Privacy Policies - GeekHunter

1. PRIVACY POLICY

1.1 Purpose

GeekHunter values the privacy of its users and has developed this Privacy Policy to demonstrate its commitment to protecting personal data, in compliance with the General Data Protection Law (Law No. 13.709/2018 – LGPD), the Brazilian Internet Civil Framework (Law No. 12.965/2014), and other applicable legislation.

This document describes how GeekHunter collects, uses, shares, and stores personal information in the context of its services.

1.2 Scope of Application

This Policy applies to all individuals whose data we process, including:

Professionals: candidates who use GeekHunter to seek job opportunities or participate in recruitment processes (from clients or internal GeekHunter positions).
Company Users: recruiters, employees, and/or administrators of client or partner companies who use the platform to attract professionals and/or conduct recruitment processes.
Integrated Third Parties: providers of technical tests, video conferencing tools, job partners, external recruiters, and other partners connected to the platform.
Visitors: individuals who browse our websites or pages without registering.

1.3 Conditions of Use and Relationship with the Terms

By using our services, you declare that you are over 18 years old, as well as emancipated or duly represented/assisted if legally incapable.

If you do not agree with this Policy, we recommend not using our services. This Policy complements the Terms of Use. In case of conflict, the applicable legislation shall prevail.

2. DEFINITIONS

For the purposes of this Policy, the following definitions apply:

User: any individual who uses or visits GeekHunter’s websites and/or applications, over 18 years old, emancipated, or duly represented/assisted if legally incapable.
Professional / Candidate: User who uses GeekHunter to search for opportunities or apply for job positions offered by client companies or by GeekHunter itself.
Company User: User who uses GeekHunter to attract, manage recruitment processes, and hire professionals.
Personal Data: Any information provided and/or collected by GeekHunter that identifies or may identify an individual.
Sensitive Personal Data: Data regarding racial or ethnic origin, religious beliefs, political opinions, trade union membership, health, sexual life, genetic or biometric data.
Purpose: The objective of each act of personal data processing.
Necessity: The justification for why it is strictly necessary to collect personal data to achieve a specific purpose, avoiding excess.
Controller: The entity that decides on the purposes and means of processing personal data.
Joint Controllers: Two or more controllers who jointly determine the processing of data.
Processor: A natural or legal person, public or private, who processes personal data on behalf of the controller.
Talent Database: A database composed of the profiles of Professionals registered or enriched through the Platform, accessible by GeekHunter and, in certain situations, by client companies, according to the purposes set out in this Privacy Policy and Terms of Use.
Legal Basis: The legal grounds that make GeekHunter’s processing of personal data legitimate.
Consent: Express and unequivocal authorization given by the data subject for the processing of personal data, when required by law.
AI (Artificial Intelligence): automated resources applied by GeekHunter to support interviews, enrich profiles, generate recommendations, perform matching, detect fraud, and optimize services.

3. ROLES IN DATA PROCESSING

Data processed by GeekHunter and intelligence generated by the system (such as metrics, market analyses, matching, reports, and aggregated insights) are owned by GeekHunter and may be shared with clients to support recruitment and selection decisions.

Data processed outside the platform (exports, integrations with other systems, or use in external tools) are the sole responsibility of the client company, which may adopt its own privacy policies and processing purposes, and must always respect the rights of data subjects.

The candidate may exercise their rights both with the client company that registered their data and with GeekHunter.

3.1 Controller

GeekHunter acts as a controller when it defines purposes and means of processing, such as:

creating a profile/account on the GeekHunter platform;
maintaining the Talent Database;
providing customer service and support;
usage and security metrics;
institutional communication;
marketing activities, when applicable and with consent.

GeekHunter acts as the controller of personal data of candidates contained in its Talent Database, which are processed for the purpose of creating, maintaining, and improving professional profiles, and may be shared with client companies, in accordance with legitimate recruitment and selection purposes.

3.2 Joint Controller

GeekHunter acts as a joint controller when it defines, together with client companies, the purposes and means of processing, such as:

When candidates apply specifically for recruitment processes of client companies through a page on GeekHunter’s platform dedicated to a specific job position, even if hired by the company.

In cases of joint control, each party is responsible only for the processing it performs, according to its own decisions and legal obligations. There is no joint or subsidiary liability between the parties unless expressly provided by law.

3.3 Processor

When the CLIENT manually or via integration (API) enters professional data, the CLIENT becomes the autonomous controller of the hired professional’s personal data, assuming all obligations and responsibilities arising from this condition, and committing to fully comply with applicable laws, especially Law No. 13.709/2018 (General Data Protection Law – LGPD).

4. COLLECTION AND USE OF PERSONAL INFORMATION

4.1 Information Collected from Company Users

The Company User acknowledges that their data will be collected through forms or via websites operated by GeekHunter for proper registration on the platform.

When the Company User registers and/or fills out forms provided by GeekHunter, certain requested Personal Data will be kept confidential and used only for the purpose that motivated the registration, according to the following table:

MOMENT	CATEGORY OF PERSONAL DATA	PURPOSE	LEGAL BASIS
Commercial Contact	Name; Corporate Email; Phone Number.	To share the Recruiter’s name and connect the recruiter with candidates participating in the selection processes.	Legitimate Interest
Company User Registration	IP Address, Cookies.	To optimize the functionality of our websites.	Legitimate Interest
Access Information	Name; Corporate Email; Phone Number.	To obtain the minimum necessary information in order to return the commercial contact.	Consent

4.2 Information Collected from Professionals by GeekHunter

The Professional acknowledges that they provide their information consciously and voluntarily through forms or websites/applications operated by GeekHunter.

In some cases, Clients may request specific recruitment services from GeekHunter aimed at promoting diversity within their companies. To make these services possible, it may be necessary to collect sensitive personal data related to specific demographic categories. We emphasize that GeekHunter does not support discriminatory practices and that this type of data processing occurs exclusively on behalf of the Client, with the purpose of fostering more diverse and inclusive environments.

In diversity-related initiatives requested by clients, GeekHunter may collect sensitive personal data (e.g., disability status) only with your specific, highlighted, and optional consent, for the purpose of promoting affirmative actions. Refusal to provide such consent will not affect the use of the platform, and the professional may withdraw consent at any time.

If a candidate chooses to directly send GeekHunter sensitive information, such submission may be interpreted as acknowledgment and agreement regarding the processing of such data, in accordance with this Privacy Policy.

When the Professional registers and/or fills out forms made available by GeekHunter, the requested personal data will be kept confidential and used exclusively for the purposes that justified their collection, as illustrated in the following table:

MOMENT	CATEGORY OF PERSONAL DATA	PURPOSE	LEAGAL BASIS
Simplified Job Application	Full Name; Email; Mobile Number; LinkedIn; Desired Salary; Resume; Desired Employment Type (CLT, Contractor, Internship).	To obtain the minimum necessary information about the candidate so that the client company can communicate and proceed with the selection process.	Consent
Contact/Profile Registration	Name; Work location availability; City and state of residence; Phone number; Gender; Resume; Portfolio link; and Social Networks (LinkedIn, GitHub, Stack Overflow, Personal Website, Portfolio).	To obtain the minimum necessary information about you in order to properly tailor your resume and forward it to potential companies, ensuring the consistency of your profile on the platform.	Consent
Contact/Profile Registration	Information on whether the user is a PwD (Person with Disability).	To enable potential employers to meet job requirements related to diversity quotas, in accordance with the CLT (Consolidation of Labor Laws – Decree-Law No. 5.452/43) and Law No. 8.231/91.	Consent
Contact/Profile Registration	Profile Photo.	To improve organization in the recruitment and selection process for potential companies.	Consent
Field of Work, Experience, and Education	Last and/or Current Salary; Desired Salary; Job Title; Current and/or Previous Employer; Education Level; Certificates; Known Technologies and Skills; Programming Languages.	To build your resume and, consequently, to better direct your profile during recruitment and selection processes for potential employers.	Consent
Access Information	IP Address, Cookies, etc.	To optimize the functionality of our website and the job search results for users based on their geographic location.	Legitimate Interest
Home	Email*	To provide access to content and receive hiring tips (Newsletter), as well as to maintain a communication channel with the user and organize their information in the search for job opportunities.	Consent

When applying for a job, the professional becomes part of both the GeekHunter Talent Database and the recruiting company’s own talent database. This allows the professional’s data to be retained even after the conclusion of the selection process.

By registering through a GeekHunter subdomain, the professional may choose—at the time of registration or later—to keep their profile public across the entire talent database or restricted only to the specific job of interest. At any time, the professional may also request the deletion of their data from the GeekHunter platform.

The client company, in turn, may choose not to keep its pool of professionals—originating exclusively from its own recruitment processes—in this Talent Database. In such cases, it may request the removal of that visibility. However, this decision will also result in the loss of access to GeekHunter’s Talent Database, limiting the company’s ability to view available profiles beyond those directly registered in its own processes.

GeekHunter also automatically collects certain information through cookies and similar technologies when Visitors access our website. Such data may include: internet protocol (IP) address, browser type, internet service provider, source and destination URLs, operating system, date and time of access, search terms, location and language preferences, device-associated identifiers, and system configuration details.

4.3 Integration with Third-Party Services

Some procedures carried out by GeekHunter depend on integration with third-party services or applications (such as LinkedIn, WhatsApp, email providers, and telecom operators). In these cases, the data processing performed by such third parties follows their own privacy policies and terms of use.

GeekHunter is not responsible for any contractual or legal violations committed by third parties, nor for the independent data processing they may perform.

4.4 AI-Assisted Interviews and Profile Enrichment

4.4.1 Voice or Text Interviews Supported by AI

GeekHunter may conduct video, voice, or text interviews with the support of artificial intelligence agents. In such cases, we collect:

interview content and corresponding transcriptions;
technical metadata, such as date, time, duration, language, device type, and IP address;
automatically generated notes and inferences, such as extracted skills, estimated seniority, job match scores, key topics, and quality indicators.

4.4.2 Automatic Profile Enrichment from Public Sources and Connected Accounts

To keep the Professional’s profile complete and up to date, we may supplement information using:

Publicly accessible sources, such as professional profiles and web pages (e.g., LinkedIn, personal websites, and public portfolio repositories), in compliance with each platform’s privacy settings and terms of use, and always in line with legitimate purpose, good faith, and transparency principles;
Connected accounts authorized by the user, when the Professional chooses to link third-party accounts to the platform. In such cases, we collect only the information explicitly authorized at the time of connection. We do not collect passwords. The connection can be revoked at any time through the platform or the third-party settings.

4.4.3 Purposes

All data collected during AI-assisted video, voice, or text interviews are processed in accordance with the LGPD and used exclusively to:

update and maintain a complete and current Professional profile;
perform screening, matching, and profile analysis to support decision-making in client company recruitment processes;
offer job recommendations, communication, and support;
generate anonymized and aggregated statistics and market insights;
improve service models, workflows, and quality, including fraud prevention and security.

4.4.4 Legal Bases

The processing of data collected during interviews occurs for the performance of a contract and preliminary procedures necessary for providing services to the Professional and client companies. We rely on legitimate interest for continuous improvement, security, and statistical purposes, with impact assessments and opt-out mechanisms when applicable.
For any sensitive personal data collected or processed, specific and explicit consent from the data subject will be required.

4.4.5 Sensitive Data

We do not request sensitive personal data during interviews, except when strictly necessary and optional within diversity programs requested by clients. In such cases, processing occurs only with specific, explicit consent, for a defined purpose, and may be revoked at any time upon express request—without affecting the validity of processing carried out prior to revocation.

4.4.6 Sharing with Client Companies

We make available to client companies only necessary and non-sensitive information for the selection process. Sensitive data and internal notes that are not essential to the stated purposes remain restricted to GeekHunter.

4.4.7 AI Providers, Data Collection, and Recording

We may use service providers acting as processors for transcription, natural language processing, verification, and infrastructure purposes. We require confidentiality, security, and prohibition of use for their own purposes, including model training, unless express, explicit, and specific consent is obtained from the data subject.

4.4.8 Access

The Professional may request access to transcripts associated with their profile via email at dpo@GeekHunter.com.br.

4.4.9 Retention

Transcripts, notes, and enriched data are retained for as long as necessary to fulfill the stated purposes and applicable legal timeframes. Upon request from the data subject—and when no other legal basis justifies retention—we delete or irreversibly anonymize the data.

If deletion is not possible due to legal obligations, fraud prevention, security, or exercise of legal rights, we restrict their use to essential purposes only and retain the minimum necessary, informing the legal grounds for retention.

For data already shared with joint controllers (client companies, as described in section 3.2), the data subject must submit the request directly to them. When applicable, we will inform the categories of third parties with whom data has been shared.

5. SHARING AND PROCESSING OF USERS’ PERSONAL INFORMATION

5.1 Circumstances for Sharing

GeekHunter may disclose Users’ Personal Data to third parties in the following situations, within the limits required and authorized by law:

Client Companies: when you, as a Professional, apply to a recruitment process directly on the GeekHunter platform;
Companies belonging to the Howdy.com Inc. economic group (the parent company of GeekHunter), in cases of mergers, acquisitions, or sales, when there is a legitimate purpose for doing so. In such cases, the specific purpose will be disclosed in the corresponding privacy notice;
Vendors and service providers (only when strictly necessary), referred to as Processors under the law, whom we contract to assist in our business operations;
Job posting platforms for publishing openings and partners integrated through systems that may be used independently by the client company or via GeekHunter;
Companies and individuals hired to perform specific activities and services on behalf of GeekHunter;
Authorities or government agencies, in cases of legal actions, investigations, or judicial measures;
Administrative purposes, such as research, planning, service development, security, and risk management.

5.2 Processors Currently Used

Currently, to ensure the proper execution of GeekHunter’s services, Users’ Personal Data are shared with the following processors:

PROCESSORS	PURPOSE	PRIVACY POLICY
SendGrid	SendGrid – Email delivery service	Privacy Policy
AWS	AWS (Amazon Web Services) – Cloud storage and infrastructure	Privacy Policy
Google Cloud	Google Cloud – Cloud storage and infrastructure	Privacy Policy
Freshworks	Freshworks – Customer support and service management	Privacy Policy
Colmeia.cx	Colmeia.cx – Automated messaging and customer service tool	Privacy Policy
Hubspot	HubSpot – CRM (Customer Relationship Management) tool	Privacy Policy
Superlógica	Superlógica – Financial billing and subscription management tool	Privacy Policy
Sentry	Sentry – Monitoring and error tracking tool	Privacy Policy
Change for Lemlist	Change for Lemlist – Prospecting and outreach tool	Privacy Policy
Metabase	Metabase – Data intelligence and analytics workflows	Privacy Policy
Nekt AI	Nekt AI – Data intelligence platform	Privacy Policy
LinkedIn Recruiter	LinkedIn Recruiter – Candidate search (TRaaS – Talent Recruitment as a Service)	Privacy Policy
Clicksign	Clicksign – Digital contract signing and management	Privacy Policy
Convenia	Convenia – HR and payroll management system	Privacy Policy
Videoask	VideoAsk – Virtual interviews and English proficiency validation	Privacy Policy
openai	OpenAI – Resume and interview analysis	Privacy Policy
Twillio	Twilio – SMS, WhatsApp, and messaging: large-scale text messaging, automations, and notifications; Voice calls: VoIP and PSTN communications	Privacy Policy
Google Workspace	Google Workspace – Internal document storage and processing	Privacy Policy
Start Carreiras	Start Carreiras – Virtual interviews powered by AI	Privacy Policy
Hackerrank	HackerRank – Technical interviews and assessments	Privacy Policy
RD STATION	RD Station – Marketing management tool	Privacy Policy

In cases where Personal Data is shared with third parties, all entities mentioned in items I to V must use the shared Personal Data in a manner consistent with and limited to the purposes for which it was collected (or for which the User has previously given consent), in accordance with this Privacy Policy, other applicable website or country-specific privacy statements, and all relevant data protection and privacy laws.

5.3 Financial Institutions and Insurance Companies

When the recruiting company, a GeekHunter client, is a financial institution or an insurance company, in accordance with the legal norms and regulations of the Central Bank of Brazil (BACEN) and SUSEP – the Private Insurance Superintendence, your data may be consulted for a possible analysis related to illicit practices such as money laundering and terrorism (BACEN Circular No. 3978 and SUSEP Circular No. 612/2020).

6. INTERNATIONAL DATA TRANSFER

We currently use Google Cloud Platform as our cloud provider, located in the United States of America (USA).

Therefore, the data entered by users into our Platform will be stored there, resulting in an international transfer under the terms of the LGPD.

In this context, we will adopt all applicable (technical, organizational, and legal) measures to ensure compliance and security of the stored data. We remain available to clarify any questions through our DPO (dpo@GeekHunter.com.br).

It is important to note that personal data provided by users may also be subject to international transfer due to companies with whom we share data for service provision, as indicated in the section “COLLECTION AND USE OF PERSONAL INFORMATION.”

7. LEGAL REASONS FOR DISCLOSING YOUR DATA

In certain circumstances, GeekHunter may disclose the Personal Data of professionals, to the extent necessary or appropriate, to government bodies, consultants, and other third parties in order to comply with applicable legislation, a court order, or subpoena, or if GeekHunter believes in good faith that such action is necessary to:

Comply with legislation that requires such disclosure;
Investigate, prevent, or take action related to suspected or actual illegal activities, or cooperate with public agencies, or protect national security;
Execute its contracts;
Investigate and defend against any third-party claims or allegations;
Protect the safety or integrity of services (for example, by sharing with companies facing similar threats);
Exercise or protect the rights, property, and safety of GeekHunter and its affiliated companies;
Protect the rights and personal safety of its employees, users, or the public;
In the event of a sale, purchase, merger, reorganization, liquidation, or dissolution of GeekHunter.
GeekHunter may challenge such demands if it deems that the requests are excessive, vague, or made by incompetent authorities.

