Privacy Policy

We collect information you provide directly, information generated by your use of the platform, and information from third-party services you connect.

• To create, verify, and maintain your account
• To power the talent-matching algorithm that surfaces relevant employees to companies and vice versa
• To enable real-time messaging between matched users
• To send push notifications about new matches, messages, and platform updates
• To generate AI-assisted resume drafts via the Resume Builder feature
• To personalise your feed and search results based on your profile and activity
• To detect fraud, enforce our Terms of Service, and maintain platform security
• To send transactional emails such as email verification, password reset, and account activity alerts
• To improve and develop new features through aggregated, anonymised analytics

We do not sell your personal data to third parties or use it for unrelated advertising purposes.

We do not sell or rent your personal data. We share information only in the following limited circumstances:

• With other users: Your public profile (name, job, skills, location, availability, description) is visible to the other user type — employees can be seen by companies and companies can be seen by employees — to facilitate matching and hiring.
• With service providers: We use trusted infrastructure providers (cloud hosting, database, email delivery) who process data on our behalf under strict data processing agreements.
• With social login providers: When you authenticate via Google, Facebook, LinkedIn, or GitHub, those services receive information according to their own privacy policies.
• For legal compliance: We may disclose data when required by Cambodian law, court orders, or to protect the rights and safety of our users.
• During business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity.

Apsara Talent integrates the following third-party services. Each has its own privacy policy that governs their use of your data:

• Google Firebase: Used for push notification delivery (Firebase Cloud Messaging). Your device token is stored securely and used solely for notifications.
• Google OAuth / Google Sign-In: Optional authentication method. We receive your name, email, and profile picture from Google if you choose this option.
• Facebook Login: Optional authentication method governed by Meta's Data Policy.
• LinkedIn OAuth: Optional authentication for professional identity verification.
• GitHub OAuth: Optional authentication for technical professionals.
• Cloud Infrastructure (Railway): Our API and database are hosted on Railway. Data is processed in secure, industry-standard data centers.

We retain your personal data for as long as your account is active or as needed to provide you with our services.

• Account data is retained for the lifetime of your account.
• Chat messages are stored to provide a persistent messaging history. You may delete individual conversations.
• After account deletion, we retain certain data for up to 30 days before permanent erasure to allow for account recovery, except where longer retention is required by law.
• Anonymised, aggregated analytics data may be retained indefinitely as it cannot be linked to any individual.

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS/TLS encryption.
• Passwords are hashed using a strong one-way algorithm and are never stored in plain text.
• Optional Two-Factor Authentication (2FA) is available to add an extra layer of account security.
• Access to personal data is restricted to authorised personnel only.
• We perform regular security reviews of our infrastructure.

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and enable 2FA.

You have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information via your profile settings at any time.
• Deletion: Request deletion of your account and personal data.
• Portability: Request an export of your data in a structured, machine-readable format.
• Objection: Object to the processing of your data for specific purposes.
• Withdraw Consent: Withdraw consent for optional data processing at any time without affecting prior processing.

To exercise any of these rights, please contact us at privacy@apsaratalent.com. We will respond within 30 days.

We use browser cookies and local storage to:

• Maintain your authentication session securely.
• Remember your theme preference (light / dark / system).
• Remember your language preference (English / ភាសាខ្មែរ).
• Store cached data locally to improve page load performance.

We do not use third-party advertising cookies. You can clear cookies and local storage via your browser settings at any time, though this will sign you out of your account.

Apsara Talent is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that a user is under 18, we will promptly delete their account and associated data. If you believe a minor has registered an account, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to registered users via email or in-app notification.

Your continued use of Apsara Talent after the effective date of the updated policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: