Privacy policy

Controller and contact

Luis Junior controls personal data. Data protection officer: Luis Junior, ajuda@curriculoparavaga.com.br. Support: ajuda@curriculoparavaga.com.br.

Data and purposes

We process account and contact information; résumés, job descriptions, uploaded and generated files; selfies and photographs if you choose that service; payment and order records; and usage, security and support data. We use them to provide the requested service, fulfill orders, answer requests, protect the service and meet legal obligations. Contract performance supports necessary service processing; security may rely on legitimate interests. Analytics cookies (PostHog and Google Analytics), advertising cookies (Google Ads and Meta), and selfie processing require consent. You can withdraw consent through the relevant settings. We consider adolescents’ best interests; headshots are for adults only.

AI, providers and international transfers

OpenRouter in the United States processes texts and files through permitted text providers OpenAI and Microsoft Azure, and sends photos to Google. They act as processors. The data_collection: deny setting prohibits using the data to train models. The permitted provider list must be updated when it changes. The PlanetScale database is hosted in AWS us-east-1 in the United States. Storage there and other transfers outside Brazil are international transfers, with contractual safeguards planned. The processors and subprocessors include Cloudflare, PlanetScale, OpenRouter, OpenAI, Microsoft Azure, Google, Stripe, PostHog and Sentry; Meta participates in advertising measurement with consent. Contracts and applicable clauses need confirmation before publication.

Retention

Anonymous users without a paid order are deleted 30 days after their last session; draft orders after 30 days. Uploads other than selfies are deleted after 30 days, résumé exports after 365 days, and data-export and download ZIPs after 7 days. A selfie is deleted within 24 hours after delivery or 7 days after upload if unpaid. Generated photos last 180 days unless used by a résumé; résumé photos remain while used and are deleted 30 days after they stop being used.

We keep the latest 50 versions of a résumé; deleted résumés are permanently removed after 30 days. Recruiter-glance data lasts 90 days, company research until 30 days after expiry, and quiz answers for account holders 2 years; anonymous quiz answers and reports are removed with the user. AI run records last 180 days. Order inputs are cleared after 2 years; financial records, customer name, CPF and order email remain for 5 years for tax obligations. Audit logs last 5 years; sign-in and change-email logs and completed workflow records last 30 days. Expired temporary codes and rate-limit windows older than 2 days are removed. Other account data is retained as needed for the service, subject to these rules and deletion requests.

Your rights

Under Brazil’s LGPD, you may request access, correction, portability, deletion and information about sharing, and withdraw consent. In Account › Privacy you can request a ZIP within 24 hours or delete your account; deletion is completed within 15 days, subject to legally required retention. Contact ajuda@curriculoparavaga.com.br or petition the Brazilian data protection authority, ANPD.