Privacy Policy

• Account data — your e-mail address, password (stored only as a hash by our authentication provider), full name, optional WhatsApp number, your plan and limits, the dates you accepted the Terms and this policy, and whether you consented to automatic submission.
• Candidate profile — what you enter or what is imported from your CV: contact details (e-mail, phone, city, country, address, links such as LinkedIn), work history, education, skills, languages, certifications, work authorization and sponsorship answers, the roles you target, salary expectations and work preferences.
• Optional sensitive items — gender, ethnicity, disability and veteran status. These are empty by default. They are never sent to anyone unless you explicitly fill them in and classify them for use in applications.
• Travel-document data — passport number and expiry date, only if you choose to enter them.
• Your CV — the file you upload, kept in private storage that only your account and the application engine working for you can read.
• Matching and application records — the jobs matched to you and their scores, the résumés, cover letters and form answers generated for each application, screenshots that confirm a submission, the status of each application, responses and interviews, and an audit trail of what was approved, sent or declined and when.
• Form data, through the browser extension — only when you press the button in the kNexo Jobs extension: the labels, options and current values of the form fields on the page open in that tab (including its embedded frames), the page address and its visible text, and the instruction you type. They are used only to write the answers for that form, and are kept with your account like your application records. The extension reads nothing before you press the button, does not record your browsing and never submits a form.
• Settings — your application mode rules, match criteria and notification preferences.
• Usage and technical logs — sign-in times, requests to the service and automation run logs, used to operate and protect it.

Job postings are collected from public sources and are not personal data about you. We do not buy data about you from third parties.

• To provide the service you asked for (performance of a contract) — creating your account, building your profile, matching jobs, generating tailored résumés and cover letters, preparing applications, submitting the ones you approve, tracking responses and sending the notifications you turned on.
• With your consent — submitting applications automatically, without your prior approval of each one; and using any optional sensitive field you chose to fill in and classify for use. You can withdraw either consent at any time; withdrawal does not undo what was already sent.
• Legitimate interest — keeping the service secure, preventing abuse and fraud, enforcing usage limits, and diagnosing failures.
• Legal obligation — keeping the records the law requires and answering lawful requests from authorities.

Matching and scoring are automated. They decide which jobs are shown to you and which applications are prepared; they do not decide whether an employer hires you. You can ask us to review an automated result that affects you by writing to contact@4profitai.com.

We do not sell your data.

• Employers and their applicant-tracking providers — when an application is submitted, the employer and the system it uses to receive applications get the data that application contains: your contact details, résumé, cover letter and your answers to the form. They then handle it under their own privacy policies.
• Supabase — database, authentication and file storage.
• Vercel — hosting of this web application.
• The operator's own servers — where the automation that matches jobs, prepares documents and submits applications runs.
• Anthropic — its Claude models generate text for you: tailored résumés, cover letters and answers to application questions. The parts of your profile and the job description needed for the task are sent to the model, and so is the text of your CV when it is imported into your profile.
• OpenAI — one of its models may be used by the automation to read an application page while filling it in (for example to get past a verification step); a screenshot of that page, which can show the answers being submitted, is sent to the model.
• A WhatsApp gateway — only if WhatsApp notifications are enabled for your account; it receives your number and the notification text.
• Authorities — when we are legally required to disclose data.

The sign-in system is shared with kNexo, a sister product of the same family: the same e-mail and password work in both. Your kNexo Jobs profile and applications are not part of kNexo.

The infrastructure and AI providers listed above are located outside Brazil, and most employers you apply to are abroad as well — applying to remote jobs at foreign companies necessarily sends your application data to them. These transfers are made to perform the service you requested and, for applications, at your direction.

• While your account is active, we keep your data so the service can work.
• When you ask for your account to be deleted, processing stops immediately and your data is erased within 15 days of the request. You can cancel the request until the erasure is carried out.
• We keep only what the law requires us to keep, for as long as it requires.
• Applications already sent to employers are held by those employers under their own policies; to have them removed you need to contact each employer.

• Per-user, row-level access controls in the database: a signed-in user can read only their own rows, and the automation acts for one user at a time with credentials scoped to that user.
• Encrypted transport (HTTPS/TLS) between your browser, the service and its providers.
• Private file storage for CVs, with one folder per user.

No system is perfectly secure. If an incident creates a relevant risk for you, we will tell you and the authority as the law requires.

Under the LGPD you can, at no cost:

• Confirm and access what we hold about you — it is visible in the app (Profile, Applications, Audit, Settings, Account).
• Correct incomplete, inaccurate or outdated data — edit your Profile and Settings at any time.
• Take your data with you (portability) — the “Download my data” button on the Account page gives you a JSON file with everything stored about you.
• Delete your data — “Delete my account” on the Account page.
• Withdraw consent — turn off automatic submission on the Account page, or clear an optional sensitive field in your Profile.
• Be informed about who we share data with and about the consequences of refusing consent — that is what this policy is for; ask us anything it does not answer.
• Object, or ask for a review of processing or of an automated result you disagree with.
• Complain to the Brazilian data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD).

For anything you cannot do in the app, write to contact@4profitai.com from the e-mail address of your account. We may ask for information to confirm it is you.

We use only the session cookies needed to keep you signed in, plus a local preference for the light or dark theme stored in your browser. There are no advertising or cross-site tracking cookies.

kNexo Jobs is not for anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has created an account, write to contact@4profitai.com and we will remove it.

We may update this policy. The version and date at the top identify the current text. If a change is significant — for example a new purpose or a new kind of recipient — we will tell you by e-mail or in the app before it takes effect and, where the law requires it, ask for your consent again. See also the Terms of Use.

Controller: kNexo Jobs, a service operated by 4Profit AI. Privacy questions and requests: contact@4profitai.com.