Privacy Policy
Last updated: April 23, 2026
This policy applies multi-jurisdiction: Colombia Law 1581 of 2012 (Habeas Data), European Union General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA).
1. Data We Collect
We collect the following data when you use our Service:
- Identity data: full name, email, geographic location
- Professional data: CV, LinkedIn URL, work experience, education, current salary, salary expectations
- Usage data: interactions with the Service, CV Scanner analysis
- Technical data: IP address, browser type, operating system (security purposes only)
2. How We Use Your Data
We use your data to:
- Process your request and deliver the contracted service
- Communicate with you about your process
- Improve our services (aggregated and anonymized data)
- Comply with legal obligations
We do NOT sell, rent, or transfer your personal data to third parties for marketing. We do NOT share your CV with companies without your express authorization.
3. Legal Basis for Processing (GDPR)
- Consent: for sending commercial communications
- Contract performance: to deliver contracted services
- Legitimate interest: to improve service and prevent fraud
- Legal obligation: to comply with applicable regulations
4. Your Rights
Rights under Law 1581 (Colombia):
- Know, update, and rectify your data
- Request proof of consent
- Be informed about how your data has been used
- File complaints with the Superintendency of Industry and Commerce
- Revoke consent and request deletion
Rights under GDPR (European Union):
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure or “right to be forgotten” (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right not to be subject to automated decision-making (Art. 22)
Rights under CCPA (California):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of the sale of personal information (we don't sell data, but you can confirm)
- Right to non-discrimination for exercising CCPA rights
5. How to Exercise Your Rights
Write to hola@techprofilelab.com with subject “Personal Data Rights”. We respond within:
- 15 business days (Colombia)
- 1 month (GDPR)
- 45 days (CCPA)
6. Data Retention
We retain your data while you maintain a commercial relationship with us, and up to 2 years afterward to comply with legal record-keeping obligations. Scanner data (CV analyses) is deleted after 90 days.
7. Security
We implement technical and organizational measures to protect your data: encryption in transit (HTTPS), secure storage on Supabase (hosted on AWS US-East), role-based access control, and periodic audits.
8. International Transfers
Your data may be stored on servers in the United States (Supabase/AWS). For EU users, we implement Standard Contractual Clauses (SCCs) as a safeguard. For Colombia users, we guarantee protection levels equivalent to those required by Law 1581.
9. Minors
The Service is not directed to people under 18 years old. We do not intentionally collect minors' data. If we detect a minor's data, we delete it immediately.
10. Changes to this Policy
We may update this policy periodically. Substantial changes will be notified by email to active users 30 days in advance.
11. Supervisory Authorities
- Colombia: Superintendencia de Industria y Comercio — www.sic.gov.co
- EU: Data Protection Authority of the resident's country
- California: California Attorney General — oag.ca.gov
12. Data Controller
Tech Profile Lab
Bogotá, Colombia
Email: hola@techprofilelab.com
This policy is a good-faith document drafted with multi-jurisdiction compliance in mind. For specific topics not covered or in case of formal dispute, consult a legal professional.
