Talent Visa Journey

Vulnerability disclosure

How to tell us about a security problem, what we ask of you, and what has not been checked yet.

This page is still awaiting review by a qualified lawyer. Last updated .

1. What this covers

Talent Visa Journey runs the public website at talentvisajourney.com, the member app and the server behind them, including their subdomains such as app., api. and my.talentvisajourney.com.

The document vault, the sharing features and sign-in are in scope and are the areas we most want to hear about.

2. How to report

Send a short description of the problem, the steps to reproduce it and the address or screen affected to: hello@talentvisajourney.com

The same contact is published in a standard machine-readable file at /.well-known/security.txt

Write in English or Turkish. We read each report that arrives at that address.

3. What we ask of you

  • Test only your own accounts and your own data. Do not open, change or delete another person’s documents, profile or messages.
  • Do not degrade the service for others: no denial-of-service tests, no bulk scanning, no spam.
  • Do not use social engineering against our staff or members.
  • Give us a reasonable time to fix a problem before you publish it.

4. What is not yet true

Documents in the vault are end-to-end encrypted in your browser or app before they reach our servers. An independent cryptographic review has not yet been carried out. We do not describe the vault as audited.

You are talking to an AI assistant.

Where your question goes

Answers come from this site’s published pages. An answer is not a chance of acceptance. A question you type is sent to a language model, run by Cloudflare, together with passages from this site’s own pages, so that it can be answered from them. Cloudflare states in writing that it does not use what it receives to train its models; it publishes no retention period for it. While the route and stage chips are shown above the field, the route code, the stage code, whether you are preparing as a member or as a professional, and the page language are sent with your question, in the same request as your IP address, so they can be linked to you; remove both chips and none of the four is sent.

  1. Answer

    Ask me anything about these pages. I answer from what this site publishes, and I name the page I took it from.

Write to us