Privacy Policy
Last updated: August 27, 2026
Effective date: August 27, 2026 Version: 1.21
This English text is the authorized English version of the Brazilian Portuguese Privacy Policy, version 1.21. The Portuguese original remains the controlling legal text. If the two texts conflict, the Portuguese version prevails to the extent permitted by applicable law.
This Privacy Policy explains how CareersForge processes personal data under Brazil's General Data Protection Law (Lei Geral de Proteção de Dados, Law 13,709/2018 — “LGPD”) and the Brazilian Internet Civil Rights Framework (Law 12,965/2014).
By using CareersForge, you acknowledge that you have read and understood this Policy.
1. Who we are
CareersForge is an AI-based career platform currently operating in beta.
Data controller and data-protection contact: Carlos Jacon
Email: [email protected]
The controller currently operates as an individual in Brazil. This English translation does not change the controller, establish a United States entity, or change the governing legal framework described in the Terms.
2. Data we collect
We collect data reasonably necessary to operate, secure, support, and improve the service.
2.1 Registration and authentication
- email address and authentication-provider identifier;
- name and profile image when supplied by the authentication provider;
- login timestamps, authentication events, and security metadata.
We do not receive your Google or Microsoft password.
2.2 Professional information you provide
- resume, LinkedIn export, professional documents, and pasted text;
- employment history, education, skills, certifications, projects, publications, languages, and contact details;
- career goals, preferred roles, professional summary, and other Master Profile information;
- job descriptions and links that you choose to analyze.
2.3 Information generated by the platform
- Master Profile, diagnostics, Match Scores, resumes, LinkedIn profiles, cover letters, interview preparation, simulations, feedback, and career directions;
- Behavioral Profile inferences and corrections you choose to make;
- quality, provenance, version, and generation metadata required to deliver and audit an artifact.
2.4 Technical and usage data
- IP address, user agent, timestamps, request and security logs;
- page and product events, only under the applicable consent and minimization rules;
- error codes, performance, reliability, and anti-abuse signals;
- cookies needed for authentication, security, preferences, and consent.
We prohibit sending free-form professional content or directly identifying personal data to product analytics or error telemetry. Operational systems may process the minimum identifiers needed to provide and secure the service.
2.5 Product-specific data
Some features process additional data you deliberately provide, such as an SSI screenshot, existing LinkedIn profile, interview transcript, job application status, support message, or feedback. The relevant interface explains the input and purpose.
2.6 Authenticated voice simulation
When you start a voice simulation, audio is processed in real time by the selected provider, currently Google Gemini or OpenAI Realtime. We store an audio recording only when you explicitly opt in during that session. It is kept in private storage, is never issued a public URL, and is available only through your authenticated account. It is deleted automatically after 90 days, or sooner if you delete the simulation, interview preparation, or account. Conversation text may be stored to generate feedback and let you review the session. Technical metadata may be retained for security, reliability, rate limiting, and cost control.
2.7 Anonymous public voice demo
The public demo, when available, is separate from authenticated simulation. It processes microphone audio transiently, does not store the audio, role, transcript, or feedback, and retains only minimized technical and anti-abuse metadata for up to 90 days. It is informational and is not an employment assessment.
3. Why we use data and our legal bases
| Data or activity | Purpose | Primary LGPD basis |
|---|---|---|
| Account and authentication | Provide and secure access | Performance of contract; legal obligation and legitimate interest for security |
| Resume, interview, and professional documents | Build the Master Profile and requested materials | Consent and performance of contract, depending on the action |
| Master Profile and generated materials | Deliver, save, edit, and export the service | Performance of contract |
| Job descriptions | Match and tailor professional materials | Consent and performance of contract |
| Payment and subscription data | Process payment, reconcile access, issue records, and manage plans | Performance of contract and legal obligation |
| Product analytics | Understand use and improve the service | Consent |
| Security logs and access records | Prevent fraud, investigate incidents, and comply with law | Legal obligation and legitimate interest |
| AI reliability and quality metadata | Validate outputs and operate safely | Legitimate interest, with data minimization |
| Behavioral Profile | Provide editable self-positioning insight, not hiring decisions | Performance of contract and legitimate interest |
| Career directions | Suggest exploratory paths | Performance of contract and legitimate interest |
| Job Radar | Find public vacancies and estimate technical affinity | Performance of contract |
| Support and legal requests | Respond, document, and exercise rights | Performance of contract, legal obligation, and regular exercise of rights |
Where consent is the basis, you may withdraw it for future processing. Withdrawal does not invalidate processing lawfully performed before withdrawal or processing supported by another applicable legal basis.
