows any cost before you commit. Payments are taken by Apple or Google, not by us directly.

Visavi does not give immigration advice and does not decide whether you get a job or a visa. Employers make hiring decisions, and the Home Office sets the visa rules.

Information you give us

Account. Email address, and a password if you create one. The password is stored only as a hash. We cannot read it back. If you use Google or Apple sign-in, we receive the name and email those services share with us, plus an account identifier.
Profile. Your name, visa status, any extra visa detail you type, the job titles you want, the city you type, how far you will travel, and the work types you choose.
CV. The file you upload (PDF or Word) or the text you paste, the text we extract from it, and the structured profile we build from it (experience, education, skills, contact details on the CV).
Cover letters. A base letter if you paste one, and letters we write for a specific job.
Saved answers. Answers you enter once so they can be reused on applications, such as your phone number, start date, notice period and age.
Searches and activity. The searches and filters you save, your alert settings, and the tracker status of each application.
Applications. The jobs you apply to, the answers you give, and the status of each application. Each application can get its own Visavi email address on apply.visavi.uk so employer replies can be matched to that application.
Employer email. When an employer writes to that address, we store the sender, subject, a short snippet, and a label for what kind of message it is (for example confirmation or interview). We show the message in the inbox in your Visavi app.
Credits. Which credits or subscription you bought, and how credits were added and spent. For purchases, we never receive your card number, bank details, or Apple or Google password. If you claim bonus credits for following us on TikTok or Instagram, your credit history records that you claimed them, so each bonus is given only once.
Messages to us. What you send when you email us for support or about privacy, and our replies.
Testimonials. If you agree to let us quote you, the words and name you agree to, a record of your permission, the date, and whether you received anything from us. We only publish them with your permission, and we keep the record so we can show the testimonial is genuine.

What you have to give us. You need an email address to create an account, and a CV to use tailoring. The other profile details help us show you better matches. If you leave them out, some features will not work as well. No law requires you to give us any of this information.

Information about other people. If your CV or an application includes details about someone else, such as a referee, please make sure they are happy for you to share them.

Information collected automatically

Logs. Our servers record the time of a request, a request id, and the IP address, so we can run the service and investigate abuse. Our hosting provider also keeps its own platform logs.
Notifications. Whether you asked the app to show notifications. Anything needed to deliver a notification to your phone is used only to send the notifications you asked for, and you can turn notifications off at any time.
Purchase status. Apple, Google, and RevenueCat tell us whether a subscription is active, so we can grant credits. They do not send us your payment card.

We do not collect precise GPS, your contacts, your photos, SMS, or an advertising identifier. The city on your profile is the city you type. We do not show ads, and we do not sell personal information.

Information we get from other places

Google and Apple, if you sign in with them: your name, email and an account identifier.
Apple, Google and RevenueCat: whether a purchase went through and whether a subscription is active.
Employers: the emails they send to an application address, including the sender’s name and email address.
A friend who invited you: if you join the waitlist through a friend’s link, their referral code comes with your sign-up.
Public sources: information about employers and jobs, including the Home Office register of licensed sponsors. This is information about employers, not about you.

This website, the waitlist and creators applications

visavi.uk tells people about Visavi, publishes guides and a free sponsor licence checker, keeps a waitlist for the app launch, and takes applications for the Visavi Creators programme.

Waitlist. If you join, we keep your email address, the page or button you joined from, whether you joined from an iPhone, an Android phone or a computer (worked out from the browser details your device sends, so the launch email can link the right store), and, if a friend invited you, their referral code. The list is held by our email provider, Resend. We send one email to confirm it is really you. When you confirm, we give you your own referral link, made from a short code worked out from your email address. The code does not show your email address. When a friend joins through your link and confirms, we store your code with their sign-up. At launch we use these codes to work out the launch order and the referral rewards described in our terms of use.
Creators applications. If you apply, we receive your name, your TikTok or Instagram handle and which platform it is on, your university if you give it, your email address and what you tell us about yourself. The form sends this to our creators inbox by email, and it is forwarded to the founder’s inbox. It is not saved in a database. We read every application and reply to the ones we take forward.
Protecting our forms. To stop spam, the website keeps your IP address in its working memory when you send the waitlist or creators form, to limit how often a form can be sent. It also keeps the email address you entered in working memory for a short time, so the same address is not sent repeat confirmation emails (waitlist) or a duplicate application (creators). These are never written to storage and are cleared when the server restarts. The forms also have a hidden field that only automated bots fill in.
Analytics. When it is switched on, we count visits in aggregate with PostHog in cookieless mode: no cookies, no cross-site tracking, no session recordings and no advertising. We count things like which pages are viewed, which buttons are tapped, how far down a page people scroll, which questions are opened, and whether a waitlist form was sent and came from a referral link. We never send your email address or what you type in a search to PostHog. PostHog receives your IP address when your browser connects. It may use it, with basic browser details, to count unique visitors without cookies and to estimate a rough location such as the city. You can turn analytics off with the link in the footer of every page. See cookies and storage on your device.
Sponsor checker. Searches run in your browser against a copy of the public register. We do not record what you search for.

