# Privacy policy

This policy explains how Joonow processes personal data. It applies to Joonow's website, app, API, MCP server and emails. We wrote it as plainly as we could. If anything is unclear, write to us through [Contact us](/en/contact#privacy), topic Privacy and data requests.

Joonow is headquartered in Brazil, follows Brazil's General Data Protection Law (Law 13,709/2018, the LGPD) and operates in the countries of the Americas. That is why this policy also meets US state privacy laws (such as California's, the CCPA/CPRA), the laws of Canada and Quebec and the data protection laws of Latin America. **When the law where you are gives you more protection than this policy, the law prevails.**

## Summary

- **You do not need an account to search for jobs.**
- **We do not sell personal data.** The ads on the site are Google's and are only personalized with your permission, or until you opt out, depending on the law of your country. They never use your résumé or your account data.
- **Your résumé only goes to a company when you apply to one of its jobs.** If the company receives applications through a recruitment system integrated with Joonow, we show you what goes and to whom before sending.
- **Artificial intelligence never decides on candidates on its own.** When a company uses the compatibility score, we tell you before you apply, and it is always a person who approves or rejects.
- You can ask to access, correct, copy or delete your data at any time. You can do much of this yourself in My account › Privacy.

## Where Joonow is offered

Joonow is offered to people and companies in the countries of the Americas, with jobs from those countries. People accessing it from the European Union, the European Economic Area, the United Kingdom or Switzerland can view jobs, but cannot create an account, apply, create alerts or see ads. We do not offer the service in those places.

## Who is responsible for your data

- **Controller:** HERO TECNOLOGIA LTDA, CNPJ 23.073.946/0001-83, headquartered at Rua Santos Dumont, 79, Vila Ercília, São José do Rio Preto/SP, CEP 15013-100, Brazil. The controller decides how and why data is processed on Joonow.
- **Data protection officer (DPO):** Gabriela Coelho, through [Contact us](/en/contact#privacy), topic Privacy and data requests. The DPO is also the person in charge of the protection of personal information in Canada and Quebec and receives communications from the authorities.

### When another company is responsible

- **The company that posted the job:** when you apply, it becomes the controller of the data it received, for its hiring process. If it uses an applicant tracking system (ATS), the provider of that system processes the data on the company's behalf.
- **Company area tools:** when a company organizes candidates on Joonow (hiring process board, evaluation, compatibility score, candidates it adds or imports), it is the controller of that data and Joonow processes it only on the company's behalf (as an operator, or processor), following its instructions.
- **Third-party sites:** if you apply on the company's site, that site's privacy policy applies.
- **Google:** the ads on the site are served by Google, which processes browsing data under its own policy.
- **Social sign-in:** Google, Microsoft, Apple and LinkedIn process your data under their own policies.

## What data we process

### When you just browse

- **Access logs:** IP address, date and time, page visited, browser and operating system. Brazilian law (the Brazilian Internet Civil Framework, or Marco Civil da Internet) requires us to keep these logs, which also help keep the site secure.
- **What you type in the search:** the phrase and the location, to show you jobs. To improve search, we keep search statistics for 90 days: the phrase (we replace emails, links and long numbers with placeholders), the filters, the number of results and the jobs clicked, with a random page code. These statistics carry no IP address, account or cookie.
- **Language preference:** only if you switch languages, in a cookie of our own (see the [cookie policy](/en/cookie-policy)).
- **Approximate region of your connection:** Cloudflare, which delivers the site, infers from your IP address the country and, when it can, the state or region, the city and an approximate position. We use it only at the moment the page asks for it, to suggest jobs near you, list cities in your region first in the location suggestions, show the approximate distance to a job, choose the language when you open the site's main address and apply the rules of your country (such as ads and the consent notice). The page is the same for everyone; the suggestion shows up afterwards and never becomes a filter on its own. **We do not store this region**: it does not go to databases, access logs, error monitoring or artificial intelligence, and it is not linked to your account. The exception is when you choose it: when you create a job alert, your city is suggested in the "Where" field, and if you keep it, it is saved with the alert like any other filter you pick. "Don't show again" turns off job suggestions based on your region across the site: your device keeps that choice (in browser storage, not in a cookie).
- **Ads:** on pages with ads, Google receives browsing data (such as your IP address, browser, the page and cookie identifiers) to show and measure ads. See "Advertising".

