Privacy Policy

Who controls the data

The controller of personal data processed on this site is Light Connection.

Legal name: [TO BE DEFINED]
Tax ID (CNPJ): [TO BE DEFINED]
Address: [TO BE DEFINED]

Data Protection Officer (DPO): the contact is listed at the end of this policy.

What data we collect

We collect only what each purpose requires.

• Candidates: name, email, phone/WhatsApp, city and state, professional area, desired role, seniority, technologies, salary expectation, availability, language levels, professional links (LinkedIn, GitHub, portfolio), professional summary and the attached resume.
• Companies: contact name, company, work email, phone/WhatsApp, role, company size, city, desired professional profile, headcount, technologies, hiring model, urgency and message.
• Contact messages: name, email, phone, company, subject and message.
• Technical data: IP address, user agent, date and time, source page and campaign parameters (UTM), used for security, abuse prevention and source measurement.

Why we process this data

• Recruitment and selection: to assess your fit for opportunities, contact you and run selection processes. Legal basis: consent (art. 7, I) and preliminary procedures related to a contract at the data subject's request (art. 7, V).
• Sales support: to answer company requests and conduct the negotiation. Legal basis: preliminary contract procedures and legitimate interest (art. 7, IX).
• Platform security: to prevent fraud, spam and unauthorized access. Legal basis: legitimate interest.
• Marketing communication: sending content, only when you expressly authorize it. Legal basis: consent, revocable at any time.
• Legal obligations: compliance with applicable legal and regulatory requirements.

Your resume is never public

Resumes are stored outside the server's public directory, under a system-generated file name, and can only be accessed by authenticated and authorized Light Connection administrative users. No public address on this site displays candidate resumes, phone numbers, emails or salary expectations.

Every resume access through the admin panel is recorded in an audit trail.

Who we share it with

• Client companies: only when you are being considered for a specific opportunity, and always for the purposes of that selection process.
• Infrastructure providers: hosting and email delivery, acting as processors and handling data exclusively under our instructions.
• Authorities: when there is a legal obligation or court order.

We do not sell personal data and do not share it for third-party advertising purposes.

How long we keep it

• Candidate data: kept while the profile remains active in the talent pool, or until you request deletion. Profiles with no interaction for 24 months are reviewed for deletion or anonymization.
• Leads and sales messages: kept for the duration of the commercial relationship and for the applicable legal periods.
• Consent records and security logs: kept for as long as needed to evidence consent and defend rights.

Your rights as a data subject

At any time you may request:

• confirmation that processing exists;
• access to your data;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary data or data processed in breach of the law;
• portability;
• information about sharing;
• withdrawal of consent;
• objection to processing based on legitimate interest.

To exercise any of these rights, use the DPO channel listed below. We may request additional information to confirm your identity before fulfilling the request.

Security

We apply technical and administrative measures to protect data: encrypted connection (HTTPS), passwords stored only as hashes, role-based access control in the admin panel, login attempt limiting, audit logging of administrative actions, upload validation and resume storage outside the server's public area.

No system is completely immune. In the event of a relevant security incident, we will notify data subjects and the Brazilian data protection authority as required by law.

Cookies

Cookie usage is detailed in the Cookie Policy. Analytics and marketing cookies are only activated after your consent and can be reviewed at any time through the link in the site footer.

Changes to this policy

We may update this policy to reflect legal or operational changes. The last update date is shown at the top of this page. Material changes will be communicated through the available channels.

Data Protection Officer contact

For questions about this policy or to exercise your rights, get in touch using the email listed in the contact section of the site, with the subject "Privacy and personal data".