8. SECURITY OF PERSONAL INFORMATION

All Personal Data of Professionals and Company Users will be stored in GeekHunter’s database or in databases maintained “in the cloud” by service providers contracted by GeekHunter, which are duly compliant with current data protection legislation.

GeekHunter and its providers employ various security procedures to protect the confidentiality, integrity, and security of processed Personal Data, preventing potential damage resulting from such processing.

Although GeekHunter employs security measures and monitors its system for vulnerabilities and attacks to protect your Personal Data from unauthorized disclosure, misuse, or alteration, the User understands and agrees that there are no guarantees that the information cannot be accessed, disclosed, altered, or destroyed due to breaches of any of the physical, technical, or administrative protections.

In the event of a security incident that may cause risk or significant harm, we will take measures to mitigate its effects and will notify the ANPD and affected data subjects, when required.

9. DATA RETENTION

GeekHunter retains Users’ Personal Data for as long as the account remains active and for the time necessary to perform its services or fulfill the purposes described in this Policy.

We may retain data even after a deletion request or after established time limits, when necessary to:

comply with legal or regulatory obligations;
resolve disputes;
maintain security and prevent fraud or abuse;
ensure the fulfillment of contracts.

10. LEGAL BASES FOR PROCESSING

GeekHunter only processes Personal Data in situations where it is legally authorized or with the User’s express and unequivocal consent.

As described in this Policy, GeekHunter has legal bases to collect, produce, receive, classify, use, access, reproduce, transmit, distribute, process, archive, store, delete, evaluate, or control information; modify, communicate, transfer, disseminate, or extract data about the User.

The legal bases include your consent (expressly and unequivocally collected on our Platform), contracts and preliminary contractual procedures (where processing is necessary to form a contract with the User), and legitimate interests, provided that such processing does not violate your rights and freedoms, as outlined in this document.

Such legitimate interests include protecting the User and GeekHunter from threats, complying with applicable legislation, exercising rights in judicial, administrative, or arbitration proceedings, enabling or managing business operations (including quality control, reporting, and offered services), managing business transactions, understanding and improving business and customer relationships, and enabling users to find economic opportunities.

The User has the right to refuse or withdraw consent provided to GeekHunter when consent is the legal basis for processing personal data. In such cases, GeekHunter may terminate the provision of its services to that user. However, in some cases, GeekHunter’s clients, due to the nature of their contracts or preliminary hiring procedures, will assume the role of personal data controllers. In these cases, the data subject must directly request data deletion from the client.

If you have questions about the legal bases for the collection, processing, and storage of your personal data, please contact GeekHunter and its Data Protection Officer via email at dpo@GeekHunter.com.br.

11. RIGHT TO ACCESS AND CONTROL YOUR PERSONAL DATA

GeekHunter offers Users several options regarding their collected, processed, and stored Personal Data, including deletion and/or correction. The User may:

Delete data: The User may request the deletion of some of their Personal Data (for example, if it is no longer necessary to provide services).
Modify or correct data: The User may edit or request the editing of some of their Personal Data. The User may also request updates, modifications, or corrections in certain cases, especially if the data is incorrect.
Place objections, limits, or restrictions on data use: The User may request the cessation of use of all or part of their Personal Data (for example, if we do not have the right to continue using it), or limit our use (for example, if their data is incorrect or stored illegally), noting that GeekHunter may still process Personal Data under the legal bases listed in this document.
Right to access or transfer data: The User may request a copy of their Personal Data and the data provided in a readable format, either in print or electronically.
The User may submit the above requests by contacting our Data Protection Officer via email at dpo@GeekHunter.com.br, and these requests will be considered in accordance with applicable laws.

12. POLICY REVISIONS

If GeekHunter modifies this Privacy Policy, such changes will be prominently published on the GeekHunter website. This Policy is effective as of October 23, 2025. If the User has any questions regarding the website’s privacy policy, please contact GeekHunter through the Data Protection Officer’s service channel.

13. CONTACT

The User may contact the DPO via email at dpo@GeekHunter.com.br

14. PREVIOUS VERSIONS

Previous versions of the Privacy Policy are available at the links below.

17/01/2023