### When you create an account

- Name, email, date of birth and password (we only store an encrypted version of the password). The date of birth is only used to check the minimum age; if you sign in with an account from another service, you enter the date the first time. If you sign in with Google, Microsoft, Apple or LinkedIn, we receive your name, email and an identifier of your account with that service. If you use a passkey, we store only the public key.
- Profile and résumé data you choose to provide: phone number, city and country, work history, education, skills, languages, salary expectations, links (such as LinkedIn or a portfolio) and the résumé file.
- Saved jobs, job alerts and notification preferences. If you turn on browser notifications, we store the notification subscription (the address of your browser's notification service and its keys).
- Applications: which job, when, the answers you sent, the compatibility score when the company uses it and, when the job receives applications through an integration, the record of the delivery to the company's system.
- The results of the AI tools you use (résumé analysis, cover letter and interview practice), in "My analyses". These tools do not store the résumé file or text you send them.
- If you turn on "Profile visible to recruiters": a card with job title, level, city and skills that verified companies can see, the invitations you receive and which companies viewed the card. Your name, email and phone only go to the company whose invitation you accept.
- The consents you gave or withdrew, with the date, and the version of the terms you accepted.

### Sensitive data

We do not ask for sensitive data: racial or ethnic origin, health, religion, political opinions, trade union membership, sex life, genetic or biometric data. **We recommend not including this data in your résumé**, nor a photo when the job does not ask for one. Sensitive data never goes into the compatibility score or the ads.

The exceptions are the ones you choose to provide:

- **Disability**, when the job is an affirmative-action job or one reserved for people with disabilities (such as jobs under Brazil's disability quota law) and the form asks for this information. It is processed only for that application and with your specific consent.
- **Diversity questions from the company**, when the law of the job's country allows them. The answer is always optional, includes a "prefer not to answer" option and goes only to the company that posted the job.

### When you use a company account

- Names and emails of users, company details, posted jobs, the company page and the history of each hiring process.
- Data of people the company adds or imports as candidates (processed on the company's behalf, as explained above).
- If the company buys sponsorship: legal name, tax ID number (such as the CNPJ), address, email for billing and invoices, and the payment history. Card details go directly to the payment processor; Joonow does not store the full card number.

### When you use the API or the MCP server

The access key (we store only an encrypted version), the account that owns it and usage counters per key and per day, to apply the limits in the [API terms](/en/api-terms).

### When you contact us or report a job

- **Contact us:** name, email, topic, the messages exchanged and, if you are signed in, the link to your account.
- **Job or ad report:** the reason and what you wrote.
- In both cases, the IP address is kept only as a code encrypted with a secret key, to limit abuse, in a way that does not allow recovering the address.

### When you review a company

The text, the rating, the job title and period you provide, and the link to your account, which is never shown to the company or the public. The rules are in the review terms.

### When you take part in Joonow Trends

- **Weekly poll:** your vote is linked to your account (one vote per person). With it we keep only the country, state, target role and level of your profile that day, to show results by group. Nobody sees your vote: results are aggregated and shown only with at least 30 votes.
- **Stories:** the text, the topic, the first name (or anonymous), the job title and the city you chose to show, linked to your account, which never appears. An AI checks the story before it is published; when in doubt, a person on our team reviews it. You can delete it at any time under "My stories".
- **"Me too" and reactions:** only the total for each piece or story. To count one reaction per person in 24 hours we use an encrypted code of the IP address, kept only in the server's memory.
- **Ask the job market:** the question goes to the AI that interprets searches and is not stored; we only add up how many times each role and city was asked that day, without the text or the account.
- **Press room:** name, email, outlet and country of those who sign up for the monthly figures.
- **Measurement:** Joonow Trends pages count visits, shares and clicks by format, country and source (such as "came from an AI assistant"), without cookies and without anything that identifies the person.

### When you are responsible for a partner's job

Partner applicant tracking systems (ATS) may send, along with the job, the **work email of the person responsible for it** (the recruiter or the HR team mailbox). This email never appears on the site, in search, in the API or to candidates: only the Joonow team sees it, to talk to whoever handles the job when it gets reported or needs a correction. The fact that a job includes an email (never the address) also adds points to the quality score that helps rank jobs.

