Privacy policy
Version 5, effective since 10/08/2026
This policy explains how TDS TECNOLOGIA E DESENVOLVIMENTO DE SOFTWARE LTDA, registered under CNPJ no. 04.271.168/0001-92 ("TDSoft"), processes the personal data of people taking part in TDSoft's selection processes through this job platform, with security, privacy and transparency, under the Brazilian General Data Protection Law (Law no. 13,709/2018, "LGPD").
1. Who processes your data
TDSoft is the controller of your personal data on this platform. The data protection officer (DPO) is Fernando Matte Fagundes, at lgpd@tdsoft.com.br.
2. Definitions
- Personal data: information that identifies you or makes it possible to identify you, such as name, e-mail, phone and résumé.
- Data subject: the person the data refers to; here, the candidate.
- Processing: any use of personal data, such as collection, storage, consultation, classification, assessment, sharing and deletion.
- Team: TDSoft employees authorized to run selection processes.
3. What data we process, where it comes from and why
| Source | Data | Purpose and legal basis |
|---|---|---|
| Sign-in (Microsoft, Google, LinkedIn or GitHub) | Name and e-mail; nothing else from your profile | Identify you and give you access to your account (preliminary steps to an employment contract, art. 7, V) |
| Application | Phone, city, professional profiles you provide, résumé in PDF and the text extracted from it | Take part in the selection for the job (consent, art. 7, I, given for each application) |
| Résumé on the platform ("My resume") | Summary, experience, education, skills, languages and links you fill in | Keep your résumé for applications and for the talent pool |
| Talent pool | The data above | Consider you for future jobs (consent, art. 7, I, given when you save your résumé or apply) |
| Résumé sent directly to TDSoft (see section 4) | Name and, if available, e-mail, phone, city, LinkedIn and the résumé | Selection and talent pool, as above |
| Selection process | Team assessments (rating, interview type and date, comments), internal notes and highlight markers | Run and record the selection (legitimate interest, art. 7, IX) |
| Use of the platform | Date, IP and browser of the acceptance of these terms; activity records for auditing | Prove acceptances and keep the platform secure (legal obligation and legitimate interest) |
We do not collect age, gender, photo, marital status, salary expectations or sensitive data. Assessments, notes and highlights are for the team's internal use and are not shown to you on the platform.
When you save your résumé on the platform or apply to a job, you join the TDSoft talent pool. Before that, the screen tells you so and shows the consent text, which is recorded with version, date, IP and browser. If you do not want to join, simply do not add your résumé. To leave later, delete your account in "My account".
4. Résumés received through other channels
If you sent your résumé directly to TDSoft, for example by e-mail, the team may add it to this platform without you creating an account. This is only done when you yourself sent the résumé for selection purposes, and the team records that declaration, with who made it and when. The data follows the same purposes, analysis, security and retention described in this policy. If you later sign in to the platform with the same e-mail, the record is linked to your account and you get direct access to your data.
5. Use of artificial intelligence
Your résumé is analyzed by an artificial intelligence model that extracts data, summarizes it and compares your profile with the job requirements. The result only supports the team: no rejection is decided by the AI, and every decision is made by people. You may ask for any decision to be reviewed through the DPO contact (art. 20 of the LGPD).
The model runs on Amazon Web Services (Amazon Bedrock) on servers in the United States, which is an international data transfer (art. 33 of the LGPD), made under the provider's contractual safeguards. The provider does not use your data to train models.
6. Who we share it with
Only with the processors needed to run the platform, within the limits of this policy:
- Amazon Web Services: application hosting and résumé storage (São Paulo, Brazil) and the AI model (United States);
- Supabase: database (São Paulo, Brazil);
- The sign-in provider you choose (Microsoft, Google, LinkedIn or GitHub), for authentication only.
We may also share data with authorities when the law requires it. We do not sell or transfer your data to third parties.
7. Security
We use security measures in line with industry practice: direct personal data (name, e-mail, phone, résumé and AI results) is encrypted by the application in the database, on top of the providers' encryption; access is restricted to the authorized team, with corporate sign-in; every relevant action is recorded in an audit log. No system is completely immune to failures. If you learn of anything that compromises the security of your data, please tell the DPO.
8. How long we keep it
- In the talent pool: 18 months from the most recent consent; the period restarts every time you save your résumé or apply again.
- Account without a filled-in résumé (contact details only): 18 months since last saved.
- People who applied before 10/08/2026 without consent for the talent pool: 90 days after the job closes.
If a selection process is still ongoing, anonymization waits for it to finish. After that, the data is anonymized automatically. Acceptance and audit records may be kept for as long as needed to meet legal obligations and to exercise rights.
9. Your rights
At any time, you may:
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymization or deletion;
- withdraw consent, without affecting what was done before;
- ask who we share your data with;
- ask for a review of decisions made with the support of automated processing.
In "My account" you can download all your data, see the history of what you accepted and delete your account, which anonymizes your data immediately and removes you from the talent pool. For any other request, including if you were added by the team and have no account, write to lgpd@tdsoft.com.br. We may ask for information to confirm your identity before acting on a request. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).
10. Cookies
The platform only uses essential cookies: the session cookie, to keep you signed in, and the language cookie. We do not use advertising or third-party tracking cookies.
11. Changes
This policy may change. Each new version is numbered and, if you have an account, we ask for your acceptance on your next visit. TDSoft's general policy, covering the corporate website and other systems, is at https://tdsoft.com.br/politica-de-privacidade/.