The host also records ordinary server logs, including IP address, as described in how long we keep it.

Why we use it, and our lawful basis

UK data protection law says we must have a lawful basis for each use of your information. Here is each use, the information involved and the basis we rely on.

Creating and running your account. Account and profile details. Basis: necessary for our contract with you.
Showing and ranking jobs, matching employers to the UK sponsorship register, and working out match scores and fit. Profile, CV and the preferences you gave us. Basis: necessary for our contract with you.
Sending alerts you set up for new matching roles. Saved searches, and anything needed to deliver a notification to your phone. Basis: necessary for our contract with you.
Reading your CV and tailoring a CV or cover letter, including fact-checking, making the PDF and checking it will read well in employers’ systems. CV and letters. Basis: necessary for our contract with you. For any special category information you choose to include, see sensitive information.
Sending the applications you approve, creating an email address for each application, and receiving, labelling and forwarding employer replies. Applications, saved answers, CV, letters and employer email. Basis: necessary for our contract with you.
Receiving and forwarding emails from employers’ staff to the Visavi user who applied. The sender’s name, email address and message. Basis: our legitimate interests in delivering employer replies to the person they are meant for.
Keeping your credit balance, granting credits for purchases, subscriptions and the bonus credits we offer, such as for interview invites. Credit ledger and purchase status. Basis: necessary for our contract with you.
Sending account and application emails. Email address. Basis: necessary for our contract with you.
Keeping Visavi secure, preventing spam and abuse, and finding and fixing faults. Logs, IP addresses and the forms’ spam checks. Basis: our legitimate interests in keeping Visavi, our users and our systems safe and working. We do not use logs to advertise to you.
Website analytics. Aggregate counts of visits and taps, as described above. Basis: our legitimate interests in understanding which pages help people and improving the site. You can object at any time with the footer link.
Sending the one email that confirms your waitlist sign-up, and keeping an unconfirmed sign-up until it is deleted. Email address. Basis: our legitimate interests in checking that the person who joined owns the address before we send anything else.
Waitlist emails. Email address. Basis: your consent, which you give by joining and then confirming through the link we email you (double opt-in). You can withdraw it at any time with the unsubscribe link in every email. Withdrawing does not affect emails we sent before.
Remembering that you left the waitlist. Email address. Basis: our legitimate interests in making sure we do not email you again.
Knowing where waitlist sign-ups came from, linking the right app store, and running the launch order and referral rewards. The page you joined from, your device type and referral codes. Basis: our legitimate interests in knowing which pages work, sending you the right store link, and giving you and your friends the rewards we offer.
Considering creators applications. The details on the form. Basis: taking steps you asked for before we may enter into an agreement with you, and our legitimate interest in choosing creators to work with.
Running Visavi Creators, if we take you forward. Your posts about Visavi, their view counts and labels, our checks and decisions, the rewards we give you, and the details we need to pay you. Basis: necessary for our agreement with you; our legal obligations, such as keeping payment and tax records; and our legitimate interest in checking that adverts made for us are honest and clearly labelled.
Answering your emails and privacy requests. What you send us and our replies. Basis: our legal obligations for privacy requests, and our legitimate interest in helping you for everything else.
Publishing a testimonial. The words and name you agree to. Basis: your consent, which you can withdraw at any time.
Keeping a record of early-tester ratings and testimonials, so we can show that what we publish about them is genuine and accurate. The rating or quote, the date, the version tested, anything the person received from us, and their contact details. Basis: our legitimate interests in being able to prove our claims are true, and our legal obligations under consumer protection law.
Working out statistics about how Visavi performs, if we publish any, for example in our marketing. Information about how Visavi is used, combined so that it does not identify anyone. We publish only totals and averages that do not identify anyone, and we keep the evidence behind every figure we publish. Basis: our legitimate interests in giving accurate, evidenced information about Visavi.
Meeting legal duties and dealing with legal claims, such as responding to lawful requests from authorities or defending a claim. Only the information needed. Basis: legal obligation, and our legitimate interest in establishing, exercising or defending legal claims.

