Privacy Policy - InterJobs

1. Introduction and Commitment to your Privacy

A InterJobs ("we", "our", "Platform") is a technology platform that connects professionals to job opportunities in the United States, by compiling and organizing public employer data obtained from government sources such as the U.S. Department of Labor (DOL) and USCIS.

Your privacy is our priority. This Privacy Policy explains clearly, transparently and in detail how we collect, use, store, protect and share your personal information when you use our platform.

Important: By creating an account and using InterJobs, you agree to the practices described in this Privacy Policy. If you do not agree with these terms, please do not use our services.

This policy was drafted in compliance with:

General Data Protection Law (LGPD - Law No. 13.709/2018)
General Data Protection Regulation (GDPR - EU)
Google API Services User Data Policy
Microsoft Graph API Terms of Use
Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014)
CAN-SPAM Act (USA)

2. Definitions

"InterJobs"

Technology platform for accessing public data to connect with American employers.

"User"

Natural person over 18 years old who uses the platform to look for job opportunities.

"Public Data"

Employer information obtained from government sources (DOL, USCIS) and public business records.

"Personal Data"

Any information that identifies or may identify a natural person, as defined by the LGPD.

"OAuth 2.0"

Industry-standard authorization protocol that allows secure access to third-party resources without sharing credentials.

"Cookies"

Small text files stored on your device to improve the browsing experience.

3. Who We Are

InterJobs Tecnologia Ltda

City: Juiz de Fora - MG, Brazil
Email: [email protected]
General contact: [email protected]

Data Protection (DPO): Dedicated channel for questions, LGPD requests and data incident reports - [email protected]

4. Legal Basis for Data Processing

In compliance with the LGPD (Art. 7) and GDPR (Art. 6), we process your personal data based on the following legal grounds:

Contract Performance (Art. 7, V - LGPD)

To provide the services contracted by you, including access to the database, email sending tools and application management.

Consent (Art. 7, I - LGPD)

When you explicitly authorize, such as receiving marketing newsletters, participating in surveys or allowing access to specific features.

Legal Obligation (Art. 7, II - LGPD)

To comply with legal, regulatory obligations or court orders, such as fraud prevention, investigations and compliance with applicable laws.

Legitimate Interest (Art. 7, IX - LGPD)

To improve our services, ensure platform security, prevent abuse, perform statistical analysis and develop new features.

Right of Revocation: You can revoke your consent at any time through your account settings panel or via email [email protected].

5. Data We Collect

We collect different categories of data to provide our services efficiently and securely:

5.1. Registration and Profile Data

Full name - For identification in applications
Email - For login, notifications and communications
Password - Stored with bcrypt hash (cost factor 12+) - NEVER STORED IN PLAINTEXT
Phone - Optional, for additional contact
Preferences - Search filters, states of interest, visa types
Resume/CV - Stored encrypted (AES-256) when sent
Application history - Companies contacted, status, dates

5.2. Authentication Data (Google/Microsoft)

Important about OAuth authentication:

Email (Google/Microsoft) - Used exclusively for authentication and identification
Name (Google/Microsoft) - For automatic profile filling
Access Token and Refresh Token - Stored with AES-256-GCM encryption for sending emails
Requested scopes:
- openid, profile, email - Basic authentication
- https://www.googleapis.com/auth/gmail.send - For sending emails
- https://graph.microsoft.com/Mail.Send - For sending via Outlook
- https://graph.microsoft.com/User.Read - To read name and email

Guarantee: We NEVER we read your inbox, NEVER access your contacts, NEVER modify settings, NEVER delete messages, NEVER send emails on your behalf without your explicit action.

5.3. Technical and Usage Data

IP Address - For security, fraud prevention and location analysis
Browser type and operating system - To optimize experience
Pages visited and session time - To understand usage patterns
Cookies - To maintain session and preferences (Cookie Policy)
Activity logs - Emails sent, companies viewed, campaigns created

5.4. Payment Information

WE NEVER STORE CREDIT CARD DATA

Payments processed by certified PCI-DSS Level 1 gateways (Stripe, Mercado Pago)
Encrypted data end-to-end directly to the processor
We only receive transaction confirmations (approved/refused/transaction ID)
We store subscription status, billing date, contracted plan and payment history

6. How We Use Your Data

Platform Operation

Criar e gerenciar sua conta
Fornecer acesso ao banco de dados de empregadores
Processar envio de e-mails através da sua conta
Gerenciar campanhas e filtros de busca
Processar pagamentos e assinaturas
Armazenar seu currículo para candidaturas

Communication and Support

Enviar notificações importantes sobre sua conta
Responder solicitações de suporte e dúvidas
Informar sobre atualizações críticas da plataforma
Enviar alertas de segurança
Newsletters (apenas com seu consentimento)

Service Improvement

Analisar padrões de uso (dados anonimizados)
Desenvolver novos recursos e funcionalidades
Otimizar performance e experiência do usuário
Corrigir bugs e problemas técnicos
Realizar testes A/B (dados agregados)

