THUSA App Privacy Policy

Last updated: 8 October 2026

This privacy policy covers the THUSA App website, Android app and iPhone app.

1. Who we are

THUSA INC operates the THUSA App to help eligible candidates maintain recruitment profiles and CVs for employment opportunities with employers in the United States.

THUSA does not offer employment or visa sponsorship. To register, you must be a U.S. citizen, a Green Card holder, or a South African refugee approved for resettlement in the United States. The service is intended for adults aged 18 and older.

THUSA INC is responsible for the personal information it processes through the service.

Address: 750 E Interstate 30 Ste 135, Rockwall, TX 75087, United States
Privacy and support contact: support@thusa.app

2. Information we process

We process information supplied when you create or claim a profile, update it, upload a CV or contact THUSA. This includes:

• Your name, account email, telephone number, alternative contact details and social profile links.
• Your country, state or province, city, relocation preferences and employment status.
• Preferred jobs, skills, qualifications, experience and information contained in your CV.
• Relevant eligibility and pathway information. For refugee candidates, this may include approval, destination, travel and work-authorisation status details.
• Support messages, replies and attachments.
• Profile status, recruitment activity and administrative information associated with your candidate record.

Some candidate profiles were created from recruitment information previously supplied to THUSA. Candidates can claim and update their existing profiles.

Please share another person's contact information only with their permission. Please avoid including sensitive information in your CV or support messages unless it is needed for the recruitment or support request.

We also process account identifiers, authentication and session information, and technical information needed to operate and protect the service. Our providers may process IP addresses, browser or app information, request times, routes, status codes, errors and security or delivery logs.

When you enable push notifications, we process the device or browser registration needed to deliver them. This includes a notification token or subscription and, for Android notifications, an app installation identifier. Google also processes Firebase installation identifiers used for notification delivery.

3. How we use information

We use information for recruitment and for providing the service that supports it, including:

• Creating, verifying and securing accounts and maintaining candidate profiles.
• Letting candidates review details and upload or replace CVs.
• Assessing recruitment suitability and sharing CVs and relevant details for suitable opportunities.
• Contacting candidates about their profiles, recruitment activity and potential employment opportunities.
• Sending profile-review reminders and service notifications.
• Handling support, correction, access and deletion requests.
• Investigating errors, misuse and security incidents.

We do not sell candidate information or use it for advertising, newsletters, fundraising or unrelated promotions. Maintaining a THUSA profile does not guarantee employment.

4. Sharing with employers and recruitment partners

Joining THUSA authorises THUSA to share your CV and relevant profile details with employers and recruitment partners for suitable recruitment opportunities. These recipients do not receive unrestricted access to your entire THUSA profile. Information shared may include relevant contact details, skills, experience, job preferences and eligibility information.

Deleting your THUSA account does not automatically delete copies already shared with employers or recruitment partners. These recipients control copies they hold independently. Questions about previously shared information can be sent to support@thusa.app. THUSA does not promise that it can remove records held by another organisation.

5. Authorised access and service providers

Authorised THUSA personnel access information for recruitment, administration and support. THUSA's recruitment operations are based in the United States. App administration and support currently include temporary access by an authorised support provider in South Africa.

We use service providers to operate the service:

When service providers process personal information on THUSA’s behalf, we require them to use it for authorised service purposes and protect it consistently with this policy and applicable data-protection requirements.

Incoming support correspondence is managed through THUSA's support interface and stored in its database. Email providers may retain separate copies or delivery records.

We may disclose information when required by applicable law or valid legal process. This does not create a routine practice of retaining deleted candidate profiles.

6. Notifications, permissions and local storage

On supported devices and app versions, push notifications are available in the THUSA App to alert you to profile-review reminders and relevant recruitment or service updates. Receiving them is optional. The core account and profile features remain available without push notifications.

On supported devices, the mobile app offers Allow Notifications and Not Now when you first sign in or access a newly created or claimed profile. If notifications are already enabled on that device, the prompt is skipped. The app requests device notification permission only when you choose to enable notifications. Choosing Not Now lets you continue without enabling them.

We remember your choice for your account on that device so the introduction does not appear at every sign-in. You can enable or disable notifications later through Settings in the app. Your device or browser settings also control whether notifications are permitted.

Android notifications use Google Firebase Cloud Messaging, and, where available, iPhone notifications are delivered through Apple Push Notification service. These providers process the device registration information needed to route notifications. Android notification messages use general wording rather than including CV contents or detailed candidate profile information. Opening a notification retrieves your in-app reminder through your authenticated account.

The website uses authentication cookies and browser storage needed for sign-in and service operation. Mobile sign-in credentials and the notification introduction preference are stored using the device's secure storage. Choosing a CV allows the app to upload the selected file; it does not give THUSA unrestricted access to your device's files.

We do not use advertising trackers or general-purpose analytics in the THUSA App. Firebase Analytics collection is disabled for Android notifications. Infrastructure security, request and delivery records are still processed.

7. Where information is processed and security

THUSA's candidate database is hosted in the United States. Service providers may also process information through infrastructure or support personnel in other countries. Resend documents U.S. storage for customer email data; Firebase notification services use global infrastructure. Information may therefore be processed outside the country where a candidate lives, including the United States and the temporary support access from South Africa described above.

We use encrypted network connections, authentication, access controls and secure device credential storage to help protect information. No electronic service can guarantee absolute security.

8. Retention

Candidate profiles and associated recruitment information remain in the active THUSA App until the candidate requests account deletion. There is no automatic deletion solely because an account has been inactive.

Support correspondence is retained for up to 12 months from the last message in the support conversation. If an account is deleted earlier, THUSA App Support will remove any remaining associated support correspondence from THUSA's active support records within seven calendar days. Records already removed by the account-deletion process do not need to be retained for that period.

Providers may retain separate email delivery records, technical logs, installation identifiers and backup copies under their own service retention arrangements. Removing an active candidate profile does not mean every provider's operational copy disappears immediately.

9. Deleting your account

You can request deletion through Settings → Delete My Account in supported mobile app versions. If this option is unavailable or you cannot access your account, use the external deletion-request page or contact support@thusa.app. In-app deletion requires authentication and confirmation to protect against unauthorised requests.

Once successfully completed, account deletion removes your sign-in account, candidate profile, uploaded CV, admin candidate card and associated personal information from the active THUSA App systems. It removes access to that account through both the website and mobile apps. The app reports if deletion is incomplete so the request can be retried or referred to support.

THUSA does not intentionally keep a copy of your deleted candidate profile or CV for ongoing recruitment. Support correspondence follows the shorter deletion deadline stated above. Previously shared employer or partner copies and provider operational records are covered separately in this policy.

You can contact support@thusa.app for deletion assistance without keeping the app installed. We may verify your identity before acting.

External deletion requests: visit THUSA App account deletion for instructions and a button to draft a deletion request to support@thusa.app. You do not need to install the app or sign in to this page. Send the email to submit your request; THUSA App Support verifies account ownership before processing deletion.

10. Your choices and privacy requests

You can review and update your profile, manage optional notifications and request account deletion. For access, correction, deletion assistance or a privacy concern, contact support@thusa.app.

To withdraw your authorisation for future recruitment sharing, contact support@thusa.app or request account deletion. Withdrawal does not undo sharing that took place before your request. Because recruitment is the purpose of THUSA, withdrawing this authorisation may prevent us from considering you for further opportunities.

THUSA aims to acknowledge emailed privacy requests within five business days. This is an acknowledgement target, not a promise that every request will be completed within that time. We may ask for information needed to verify identity and explain any additional time needed to handle the request. Applicable legal rights and deadlines remain unaffected.

Depending on applicable law, you may have other rights concerning your personal information, including raising a complaint with the relevant regulator.

11. Changes to this policy

We may update this policy when the service or its information practices change. We will publish the updated policy with its last-updated date and communicate material changes where required.