### Data that appears in jobs

Jobs come from public career pages, recruitment systems and partners. Sometimes a job ad includes a person's name or contact details (such as the recruiter's). We show the ad as the company published it. If you appear in a job and want us to remove your data, ask through [Contact us](/en/contact#privacy).

## Sending your application to the company's recruitment system

Some companies receive applications through a recruitment system (ATS) integrated with Joonow. When you apply to one of those jobs through Joonow:

1. **Before sending**, we show you the company's name, the system that will receive the application and the list of what will be sent.
2. **When you confirm**, we send to the company's system, over an encrypted connection and with a signature that proves the delivery came from Joonow: name, email, phone, city and country, the links you provided, the résumé file, your profile data (work history, education, skills, languages and salary expectations), the answers to the job's questions, the job and the date. Only what is filled in is sent.
3. **The system registers you there, on the company's behalf.** From then on, the company is the controller of that data, the system provider processes it on the company's behalf, and the company's privacy policy and retention periods apply.
4. **We keep a record of the delivery** (job, date, what was sent and whether the system confirmed receipt), so you can follow it in My account › Applications and so we can prove the delivery.
5. **Corrections and deletions reach them too:** if you ask Joonow to correct or delete your data, we notify the systems we sent your applications to, so they do the same (LGPD, Art. 18, § 6). For the company to delete what it has already received, the final request is with the company; we help pass it on.
6. **If the system is in another country**, the transfer is part of what you asked for (applying) and follows the safeguards in "Transfers to other countries".

Systems that receive applications accept the [ATS integration terms](/en/ats-integration-terms), which limit the use of the data to the hiring process of the company that posted the job and require secure receipt.

## Why we use it and on what legal basis

The table shows the legal basis under the LGPD. In other countries, we use the equivalent basis under local law (for example, contract, consent or legitimate interest).

| Purpose | Data | Legal basis (LGPD) |
|---|---|---|
| Showing jobs and making search work | search, location, access logs | legitimate interest (Art. 7, IX) |
| Interpreting searches typed in your own words with artificial intelligence | only the search phrase, no account data | legitimate interest (Art. 7, IX) |
| Improving search with statistics | search phrase without contact details, filters, clicks, no IP or account | legitimate interest (Art. 7, IX) |
| Suggesting jobs near you and applying the rules of your country, without storing your region | approximate region of your connection | legitimate interest (Art. 7, IX) |
| Showing personalized ads | browsing data and cookie identifiers, with Google | consent (Art. 7, I); in the US, until you opt out |
| Showing non-personalized ads and measuring ads | minimal browsing data, with Google | legitimate interest (Art. 7, IX) |
| Keeping your account, saved jobs and alerts | account data and preferences | performance of a contract (Art. 7, V) |
| Checking the minimum age to use Joonow | date of birth | performance of a contract and preliminary procedures (Art. 7, V) |
| Sending your application to the company, including to its recruitment system | résumé, profile, answers | performance of a contract and preliminary procedures at your request (Art. 7, V) |
| Calculating the compatibility score for the company that uses it | profile, answers and résumé (the résumé only with consent to AI reading), without sensitive data | the basis is the company's, as the controller; Joonow processes the data on its behalf |
| Processing a disability or a diversity answer you choose to provide | the data you provide | specific and highlighted consent (Art. 11, I) |
| Reading your résumé with AI to fill in your profile and show the summary to the company | résumé text, without name and contact details | consent (Art. 7, I) |
| Showing your card to recruiters ("Profile visible") | job title, level, city, skills | consent (Art. 7, I) |
| Sending alerts and news by email or notification | email, alerts, notification subscription | consent (Art. 7, I), which you can withdraw at any time |
| Processing data of candidates added by a company | what the company adds | the basis is the company's, as the controller |
| Handling Contact us messages and reports | messages, contact details | legitimate interest (Art. 7, IX) |
| Suggesting an answer from the help center before a Contact us message goes to the team | topic and message, without contact details | legitimate interest (Art. 7, IX) |
| Contacting the person responsible for a partner's job | work email received from the partner | legitimate interest (Art. 7, IX) |
| Polls, stories and "me too" on Joonow Trends | vote and profile breakdown, text and name you chose to show | consent (art. 7, I), withdrawn by deleting the story or the account |
| Moderating stories with AI before publishing | story text and displayed name, without email or account | legitimate interest (art. 7, IX) |
| Sending the monthly figures to journalists | name, email, outlet, country | consent (art. 7, I), with one-click unsubscribe |
| Measuring Joonow Trends without cookies | daily totals of visits, shares and clicks | legitimate interest (art. 7, IX) |
| Sponsorship billing and invoices | the company's billing data | performance of a contract and legal obligation (Art. 7, V and II) |
| Security, fraud and abuse prevention | access logs, account data | legitimate interest (Art. 7, IX) |
| Keeping access logs for the period required by law | access logs | legal obligation (Art. 7, II) |
| Defending rights in legal proceedings | whatever is necessary | regular exercise of rights (Art. 7, VI) |

