Privacy Policy

Last updated: April 23, 2026

This policy applies multi-jurisdiction: Colombia Law 1581 of 2012 (Habeas Data), European Union General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA).

1. Data We Collect

We collect the following data when you use our Service:

Identity data: full name, email, geographic location
Professional data: CV, LinkedIn URL, work experience, education, current salary, salary expectations
Usage data: interactions with the Service, CV Scanner analysis
Technical data: IP address, browser type, operating system (security purposes only)

2. How We Use Your Data

We use your data to:

Process your request and deliver the contracted service
Communicate with you about your process
Improve our services (aggregated and anonymized data)
Comply with legal obligations

We do NOT sell, rent, or transfer your personal data to third parties for marketing. We do NOT share your CV with companies without your express authorization.

3. Legal Basis for Processing (GDPR)

Consent: for sending commercial communications
Contract performance: to deliver contracted services
Legitimate interest: to improve service and prevent fraud
Legal obligation: to comply with applicable regulations

4. Your Rights

Rights under Law 1581 (Colombia):

Know, update, and rectify your data
Request proof of consent
Be informed about how your data has been used
File complaints with the Superintendency of Industry and Commerce
Revoke consent and request deletion

Rights under GDPR (European Union):

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure or “right to be forgotten” (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Right not to be subject to automated decision-making (Art. 22)

Rights under CCPA (California):

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information
Right to opt-out of the sale of personal information (we don't sell data, but you can confirm)
Right to non-discrimination for exercising CCPA rights

5. How to Exercise Your Rights

Write to hola@techprofilelab.com with subject “Personal Data Rights”. We respond within:

15 business days (Colombia)
1 month (GDPR)
45 days (CCPA)

6. Data Retention

We retain your data while you maintain a commercial relationship with us, and up to 2 years afterward to comply with legal record-keeping obligations. Scanner data (CV analyses) is deleted after 90 days.

7. Security

We implement technical and organizational measures to protect your data: encryption in transit (HTTPS), secure storage on Supabase (hosted on AWS US-East), role-based access control, and periodic audits.

8. International Transfers

Your data may be stored on servers in the United States (Supabase/AWS). For EU users, we implement Standard Contractual Clauses (SCCs) as a safeguard. For Colombia users, we guarantee protection levels equivalent to those required by Law 1581.

9. Minors

The Service is not directed to people under 18 years old. We do not intentionally collect minors' data. If we detect a minor's data, we delete it immediately.

10. Changes to this Policy

We may update this policy periodically. Substantial changes will be notified by email to active users 30 days in advance.

11. Supervisory Authorities

Colombia: Superintendencia de Industria y Comercio — www.sic.gov.co
EU: Data Protection Authority of the resident's country
California: California Attorney General — oag.ca.gov

12. Data Controller

Tech Profile Lab
Bogotá, Colombia
Email: hola@techprofilelab.com

This policy is a good-faith document drafted with multi-jurisdiction compliance in mind. For specific topics not covered or in case of formal dispute, consult a legal professional.