Privacy Policy

The company that provides CurrículoRaiz is the controller of the personal data processed on this platform, under article 5, VI of the LGPD.

CurrículoRaiz is provided by Francisco Gabriel Teixeira Marinho Desenvolvimento de Software Ltda., CNPJ 57.039.910/0001-03. Address: Av. Paulista, 1106, sala 01, 16º andar, Bela Vista, São Paulo/SP, CEP 01310-914.

• Registration data: name, email, and password (stored encrypted).
• If you sign in with Google: we receive from Google your name, your email address (already verified by Google) and an identifier for your Google account, used only to create and access your CurrículoRaiz account. We never receive your Google password or access to any other data in your Google account.
• The content of the resumes and cover letters you create: professional experience, education, skills, the company and job a letter is addressed to, and any other information you choose to include.
• Usage metrics: linked only to your account identifier, we record key moments of use (sign-up, sign-in, creating and exporting a resume with its format and template, creating and exporting a cover letter with its language and format, LinkedIn import, and applying a coupon when buying Pro, with which coupon). We do not record the content of your resumes or cover letters, your IP address or browser data, and we do not use third-party analytics tools. At sign-up, we also store where your first visit came from: the link’s campaign (UTM parameters), the domain of the site that brought you here and the first page you opened — never the full address you came from or anything that identifies you.
• Pro plan waitlist (closed on October 29, 2026, when Pro launched), if you joined it: the features you picked, your language and, if you were not signed in, the email you provided.
• Photo (optional), if you upload one: we keep only a reduced, cropped version, without the original file’s metadata (such as location and camera), kept on the resume you uploaded it to (or copied it to) and deleted along with it. It has no public address and administrators cannot see it.
• Profile photo (optional): the one you upload or, if you sign in with Google, a copy of your Google account photo, kept only as a reduced version (256×256) without metadata. It appears only on your profile, does not go on your resumes and is not seen by administrators. If you remove it, the Google photo does not come back on its own.
• Pro purchases: the pass, the amount, the discount (coupon or starter pass), the status, the method (Pix, card, Mercado Pago balance or coupon), the tax invoice (number and status), the payment identifier at Mercado Pago and the dates; and, if you choose renewal, the subscription identifier at Mercado Pago, the amount and the date of the next charge. We never receive or store card numbers, CPF or other payer data.

We process your personal data based on the following grounds under article 7 of the LGPD:

• Contract performance (art. 7, V), to enable creating, editing, and exporting your resumes and cover letters.
• Consent (art. 7, I), for optional communications, when applicable.
• Legitimate interest (art. 7, IX), for product improvements and platform security — including usage metrics, which we only look at as aggregate numbers.
• Consent (art. 7, I), for the Pro plan waitlist, now closed: sign-up data is only used to count interest in each feature, and you can ask us to delete your sign-up anytime.

We share data only with providers needed to run the service (e.g., hosting, database) and, when you buy Pro, with Mercado Pago, which processes the payment as controller of the data you give it (policy at mercadopago.com.br/privacidade). We send Mercado Pago only your email, the pass and the amount. To issue the tax invoice (NFS-e) for each paid purchase, we inform the tax authorities (the Brazilian Federal Revenue and the City of São Paulo), through the national NFS-e system, of your name, your email and, when the payment provides it, your CPF, as required by law (LGPD, art. 7, II). The CPF comes from Mercado Pago only when the invoice is issued and is not stored by CurrículoRaiz. We do not sell your personal data to third parties.

We use reasonable technical measures to protect your data, including encrypted passwords and secure connections. Data is stored in the application’s own database.

Access to account data is restricted to administrators authorized by CurrículoRaiz, who see name, email, plan, dates and usage counts (how many resumes, cover letters and exports) only to provide support, grant or adjust your plan and handle requests from you as the data subject, such as deleting your account. Administrators do not see or edit the content of your resumes and cover letters, and every administrator action is logged.

Under article 18 of the LGPD, you have the right to:

• Confirm the existence of, and access, your data;
• Correct incomplete, inaccurate, or outdated data;
• Request deletion of your data;
• Request portability of your data to another provider;
• Withdraw consent, when applicable.

We keep your data while your account is active. When you delete your account, your personal data, photo, resumes, cover letters, usage metrics and waitlist sign-up, if any, are removed from the platform, except where the law requires us to keep them. Usage metrics are kept for up to 24 months; the Pro waitlist, until April 29, 2027 (6 months after the plan launched), when it is deleted. A resume’s photo is deleted as soon as you remove it or delete the resume. Pro purchase records are kept for the period required by tax law, without the link to the deleted account.

We use browser local storage (localStorage) to keep your session and your preferences (such as light/dark theme and language) and to remember when we showed you the Pro plan invitation, so we do not repeat it, and where your first visit came from, which goes to your account at sign-up (kept for up to 90 days). We do not use advertising tracking cookies.

We may update this Policy periodically. Material changes will be communicated through the platform, with an updated "last updated" date at the top of this page.

Requests for access, correction, or deletion of your personal data, or any other question about this Policy, can be sent to contato@curriculoraiz.com.