Privacy
This is a portfolio demonstration. Every candidate it ranks is synthetic, and there is no way to upload a real CV. What follows is what the system actually stores, checked against the database schema rather than described from memory.
If you just use the demo
You get a signed cookie holding a random identifier and an expiry date. That identifier is what keeps your screening yours; it is not linked to you, and we cannot tell who you are from it. We do not log your IP address for identity — deliberately, because network address translation puts unrelated people behind one address and switching networks would lock you out of your own work.
- —A random session identifier, in a cookie your browser holds
- —The screening you create: which rubric, which synthetic candidates, which scores
- —Nothing else. No account, no email, no name
how longDeleted 24 hours after the session is issued.
If you sign in with Google
Signing in is optional and exists for one reason: so your work survives a new browser or a different machine. Google gives us three things, and we keep them.
- —Your name and the email address on your Google account
- —The profile picture URL Google provides
- —An opaque account identifier from Google, and the tokens that keep you signed in
how longKept for 90 days after your last visit, then deleted. Signing out ends the session immediately.
If you paste a job posting
The paid step of the demo takes the text of a job advertisement and asks a model to draft a rubric for it. A job advertisement is a public document about a role, not about a person. We store a fingerprint of the text so that the same posting is not paid for twice, and the rubric that came out of it.
- —A cryptographic digest of the posting text
- —The rubric: criteria, weights, thresholds, and what is explicitly out of scope
how longTied to the screening it belongs to, and deleted with it.
What we never store
These are not promises about intent. They are properties the code enforces, each with a test that fails if it stops being true.
- —No CV of a real person. There is no upload control anywhere in the product
- —No candidate text in the decision trail, the logs, or the tracing attributes
- —No IP address and no browser fingerprint
- —No analytics, no advertising pixels, no third-party trackers of any kind
Who else sees this
The application runs on a server in Brazil. Two things leave it, and only in the situations named.
- —Google — only if you choose to sign in, and only to confirm who you are
- —Anthropic — only when you paste a job posting, and only the text of that posting. No candidate data and no account data is ever sent
- —Nobody else. Your data is not sold, rented, or shared
Your rights
Under the LGPD and the GDPR you can ask what we hold about you, ask for it to be corrected, and ask for it to be deleted. Write to the address below and you will get an answer.
- —Deleting your account removes your name, email and sessions
- —Anonymous screenings disappear on their own within 24 hours
- —You do not need an account to use the demo, so you can avoid all of this by not signing in
What this page does not claim
No authority has reviewed this project, and no audit of any kind has been performed on it. This page describes what the system does; it is not a statement about legal standing. The requests above are answered by one person, by email, and there is no automated self-service portal.
Contact
Questions about anything on this page, or a request about your data:
privacidade@gomio.com.brlast reviewed 9 September 2026