4. Service providers and sharing
CareersForge does not sell or rent personal data. We use service providers needed to operate the platform:
- Supabase: database and authentication infrastructure in the United States;
- Google Gemini API: AI processing in supported product flows;
- OpenAI: Master Profile construction and enrichment, resume and LinkedIn generation, and selected voice and feedback flows;
- Vercel: application hosting and delivery;
- PostHog: consented product analytics, hosted in the European Union under the current configuration;
- Cloudflare: DNS, email routing, and network protection;
- Stripe: payment and subscription processing under PCI-DSS controls;
- Resend: transactional email;
- Langfuse: AI operational observability under flow-specific minimization controls;
- Sentry: error monitoring with sensitive-field sanitization.
Providers act under their applicable contracts, data-processing terms, security controls, and subprocessor arrangements. We may also disclose data when legally required, to protect users or the service, to prevent fraud, or in connection with the regular exercise of legal rights.
4.1 AI providers
CareersForge sends only the information needed for the requested AI task. Master Profile construction may process resume text, a LinkedIn export, optional documents, and interview answers. Updating an experience may process the existing experience and the related interview text. Resume and LinkedIn generation may process the Master Profile and the job context you provide.
OpenAI API requests use store: false where supported. Provider security and abuse-monitoring logs or temporary caches may still apply under the provider's terms. CareersForge does not opt customer API content into model training. Google and OpenAI may use subprocessors and international infrastructure under their respective data-processing terms.
4.2 AI observability
Operational traces may measure model, latency, token usage, cost, status, and quality codes. Master Profile, resume, and LinkedIn flows use redacted observability and must not send prompt or response content to Langfuse. Other flows follow their documented minimization contract. Direct identifiers and free-form professional content are prohibited from general telemetry.
4.3 Error monitoring
Sentry and application logs may receive error type, route, release, runtime, and sanitized diagnostic context. Passwords, tokens, resumes, interview answers, job descriptions, names, and email addresses must not be intentionally included.
4.4 Public job sources
Job Radar reads public vacancy data from identified third-party sources. It does not send your Master Profile or other personal data to employers or vacancy sources. CareersForge stores the public vacancy data needed for matching, provenance, freshness, and attribution.
5. AI-assisted profiling and automated decisions
CareersForge uses AI to generate suggestions and explain professional information. It does not make an employer's hiring decision, automatically reject a user, determine employment eligibility, or set prices based on a Behavioral Profile.
5.1 Behavioral Profile
The Behavioral Profile is an editable self-positioning aid inferred from your interview when there is sufficient material and an active eligible plan. It is not a clinical or psychological test. You may review, adjust, discard, or delete it. It is not used to determine billing, product eligibility, technical vacancy affinity, vacancy order, or hiring outcomes.
5.2 Career directions
Career directions combine professional facts, the Behavioral Profile, goals, and an optional exploration brief to suggest natural, adjacent, and ambitious paths. They expand options; they do not certify suitability or restrict opportunities.
5.3 Job Radar
Job Radar estimates technical affinity from the Master Profile and public vacancy requirements. Behavioral context, when requested, is a separate explanation and does not change eligibility, technical score, order, or highlighting. You decide whether to open or apply to any vacancy.
You may ask for information about these processes or request review through [email protected].
6. International data transfers
Providers may process data outside Brazil, including in the United States and European Union. CareersForge uses provider data-processing agreements, contractual safeguards, security measures, and other mechanisms applicable to the purpose and provider. OpenAI's Data Processing Addendum describes its processor role, international transfers, and subprocessors.
Using the English interface or paying in USD does not by itself establish residence, citizenship, or a new controller. Service market, interface language, billing country, and payment currency are separate attributes.
