Privacy Policy

We collect the following data: registration information (name, email, profile photo via Google OAuth); resume data (professional experience, educational background, skills, certifications); usage data (platform interactions, templates used, exports made).

We do not collect sensitive data such as racial origin, religious beliefs or sexual orientation. Resume data is voluntarily provided by the user.

Your data is used to: provide and maintain the resume creation service; generate content suggestions with artificial intelligence; perform ATS analysis of your resume; process payments and export credits; send account communications (email verification, password recovery).

We do not sell, rent or share your personal data with third parties for marketing purposes.

Your data is securely stored using Supabase, with encryption in transit (TLS/SSL) and at rest. Passwords are processed with secure hashing and never stored in plain text.

We implement technical and organizational security measures, including PKCE authentication, CSRF protection and request rate limiting.

We use the following third-party services: Supabase (database and authentication); Google OAuth (social login); MercadoPago (payment processing in Brazil); Stripe (international payment processing); Resend (transactional email delivery such as verification and password recovery).

Each third-party service has its own privacy policy. We recommend reading each provider's policies.

Data shared with third parties is limited to the minimum necessary for service delivery.

We use essential cookies to maintain your login session, language preferences and theme (light/dark). We do not use advertising tracking cookies.

Resume data being edited may be stored locally in your browser (localStorage) to ensure your work is not lost.

Under applicable U.S. privacy laws including the CCPA and CPRA, you have the right to: know what personal data is being collected; access your personal data; correct incomplete or incorrect data; request deletion of your data; opt out of the sale or sharing of your personal data; non-discrimination for exercising your rights; request data portability.

To exercise any of these rights, contact us through our contact page or email contato@iacurriculo.com. We will respond within 15 business days.

Your data is kept while your account is active. After a deletion request, your data will be removed within 30 days, except when there is a legal obligation to retain it.

Payment logs may be kept for longer periods as required by tax and legal requirements.

IA Currículo is not intended for children under 16. We do not intentionally collect data from children. If we identify data from a minor, it will be deleted immediately.

Your data may be processed on servers located outside your country through our infrastructure providers (Supabase, Vercel). These transfers are made with adequate protections in compliance with applicable data protection laws.

We may update this Privacy Policy periodically. Significant changes will be communicated via email. The date of the last update is always indicated at the top of this page.

For questions related to privacy and data protection, contact us: Email: contato@iacurriculo.com | Website: iacurriculo.com/contact