When we rely on legitimate interests, we have weighed our interest against your rights and expectations. You can ask us for details, and you can object (see your rights).

You can turn notifications off. You can skip a cover letter. You do not have to buy credits to browse or apply.

Sensitive information

Visa status and immigration details. Your visa status, any visa detail you type and your nationality, if it appears in your CV, are not ‘special category’ information in law, but we treat them with extra care. We use them to show you jobs and to fill in application answers with what you told us, which you approve before sending. We do not use them to assess whether you qualify for a visa. We do not show employers your profile. An employer only sees the application you choose to send, including any right-to-work answer you approve. We never guess visa, right-to-work or salary answers.

Special category information in a CV. We do not ask for information about your health or disability, religion or beliefs, racial or ethnic origin, sexual orientation, political opinions, trade union membership or criminal record. Some people include details like these in a CV. Before you upload, think about whether the jobs you want need them, and remove anything an employer does not need to see.

If your CV does include special category information, we use it only to read and tailor your CV and to send the applications you approve, and we never sell it. The condition we rely on is your explicit consent. For any criminal record information, we rely on the same consent, as the Data Protection Act 2018 allows. You can withdraw that consent at any time by removing the details from your CV in the app or by deleting your CV. Withdrawing does not undo applications already sent.

Equality monitoring questions. If an employer’s form asks equality monitoring questions, such as about ethnicity, disability, religion or sexual orientation, we only ever answer them with information you choose to give us, and we never save such an answer without your explicit consent.

AI and automated decisions

Visavi uses AI and automated tools to help you. They are there to assist you, and you stay in control.

Reading your CV. AI reads your CV to build your profile.
Tailoring. AI rewrites your CV and an optional cover letter for a job. It works only from what your master CV proves, is built not to invent experience, and fact-checks every line.
Match scores and verdicts. Automated checks estimate how well a job fits your CV and preferences. They also flag adverts that say they need existing right to work in the UK or security clearance, before you spend any credits. The flag is about what the advert says. It is not a check of your own right to work or visa. These are estimates to help you decide. They are not advice and not a guarantee of anything.
Job ranking. We rank jobs against the preferences you gave us. You can change those preferences at any time.

What the tools never do. They never guess visa, right-to-work or salary answers. They do not decide whether you get a job (the employer does) or a visa (the Home Office does).

You approve every application. Nothing is sent to an employer without your go-ahead, and review before send is on by default. We do not make any decision about you that has a legal or similarly significant effect based solely on automated processing.

AI can make mistakes. Check every CV, letter and answer before you send it. If something is wrong, change it in the app or tell us, and you can ask us to correct information about you.

Your rights. If you think a decision about you was made solely by automated means and it significantly affects you, you have the right to be told about it, to give us your view, to ask for a person to review it, and to challenge it. Email privacy@visavi.uk.

We use other companies to run Visavi. The main ones are:

Railway: hosts the app’s servers and database, and this website.
Cloudflare R2: stores CV files and generated PDFs.
Resend: sends account email and application email, receives mail sent to your application address and to our privacy and creators addresses, holds the website waitlist, and delivers creators applications to us.
Our business email provider: hosts the inbox where emails to hello@visavi.uk, privacy@visavi.uk and our creators address are read and answered.
DeepSeek: reads CV and job-description text when we parse a CV or tailor a CV or cover letter.
TypeSafe: checks job-description text when we decide whether a role is a fit.
Our PDF provider: a document compile service that turns a tailored CV into a PDF. The CV text is sent for that compile.
RevenueCat: records which store product you bought so we can grant the right credits.
Notification delivery services: if an app notification, such as an alert for new roles, is sent from our servers, the service that delivers it to your phone.
PostHog: counts website visits in aggregate, without cookies, when website analytics is switched on.

Apple and Google provide sign-in, take all payments and handle store refunds. They do this as separate controllers under their own privacy policies.

Employers. An employer receives the application you choose to send, including the CV and letter you include, the answers you approve, and the application email address we create for that job. If the employer uses a recruitment system or job board to take applications, that system receives your application too, under the employer’s or the job board’s own privacy notice. We share it only when you tell us to. We do not give employers the rest of your account. Once an employer has your application, it is responsible for its own copy.