When the basis is legitimate interest, we first assess whether you would expect the use and whether it overrides your rights. You can object to that use.

## Advertising

- **Who shows them:** Google (AdSense) shows ads on public pages (search, job pages, the home page, the salary guide, Joonow Trends stories and the company list), separate from the content and labeled as ads. There are never ads in forms, the application, signed-in areas, the company area, the help center or the legal pages.
- **Personalization by country:** in Brazil and the other countries of the Americas except the United States, we ask first whether you accept personalized ads; without your permission, ads are not personalized. In the United States, ads may be personalized until you opt out through "Do Not Sell or Share My Personal Information", in the footer, and your browser's Global Privacy Control signal counts as an opt-out. In Europe, there are no ads.
- **What never goes to the ads:** your résumé, your account data, your applications and any sensitive data.
- **How to change it:** in "Ad preferences", in the footer, at any time. Learn how Google uses data at [policies.google.com/technologies/partner-sites](https://policies.google.com/technologies/partner-sites).
- A misleading ad (for example, one that promises a job in exchange for payment) can be reported through [Contact us](/en/contact).

## Artificial intelligence and automated decisions

- **AI search:** only turns your sentence into filters, which are shown on screen for you to check. The AI provider receives only the sentence.
- **Search by meaning:** compares the meaning of your search with the meaning of jobs, using a model that runs on our own servers. Nothing goes to third parties.
- **AI tools** (résumé analysis, cover letter and interview practice): only when you use them, and the AI provider receives what you sent to that tool.
- **Résumé reading with AI:** only with your consent, to fill in your profile and show the company an organized summary of your résumé. Before sending the text to the AI provider, we remove the name and contact details we can identify.
- **Compatibility score:** when the company uses this feature, AI compares your profile, your answers and your résumé (the résumé only when you allowed AI to read it) with the job's requirements and gives a score, with the reasons (what you meet and what is missing), so the company can organize its list. We tell you on the application screen, before you apply, and you can see your score in My applications. The score never rejects anyone on its own: the decision is made by a person at the company. It does not use name, photo, age, gender or sensitive data, and the model is tested so that these do not change the score. You can ask for an explanation of your score and for a review by a person. Where the law requires an audit or prior notice for this kind of tool (such as New York City, Illinois and Colorado), it only works in compliance with those rules.
- **Contact us automatic answer:** before your message goes to the team, AI reads it together with the help center articles and, when they solve it, shows the answer on screen. The AI provider receives only the topic and the message, without your name, your email or the contact details we can identify in the text. If you say it didn't solve it, the message goes to the team as usual, together with the answer you saw; if you say it did, the message is not stored. Privacy, appeal, sales and press topics go straight to the team.
- **Review moderation:** AI helps set aside reviews that may break the rules; a decision to reject one is reviewed by a person.
- **Job ranking:** search ranks jobs by the criteria explained in the [terms of use](/en/terms-of-use).

The AI providers we use are configured not to store what we send and not to use it for training. You can ask for a human review of any decision made solely by automated means that affects your interests (LGPD, Art. 20).

