Privacy Policy

1. Introduction

This Privacy Policy describes how AIProfy collects, uses, stores, and protects your personal data when you use our AI-powered interactive resume platform.

This policy has been prepared in compliance with the Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018) and other applicable legislation. By using our services, you agree to the practices described in this document.

2. Data Controller

3. Data Collected

Account Data

• Full name
• Email address
• Password (stored in encrypted/hashed format)
• Social authentication identifiers (Google, GitHub, LinkedIn)
• Language preference

Professional Data

• Resume (CV) in PDF or text format
• Profile photo
• Professional title and bio
• Social media links (LinkedIn, GitHub, personal website)

Usage and Navigation Data

• IP address
• Device type, browser and operating system
• Pages visited and time spent
• Approximate location (country and city, inferred from IP)
• Session data and cookies

AI Interaction Data

• Questions asked to the AI chat
• AI-generated responses
• Usage metrics (tokens consumed, response time)

4. Processing Purposes

• Provide and maintain AI-powered interactive resume functionality
• Process authentication and access control
• Respond to contact forms and support requests
• Perform analytics and platform improvements
• Ensure security and prevent fraud
• Comply with legal and regulatory obligations

5. Legal Basis (LGPD Art. 7)

Your personal data is processed based on the following legal grounds:

• Consent (I): For optional analytics features and marketing communications
• Contract Performance (V): For account creation, CV processing, and service delivery
• Legitimate Interest (IX): For security, fraud prevention, and service improvement

6. Artificial Intelligence Processing

Your resume and professional data are processed by Artificial Intelligence systems to generate responses to visitor questions on your profile. This data may be shared with third-party AI providers for this purpose.

AI Providers Used:

• OpenAI (GPT-4) - Servers in the USA
• Groq - Servers in the USA
• Google Gemini - Servers in the USA
• DeepSeek - Servers in China

Notice Regarding AI Responses:

7. Service Usage Limits

To ensure service quality and fair platform usage, we apply the following API limits:

8. Data Retention

• Account data: Maintained while account is active
• Session and analytics data: Up to 365 days after collection
• Data after account deletion: Up to 30 days for complete deletion
• Backups: May persist for up to 90 days after deletion

9. Your Rights (LGPD Art. 18)

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of incorrect or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, readable format
• Objection: Object to processing under certain circumstances
• Revocation: Revoke previously given consent

To exercise your rights, contact our DPO at: dpo@aiprofy.app

10. Cookies and Similar Technologies

We use cookies and local storage technologies for:

• Essential Cookies: Required for authentication, security, and basic functionality
• Analytics Cookies: To understand how you use the platform and improve the experience
• Preference Cookies: To save your language settings and other preferences

11. Data Security

We implement technical and organizational measures to protect your data:

• HTTPS/TLS encryption for all transmissions
• Passwords stored with bcrypt hashing
• Data isolation between different users (multi-tenant)
• Rate limiting to prevent abuse
• Security monitoring and logging

12. Children's Privacy

Our service is intended for users 18 years and older. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.

13. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. These transfers are made in compliance with applicable law and with appropriate safeguards in place.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If a revision is material, we will provide at least 30 days notice prior to any new terms taking effect. Continued use of the service after such changes constitutes acceptance of the updated policy.

15. Contact Us