Others. We also share information:

if the law requires it, for example a court order or a lawful request from an authority;
to protect Visavi, our users, or someone else from harm, fraud or abuse;
with professional advisers such as lawyers and accountants, who must keep it confidential; and
if Ramen Labs Ltd is sold, merges or transfers the Visavi business, with the new owner, who must use it in line with this policy.

We do not sell personal information, and we do not share it with advertisers.

Where it is processed

We are in the United Kingdom. Some providers process information in the UK, the European Economic Area, the United States, and elsewhere.

Where your information is processed outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement or UK Addendum. That means one of these:

the country is covered by UK adequacy regulations, which means the UK government has decided its protection is not materially lower than the UK’s. This includes the European Economic Area, and US companies certified under the UK Extension to the EU-US Data Privacy Framework; or
we sign the International Data Transfer Agreement (IDTA) issued by the Information Commissioner, or the UK Addendum to the European Commission’s standard contractual clauses, and check the transfer will give your information protection that is not materially lower than in the UK.

DeepSeek processes CV and job text outside the United Kingdom.

Email privacy@visavi.uk if you want to know which providers process your information, where they do it and which safeguard applies to a particular provider, or want a copy of it.

How long we keep it

We keep personal information only for as long as we need it.

Your account. Account, profile, saved answers, searches and activity, CV, letters, applications, application email addresses and the credit ledger stay while your account is open, until you delete them or delete the account. When you delete the account in the app, deletion starts immediately. Email deletion requests are finished within 30 days. The delete your Visavi account page lists exactly what is deleted and what is kept.
Employer-mail records (sender, subject, snippet, and label) are deleted after 30 days.
Employer messages in your app inbox are never kept longer than your account, and are deleted with it.
Security logs, including IP address, are kept for up to 30 days after they are written, including after an account is deleted, then removed. If we need a specific log to investigate abuse or a security incident, we keep that log only until the investigation is over.
Email delivery records that our email provider keeps for emails we send and receive are deleted after a limited period under its terms.
Website form protection. IP addresses and the email address entered on the waitlist or creators form are kept only in the website’s working memory, never written to storage, and cleared when the server restarts.
AI and PDF providers. Our AI and document providers keep the text we send them for a limited period under their terms.
Waitlist. If you do not confirm, the confirm link expires after 14 days and we do not email you again unless you sign up again. We keep an unconfirmed sign-up only for a reasonable time, then delete it. If you leave, we stop emailing you straight away. We keep your email address marked as unsubscribed, so we do not write to you again by mistake. The page you joined from, your device type and any referral code stay on that record until we delete the waitlist. Email privacy@visavi.uk if you want it erased completely. We delete the waitlist within a reasonable time after launch, once we no longer need it for launch emails, the launch order and referral rewards. If you open a Visavi account, your account information is kept as described above.
Creators applications we do not take forward are kept only for as long as we need them to consider your application and answer any questions about it. Creator records, including video checks and payments, are kept while you take part. Afterwards we keep payment records for as long as the law requires for tax, and other records only for as long as we may need them to answer a complaint or legal claim.
Emails to us about support or privacy are kept for as long as we need them to deal with what you asked and any follow-up.
Website analytics are kept in aggregate only for as long as we need them to understand and improve the site.
Early-tester ratings: for as long as we publish the rating statement, and afterwards for as long as we may need them to answer a complaint or legal claim about it.
Testimonials are used until you withdraw your permission. We then stop using them, and keep the record of your permission and your original words only for as long as we may need to show they were genuine.
Purchase records. Apple and Google keep their own payment records under their policies. We do not keep your card number because we never receive it. We delete our copy of your credit history with the account.

We may keep specific information for longer where the law requires it, or where we need it to establish, exercise or defend a legal claim, and only for as long as that need lasts.

How we protect it

We use technical and organisational measures to protect your information, including:

encrypted connections (HTTPS) between your device, this website, the app and our servers;
passwords stored only as a hash, which we cannot read back;
access to personal information limited to people and providers who need it to run Visavi; and
security settings on this website and limits on how often forms can be sent.

No system is completely secure. Please keep your sign-in details safe and tell us straight away at privacy@visavi.uk if you think someone else has used your account. If a personal data breach happens, we will tell the Information Commissioner’s Office within 72 hours where the law requires it, and tell you without undue delay if it is likely to put your rights at high risk.