## Who we share data with

- **Companies, when you apply**, and the recruitment system they use, as explained above.
- **Verified companies**, if you turn on "Profile visible to recruiters" (only the card, until you accept an invitation).
- **Google**, as a third party with its own policy, for the ads (see "Advertising").
- **Service providers that run the service for us**, under contract, only for that purpose and with a duty to protect the data:

| Provider | What for | Where |
|---|---|---|
| Hosting provider | servers, database and search | Brazil |
| Cloudflare | site delivery and protection | global network |
| Microsoft Azure | files (such as résumés) and encrypted backups | Brazil |
| Amazon Web Services | email delivery | United States |
| Sentry | error monitoring, without personal data, region headers or form content | United States |
| OpenRouter and the AI model providers | AI search, AI tools, résumé reading, compatibility score and the Contact us automatic answer | United States and other countries |
| Vindi, C6 Bank and Focus NFe | sponsorship billing, Pix and invoices (companies only) | Brazil |
| Browser notification services (Google, Apple, Mozilla, Microsoft) | delivering the notifications you turned on | United States and other countries |

- **Authorities**, when required by law or a court order.
- **In a sale or merger of the company**, data may pass to whoever takes over the service, who will remain bound by this policy.

**We do not sell or rent personal data.** What some US laws call "sharing" happens only with personalized ads, and you can opt out.

## Transfers to other countries

Joonow's servers are in Brazil. If you are in another country of the Americas, your data is transferred to Brazil. Some providers also process data in other countries, mainly in the United States.

- **From Brazil to other countries:** we use the safeguards of Art. 33 of the LGPD, such as the ANPD's standard clauses (Resolution CD/ANPD 19/2024).
- **From other countries of the Americas to Brazil and to providers:** we use the safeguards that the law of your country accepts, such as contractual clauses, and only to provide the service you use.
- **Applying to a company in another country:** when you apply, sending your data to the company and its system is necessary to do what you asked for (LGPD, Art. 33, IX).

You can ask for a copy of the safeguards we use through [Contact us](/en/contact#privacy).

## How long we keep data

| Data | How long |
|---|---|
| Access logs | 6 months (Marco Civil da Internet, Art. 15) |
| Search statistics (no IP or account) | 90 days |
| Account data (including the date of birth), profile and résumé | while the account exists; deleted within 30 days after the account is deleted |
| Applications, compatibility scores and records of delivery to the company's system | while the account exists; what was already sent to a company stays with it, under its own policy |
| Alerts and notification subscriptions | until you turn the alert off or delete your account |
| AI tool results ("My analyses") | 12 months, or until you delete them or your account |
| Talent search (card, invitations and which companies viewed your profile) | the card until you turn the option off; who viewed it, 6 months; invitations, while the account exists |
| Contact us messages | up to 5 years after the request is closed, or sooner if you delete your account or ask for deletion; after that, only the topic, the dates and the status remain, without name or message |
| Email of the person responsible for a partner's job | while the job is live and up to 30 days after it comes down; the copy of the feed file, which also contains it, 30 days |
| Poll votes and stories on Joonow Trends | while the account exists; a story until you delete it (it disappears right away) |
| Press room sign-up | until you unsubscribe; then only the unsubscribe flag remains, so we do not email you again |
| Billing data and invoices (companies) | for the period required by tax law (in Brazil, 5 years) |
| Backups | up to 30 days, then overwritten |

Ad cookies follow Google's retention periods, explained in the [cookie policy](/en/cookie-policy). We may keep the minimum necessary for longer to comply with a legal obligation or defend rights.

## Your rights

Wherever you are in the Americas, you can ask for:

- **access:** to know whether we process your data and to receive a copy;
- **correction** of incomplete, inaccurate or outdated data;
- **deletion** (or anonymization) of your data, including data processed based on your consent;
- **portability:** to receive your data in an open format (JSON) to take to another service;
- **objection** to processing based on legitimate interest;
- **blocking** of processing while you dispute it;
- **withdrawal of consent**, at any time, without affecting what was done before;
- **opt-out of the sale or sharing** of your data for personalized ads;
- **information** about whom we share your data with and about what happens if you do not give consent;
- **explanation and human review** of a decision made solely by automated means and of your compatibility score.

**How to ask:** in My account › Privacy, you can download all your data, change your consents and delete your account right away. For anything else, write to us through [Contact us](/en/contact#privacy), topic Privacy and data requests. We may ask you to confirm your identity to protect you. We reply within 15 days, sooner than the laws of most countries require. If we refuse a request, we explain why and you can ask for the decision to be reviewed.

You lose nothing by exercising your rights: the service and the price stay the same.