Security and Compliance

Prevenir fraudes e abusos da plataforma
Detectar atividades suspeitas ou spam
Cumprir obrigações legais e regulatórias
Proteger direitos de usuários e terceiros
Realizar investigações internas de segurança

Good Communication Practices

InterJobs is a productivity tool that helps you manage and send applications in an organized and professional manner:

Quality monitoring: We analyze engagement metrics to ensure relevant communications
Spam prevention: We do not allow mass or untargeted sending
Respect for recipients: We support professional communication best practices
Reputation preservation: We encourage personalized, well-targeted applications

Responsible use of the platform guarantees better response rates for you and preserves the reliability of the ecosystem with employers.

7. Use of the Google API (Gmail and OAuth 2.0)

Compliance with the Google API Services User Data Policy

Requested Scopes and Justification

openid, profile, email - What: Basic authentication. Why: Create an account and identify you securely.
https://www.googleapis.com/auth/gmail.send - What: Send emails on your behalf. Why: Allow you to send applications directly from the platform using your own Gmail account.

Usage Restrictions (Limited Use Requirements)

• NEVER we read your inbox, received messages or email history
• NEVER we access your Google contacts
• NEVER we delete or modify your existing emails
• NEVER we use your Google data for ads or marketing
• NEVER we transfer your data to third parties without your explicit consent
• NEVER we share Google data with other applications or services

OAuth Token Storage

• Tokens são armazenados com AES-256-GCM encryption (military level)
• Tokens são válidos apenas para envio de e-mails iniciados por você
• Tokens são renovados automaticamente (refresh tokens) without manual intervention
• Tokens são revogados imediatamente ao desconectar a conta
• NEVER we share access tokens with no one

Your Right to Revoke Access

You can revoke InterJobs' access to your Google account at any time in two ways:

Through the platform: In the settings panel, click "Disconnect Google Account"
By Google: Go to Connected Google accounts and remove InterJobs access

Upon revocation, all tokens are immediately invalidated and removed from our servers.

Responsible Use and Account Blocking

InterJobs is a tool to support your job search. Applications must be sent consciously and moderately, respecting the email usage policies of providers.

Google monitors the volume and frequency of sends associated with your account. Mass, automated or indiscriminate sending of messages may be considered spam, and Google may suspend or block your account without prior notice.

InterJobs has no control or power to reverse, manage or influence blocks applied directly by Google. We are not responsible for suspensions resulting from the misuse of your account.

If this happens, you can recover access by following the provider's official procedures at: Google Help Center.

We recommend respecting daily sending limits and intervals between applications, keeping the platform as a support tool for your professional applications.

OAuth Verification: We comply with all Google OAuth verification requirements and have undergone a full review to ensure transparency and security.

For more information about Google's policy, see: Google API Services User Data Policy

8. Use of the Microsoft Graph API (Outlook)

Compliance with Microsoft Graph API Terms

Requested Scopes and Justification

https://graph.microsoft.com/User.Read - What: Read name and email. Why: User authentication and identification.
https://graph.microsoft.com/Mail.Send - What: Send emails on your behalf. Why: Allow applications via your Outlook account.

Usage Limitations

• NEVER we access your Outlook inbox
• NEVER we read or modify your contacts
• NEVER we delete or alter your emails
• NEVER we use your data for unauthorized purposes
• NEVER we share data with third parties

Token Storage

• Tokens armazenados com AES-256-GCM encryption
• Válidos apenas para envio de e-mails iniciados por você
• Revogados imediatamente ao desconectar a conta

Access Revocation

To revoke InterJobs' access to your Microsoft account:

In the InterJobs panel, click "Disconnect Microsoft Account"
Or access your Microsoft account and remove the permission

Responsible Use and Account Blocking

InterJobs is a tool to support your job search. Applications must be sent consciously and moderately, respecting the email usage policies of providers.

Microsoft monitors the volume and frequency of sends associated with your account. Mass, automated or indiscriminate sending of messages may be considered spam, and Microsoft may suspend or block your account without prior notice.

InterJobs has no control or power to reverse, manage or influence blocks applied directly by Microsoft. We are not responsible for suspensions resulting from the misuse of your account.

If this happens, you can recover access by following the provider's official procedures at: Microsoft Help Center.

We recommend respecting daily sending limits and intervals between applications, keeping the platform as a support tool for your professional applications.

9. SeasonalJobs API

InterJobs uses its own SeasonalJobs API as a data source and functionality. This API:

Compiles and organizes public data of American employers (DOL, USCIS)
Provides up-to-date information about companies hiring through H2A/H2B visas
Manages the contacts database, status and application history
Processes platform search and filtering requests
Stores user profile information
Does not share user data with external third parties

Origin of Data: All employer information is of public domain obtained from American government sources (DOL Disclosure Data, USCIS Public Records) and public business records, in compliance with the American freedom of information law (FOIA).

