Privacy & Data Protection Policy
Last updated: June 9, 2026
Social Team S.A.S. (NIT 901.614.134-2), domiciled in Bogotá D.C., Colombia, as data controller, operates Tu Currículo and protects your personal data under Colombia's Law 1581 of 2012, Decree 1377 of 2013 and other rules, as well as applicable Latin American law. This Policy describes what data we process, why, with whom we share it and how to exercise your rights.
1. Data we process
Account data (name, email, encrypted password, phone/WhatsApp); the resume content you enter; usage data (views and downloads of your resume, basic technical info); and payment data, handled by the payment gateway (we don't store your full card number).
2. Sensitive data
Your resume may contain sensitive data (e.g., a photo, or health, union or political data if you include it). Providing sensitive data is optional. By including it voluntarily and publishing your resume, you authorize its processing and possible disclosure for the purpose of showing your resume.
3. Purposes
To create, host and display your resume (including publishing it if you choose); manage your account, plan and payments; provide support and improve the service; generate usage stats of your own resume; and comply with legal obligations. We do not sell your personal data.
4. Processing through artificial intelligence
To offer resume writing and improvement features, the content you enter may be sent to and processed by artificial intelligence providers acting as processors (for example, Anthropic). These providers handle the information under our instructions and their own security measures, solely to generate the suggestions you request, and do not use it to identify you or to train models without a legal basis. AI plays an assistive role: we do not make automated decisions that produce legal effects on you. As part of this processing, your data may undergo international transfer per the relevant clause.
5. Authorization and legal basis
We process your data with your prior, express and informed authorization, given at sign-up, and/or to perform the contract and comply with legal duties. You may revoke your authorization at any time, except where legally or contractually prevented.
6. Processors and third parties
We share data only with providers needed to operate, acting as processors under their own security measures: hosting (Vercel), database and authentication (Supabase), artificial intelligence provider (e.g., Anthropic), payment gateway and email services. Each processes data only on our instructions and policy.
7. International data transfer
Some providers process data on servers outside Colombia (e.g., in the United States). By accepting this Policy you authorize such international transfer and transmission; we adopt reasonable measures so the provider offers an adequate level of protection, per Law 1581 of 2012.
8. Public resumes
If you publish your resume, the information it contains will be visible to anyone with the link and may be indexed by search engines. You can unpublish it at any time from the editor.
9. Your rights
You may know, update and rectify your data; request proof of authorization; be informed of its use; file complaints with the competent authority; revoke authorization and/or request deletion where applicable; and access your data free of charge. In Colombia, queries are answered within ten (10) business days and claims within fifteen (15), per Law 1581 of 2012. To exercise them, contact us via the platform's support channels (soon, a dedicated email at tucurriculo.com).
10. Minors
The Platform is intended for adults. We do not knowingly collect minors' data without their legal representatives' authorization; if detected, we will delete it.
11. Cookies
We use strictly necessary cookies and local storage for login and operation, and optionally for analytics. You can manage them in your browser.
12. Security
We apply reasonable technical and administrative measures (encryption in transit, per-user access control, hashed passwords). No system is 100% infallible, but we work to minimize risks.
13. Retention and deletion
We keep your data while your account is active and as needed for the stated purposes or legal duties. If you delete your account, we erase or anonymize your information within a reasonable period, keeping it for at most ninety (90) days in encrypted backups, unless legally required to keep it longer.
14. Supervisory authority
In Colombia, the data-protection authority is the Superintendence of Industry and Commerce (SIC, sic.gov.co), where you can file claims. We may register databases subject to registration in the National Registry of Databases (RNBD).
15. By country (Latin America)
If you reside outside Colombia, your country's rules and authorities also apply: Mexico (LFPDPPP; ARCO rights), Argentina (Law 25.326; AAIP), Chile (Law 19.628), Peru (Law 29733), Brazil (LGPD; ANPD). You may exercise your rights (access, rectification, deletion, objection and portability where applicable) through the same channels.
16. Changes
We may update this Policy. We'll publish the current version with its date; material changes will be communicated through the Platform or by email.
17. Contact
Controller: Social Team S.A.S., NIT 901.614.134-2, Bogotá D.C., Colombia. To exercise your rights or ask questions, contact us via the platform's support channels (soon, a dedicated email at tucurriculo.com).
This document is a template; review it with a legal advisor before public launch and before enabling payments.