Your rights

If UK data protection law applies to you, you can ask us to:

give you a copy of your information (you can also export your account in the app);
correct it if it is wrong or incomplete;
delete it (you can delete the account in the app by confirming your email);
restrict how we use it, for example while we check something you have told us is wrong;
send you information you provided, in a portable form, or send it to another organisation where that is technically possible;
withdraw your consent where we rely on it, such as for waitlist emails or a testimonial. This does not affect what we did before you withdrew;
review an automated decision, as described in AI and automated decisions.

Your right to object. Where we use your information because of our legitimate interests, you can object at any time. Tell us why at privacy@visavi.uk, and we will stop unless we have strong legitimate reasons that override your interests, or we need it for a legal claim. You can object to website analytics straight away with the link in the footer. If we ever send you marketing, you can always object, and we will stop.

Some rights depend on the lawful basis we use, and some have legal exceptions. If we cannot do what you ask, we will explain why.

How to use your rights. To delete the account, follow the steps on the delete your Visavi account page. For any other right, email privacy@visavi.uk. We may need to confirm it is your account. It is free. If a request is clearly unfounded or excessive, the law lets us refuse it or charge a reasonable fee, and we will tell you why.

How long we take. We reply within one month of receiving your request. If a request is complex, or you send several, we can extend this by up to two more months, and we will tell you within the first month. If we need to confirm who you are or need more information to find what you asked for, the month starts when we have it.

Complaints

If you are unhappy with how we have handled your information, please tell us first at privacy@visavi.uk, with the word ‘Complaint’ in the subject. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection. The ICO usually expects you to contact us first:

online at ico.org.uk/make-a-complaint;
by phone on 0303 123 1113; or
by post to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Children

Visavi is for adults applying for work. You must be 18 or over to use the app, join the waitlist or apply to Visavi Creators. It is not directed at anyone under 18.

We do not knowingly collect information about anyone under 18, in the app, on the waitlist or through a creators application. If we find out we have, we will delete it. If you believe we have information about a child, email privacy@visavi.uk and we will delete it.

Cookies and storage on your device

visavi.uk does not set any cookies. It does not use advertising cookies, analytics cookies or cross-site tracking.

Your analytics choice. If you turn analytics off with the link in the footer, the site saves one setting in your browser’s local storage, called visavi-analytics-off, so it remembers your choice. This setting is strictly necessary to remember the choice you asked us to remember, so it does not need consent. That is one of only two things the site stores on your device. Clearing your browser’s data for this site removes it, which turns analytics back on.
App banner. On Android phones, once the app is in Google Play, the site may show a small banner linking to it. If you close it, the site saves one setting in local storage, called visavi-app-banner, so the banner does not come back. This only remembers the choice you made, so it does not need consent. Clearing your browser’s data for this site removes it.
Analytics. When website analytics is switched on, PostHog runs in cookieless mode. It keeps what it needs in your browser’s memory for that visit only and stores nothing on your device. It does read basic technical details your browser sends, such as browser type and screen size. PECR, as amended by the Data (Use and Access) Act 2025, allows this kind of measurement without consent when it is used only to understand and improve our own website, people get clear information about it, and they have a simple, free way to object. This section is that information. The footer link on every page is that way to object.

In the app. The app stores on your phone what it needs to work, such as keeping you signed in and making purchases work. If the app needs to store or read anything else on your phone that is not strictly necessary, and the law requires your consent for it, we will ask first.

If we ever want to use cookies or similar technologies that need your consent, we will ask first, and you can say no.

Emails we send

Waitlist. Joining the waitlist is your request to hear about the launch. We send one email to confirm it is really you, and nothing more unless you confirm. After that we only write about the launch, and nothing else unless you ask.
Unsubscribing. Every email has an unsubscribe link. Leaving takes one more tap to confirm, so link-scanning software cannot unsubscribe you by mistake. Many email apps also show their own one-click unsubscribe button. Leaving is free and takes effect straight away.
Account and application emails. If you have a Visavi account, we send the emails you need to use the service, such as account emails and emails about your applications. These are not marketing.
Invite links. We do not send emails to friends you invite, and we do not ask you for their details. If you share your link, you choose who gets it.

We do not send marketing by text message, and we never sell or rent our email list.

Changes

If we change this policy, we will update the date at the top. If a change materially affects how we use your information, we will tell you in the app or by email. If we want to use your information for a new purpose, we will tell you before we start, and ask for your consent where the law requires it.

Contact

Ramen Labs Ltd
Email: privacy@visavi.uk