10. Data Sharing

WE NEVER SELL, RENT OR COMMERCIALIZE YOUR PERSONAL INFORMATION

We share your information only in the following strictly limited and necessary situations:

Essential Service Providers

Third-party companies that help us operate the platform (data processors):

Hosting: AWS, DigitalOcean - User data stored with encryption
Payments: Stripe, Mercado Pago - End-to-end encrypted data
Transactional emails: SendGrid, Amazon SES - Notifications only
Analysis: Umami Analytics - Anonymized and aggregated data
Security: Cloudflare - Protection against DDoS attacks

Guarantee: All providers sign Data Processing Agreements (DPA) and are in compliance with LGPD/GDPR.

Legal Obligations and Protection of Rights

We may disclose information when legally required:

Ordens judiciais, mandados ou intimações
Investigações criminais ou administrativas
Proteção de direitos legais da InterJobs
Prevenção de fraudes ou atividades ilegais
Conformidade com CAN-SPAM Act, LGPD, GDPR

Employers (Only What You Send)

When you send an email to an employer, we share exclusively the content you chose to send:

Seu nome (como fornecido por você)
Seu e-mail (para que possam responder)
Texto do e-mail (que você redigiu)
Currículo (se você escolheu anexar)

We NEVER share your password, browsing history, payment data or other users' data.

11. Storage and Security

Technical Security Measures

SSL/TLS 1.3 Encryption - All transmissions encrypted
Hashed passwords - bcrypt (cost factor 12+) / Argon2
AES-256-GCM - Sensitive data at rest
IDS/IPS Firewalls - Intrusion detection and prevention
Encrypted backups - Diaries, 30-day retention
24/7 monitoring - Suspicious activities and anomalies
2FA - Two-factor authentication available
Rate limiting - Brute force attack prevention

Administrative Measures

Restricted access - Principle of least privilege
Training - Team trained in security and LGPD
Quarterly audits - Security and compliance
Internal policies - Data protection and LGPD
NDA - All employees and third parties sign
Access logs - Full traceability
Response plan - Security incidents
Environment segregation - Production, dev, testing

Notice: Although we use the best industry security standards (ISO 27001, SOC 2), no system is 100% impenetrable. Protect your password, enable 2FA and do not share credentials.

Data Breach Notification

In the event of a security breach that may compromise your personal data, we will notify you and the ANPD as required by the LGPD (Art. 48), within a reasonable timeframe (up to 72 hours after incident confirmation).

12. Your Rights (LGPD)

As a personal data subject, you have the following rights guaranteed by the LGPD (Art. 18):

Processing confirmation

Know whether we process your personal data

Data access

Request a copy of all data we have about you

Rectification

Correct incomplete, inaccurate or outdated data

Deletion (Right to erasure)

Request the deletion of your personal data

Opposition

Object to processing based on legitimate interest

Consent revocation

Revoke consent at any time

Portability

Request the transfer of data to another provider

Information about sharing

Know with whom we share your data

How to Exercise Your Rights

To exercise any of these rights, contact us through the data protection channel:

Email: [email protected]
Subject: "LGPD Request - [Your Name]"
Term: We will respond within 15 business days

For your security, we may request proof of identity before processing your request.

13. Data Deletion and Account Closure

How to Delete Your Account

You can delete your account at any time through:

Platform dashboard: Go to Settings → Delete Account
Deletion request: Send email to [email protected]

What is permanently deleted:

Todos os dados de perfil (nome, e-mail, telefone, currículo)
Histórico completo de candidaturas
Tokens OAuth do Google/Microsoft
Preferências e configurações personalizadas
Logs de atividade associados à sua conta
Dados de pagamento e histórico de assinaturas

Legal Retention Period

Some data may be retained for a minimum legal period (up to 5 years) to fulfill tax, fiscal and fraud prevention obligations:

Tax data: Retained for 5 years (Law No. 8.846/94)
Security logs: Retained for 6 months for investigations
Anonymized: Completely anonymized data may be retained for statistical analysis

OAuth - Access Revocation

When deleting your account:

Google: Tokens are revoked and removed immediately
Microsoft: Tokens are revoked and removed immediately
Recomendamos também revogar manualmente o acesso pelo provedor

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements or user feedback.

How you will be notified:

Por e-mail (para mudanças significativas)
Aviso no site e na plataforma
Atualização da data de "Última atualização" no topo

Date of last version: 30 January 2026

We recommend reviewing this policy periodically. Continued use of the platform after changes constitutes acceptance of the new terms.

15. Contact

Data Protection (DPO)

Email: [email protected]
Dedicated channel for questions, LGPD requests and data incident reports.

InterJobs Tecnologia Ltda

City: Juiz de Fora - MG, Brazil
Email: [email protected]
Privacy: [email protected]

For questions about privacy, LGPD requests or reporting data breaches, contact us by email: [email protected]