7. Retention
We retain data while your account exists and while reasonably needed to deliver the service, comply with law, prevent fraud, resolve disputes, process billing, or preserve minimum security and audit records.
| Account state or data | Retention approach |
|---|---|
| Never-accessed registration without professional data | Deletion after 30 days, without prior notice |
| Accessed but empty account | Deletion after 3 months of inactivity, with notice 7 days before deletion |
| Incomplete onboarding with submitted material | Deletion after 6 months of inactivity, with notices 30, 7, and 1 day before deletion |
| Completed Master Profile without an active paid plan or valid balance | Deletion after 12 months of inactivity, with notices 30, 7, and 1 day before deletion |
| Active paid plan or unexpired paid credit balance | No automatic inactivity deletion while active or valid |
Relevant activity includes login, generation or download, Master Profile updates, interviews, and paid-feature use. Complimentary access alone does not prevent inactivity deletion. Before deletion, CareersForge rechecks activity, payment, valid balances, and other reactivation signals.
After account deletion, associated data is removed within up to 30 days, except where retention is reasonably necessary for legal obligations, security, fraud prevention, dispute defense, billing, or minimum audit records. Stripe and financial providers retain transaction data under their own legal and contractual obligations. Access logs may be retained for the legally applicable period.
Consent proofs record the server-resolved legal version, presented locale, and document hash. They remain tied to the account and are deleted or retained according to the approved account-deletion and legal-evidence rules.
8. Your rights
Subject to the LGPD and other applicable mandatory law, you may request:
- confirmation of processing and access to your data;
- correction of incomplete, inaccurate, or outdated data;
- information about sharing and service providers;
- portability in a technically feasible format;
- anonymization, blocking, or deletion where legally applicable;
- withdrawal of consent for future processing;
- information about the consequences of withholding consent;
- review or explanation of AI-assisted processes;
- deletion of your account.
Send requests to [email protected]. We may verify your identity before fulfilling a request. We aim to respond promptly and observe the applicable legal deadline; the current operational target for structured access and portability is up to 15 days.
You may delete your account directly through Master Profile → Account → Delete my account. Deletion does not depend on an international market or feature-availability gate.
9. Security
CareersForge uses measures including HTTPS, encryption at rest through infrastructure providers, authenticated access, row-level database controls, server-only privileged credentials, input validation, rate limiting, signed links, restricted administrative access, monitoring, backups, and incident investigation.
No system is completely secure. Contact [email protected] if you suspect unauthorized access or a security incident involving your account.
10. Cookies and similar technologies
We use:
- strictly necessary cookies for authentication, security, routing, and core operation;
- analytics cookies or storage only after the applicable consent, to understand product use and improve the service.
We do not use advertising cookies or browser fingerprinting under the current policy. You may change the revocable analytics choice through the cookie controls without affecting necessary authentication and security storage.
11. Children
CareersForge is not directed to anyone under 18. We do not intentionally collect children's data. If we learn that data was submitted by a child without the required authorization, we will take appropriate steps to remove it.
12. Changes to this Policy
We may update this Policy for product, provider, legal, or operational changes. Material changes receive a new legal version, are communicated when required, and may require renewed acceptance. An equivalent translation preserves the same legal version while the consent record identifies the language actually presented and its document hash.
13. Version history
- v1.21 (August 27, 2026): versioned together with Terms v1.21, which clarify the 60-second voice-simulation quota grace rule. This Policy adds no new data category, purpose, legal basis, or subprocessor.
- v1.20 (August 13, 2026): registered the authorized English documents, clarified the separation of interface language, service market, billing country, and currency, and aligned this Policy with the BRL and USD commercial catalogs in the Terms. It does not create a new personal-data category or change the controller. Material change requiring renewed acceptance.
- v1.19 (August 7, 2026): aligned the policy with the public Salary Research beta and clarified that public aggregate salary research does not create a new category of user-provided personal data.
- v1.18 (August 3, 2026): added OpenAI Realtime and OpenAI as possible authenticated voice and feedback processors while preserving the no-audio-recording contract.
- v1.17 (August 3, 2026): documented the separate public voice demo and its minimized retention.
- v1.16 (August 3, 2026): extended OpenAI processing to Master Profile construction and enrichment.
- v1.15 (August 3, 2026): documented OpenAI processing for resume and LinkedIn generation.
- Earlier versions are preserved in the controlling Portuguese document.
14. Contact
For questions, privacy rights, deletion, access, corrections, portability, or security concerns:
Email: [email protected]
Controller: Carlos Jacon