If you are not satisfied, you can also complain to the data protection authority of your country, for example: the ANPD (Brazil), Argentina's Agency for Access to Public Information (AAIP), Colombia's Superintendence of Industry and Commerce (SIC), Chile's Personal Data Protection Agency, Peru's National Authority for Personal Data Protection, Uruguay's Regulatory and Control Unit for Personal Data, Mexico's data protection authority, the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec or, in the United States, your state's agency or attorney general.

## Information by country

### United States

This information meets US state privacy laws, such as California's (the CCPA, as amended by the CPRA), and those of Virginia, Colorado, Connecticut, Texas and other states.

- **Categories of data collected in the last 12 months:** identifiers (name, email, phone, IP, cookie identifiers); professional and employment information (résumé, work history, applications); education information; internet activity (searches and pages viewed on the site); approximate location (not stored); commercial information (sponsorship purchases, companies only); inferences (the compatibility score, only for the company that posted the job); and sensitive data only when you choose to provide it (account login data and, in affirmative-action jobs, disability).
- **Sources:** you, your browser, the companies and partners that post jobs, and social sign-in services.
- **Purposes and recipients:** those in the "Why we use it and on what legal basis" table and the "Who we share data with" list.
- **Sale and sharing:** we do not sell personal data for money. Google's personalized ads may count as "sharing" for cross-context behavioral advertising; you can opt out through "Do Not Sell or Share My Personal Information", in the footer, and Global Privacy Control counts as an opt-out. We do not sell or share data of people under 16. We use sensitive data only for what you asked for, without inferring characteristics about you.
- **Automated decision tools in hiring:** the compatibility score follows local rules (bias audit and notice in New York City, notices in Illinois and Colorado); where they are not met, the feature is turned off for the job.
- **Your rights:** to know and access, correct, delete and take your data with you, to opt out of sale or sharing, not to be discriminated against for exercising your rights and, in states that provide for it, to appeal a refusal (we respond to appeals within 60 days). An authorized agent can make a request for you, with your written authorization.

### Canada

We follow the federal law (PIPEDA) and, for Quebec, Law 25. The person responsible for the protection of personal information is our DPO (see "Who is responsible for your data").

### Latin America and the Caribbean

We also follow the data protection laws of Argentina (Law 25,326), Mexico (Federal Law on the Protection of Personal Data Held by Private Parties, 2025), Colombia (Law 1,581 of 2012), Chile (Law 19,628 and, once it comes into force, Law 21,719), Peru (Law 29,733), Uruguay (Law 18,331) and the other countries in the region. In Mexico, you can exercise your ARCO rights (access, rectification, cancellation and opposition) through the same channel.

### Outside the Americas

Joonow is not offered outside the Americas. In the European Union, the European Economic Area, the United Kingdom and Switzerland, you can only view jobs, without an account, applications, alerts or ads.

## Security

We use encrypted connections (HTTPS) across the whole site, strongly hashed passwords, role-based access, a second authentication factor for the team, logging of administrative access, résumé reading in an isolated process and encrypted backups. No system is infallible: if an incident happens that may put you at risk, we will notify you and the authorities within the deadlines that each country's law requires.

## Minimum age

Joonow is made for people looking for work and is not directed at children. To use Joonow, you must be at least 16 or, where the law of your country allows work before that age (such as apprentices from age 14 in Brazil), the minimum working age, with the authorization of your parent or guardian. We do not knowingly collect data from children under 13; if we learn that this has happened, we delete it.

That is why we ask for your date of birth to create an account and check the minimum age of the country you are connecting from. Below it, the account is not created; for an existing account, after you confirm the date, it is deleted along with its data, just like a deletion you request. The date stays only in your account: it never goes to companies (not in applications, résumés or talent search), to integrated recruitment systems or to the compatibility score. You can check and correct it in My account › Profile.

## Changes to this policy

When we change this policy, the date at the top of the page changes. If a change is significant, we will notify account holders before it takes effect and, when the law requires it, ask for your consent again.

## Language

This policy is available in Portuguese, English and Spanish. If the versions differ, the Portuguese version prevails, unless the law of your country requires otherwise.

## Contact

Data protection officer (DPO): Gabriela Coelho, through [Contact us](/en/contact#privacy), topic Privacy and data requests. Other matters: [Contact us](/en/contact).