Gupy Admissions Privacy Notice

Gupy is strongly committed to privacy and the protection of your personal data. For this reason, we present this Privacy Notice, which aims to explain clearly and transparently how, when, and for what purposes Gupy processes your Personal Data when you use Gupy Admissão as a prospective employee.

Your data is always processed in accordance with this Privacy Notice, pursuant to the contract we have with the Client Company and in accordance with the instructions provided to Gupy by that company.

If you are unfamiliar with any of the terms mentioned in this notice, we recommend that you consult our Privacy Glossary by clicking here.

About Us

GUPY RECRUITMENT TECHNOLOGY
CNPJ No. 23.514.668/0001-52

Gupy is the owner of Gupy Admissão and acts as a Personal Data Processor, handling data in accordance with the instructions of the Client Company, which is the Data Controller for Personal Data within the scope of the hiring process.

For this reason, we recommend that you also review the Privacy Notice of the company with which you are participating in the hiring process—the entity responsible for processing your Personal Data.

All interactions and communications during your hiring process take place exclusively through Gupy Admissão, WhatsApp, and email, in accordance with the Client Company’s instructions.

What data is collected? For what purposes?

Gupy processes your data on behalf of the Client Company to facilitate your onboarding and hiring process. This processing includes organizing basic information for the onboarding process, communicating with you about the progress of the process, and sending you your employment contract for signature.

Protecting your privacy is a fundamental commitment for Gupy, which is why we will never sell your data.

The table below lists the categories of personal data processed, their specific details, and the methods used to collect or enter this information into the platform.

DATA TYPE	PURPOSES	HOW WE COLLECT YOUR DATA
Identification Data: full name, email address, cell phone number, address, and CPF.	This data is used to: (i) Enable the use of and access to the platform; (ii) Contact you to: Address issues related to the use of the platform, such as, but not limited to, access problems and irregularities in your account; Invite you to participate in surveys related to the platform’s usability, suggestions for improvement, and the development of new products; Send electronic communications requesting that you correct, supplement, or update your registration information. (iii) Use your cell phone to send SMS and WhatsApp notifications regarding registration updates, pending documents, or matters requiring your attention during your admission process.	These are entered by you on the Platform. You alone are responsible for the information you provide, which you enter manually and submit yourself.
Admission Documents: ID card, CPF, voter registration card, CTPS, NIS (PIS, PASEP, or NIT), proof of address, bank information, and other documents that may be requested by the Client Company, depending on your role or position.	The Client Company uses these documents in its onboarding process, in accordance with labor laws. Depending on the location, the Client Company may request additional information, without Gupy’s involvement. At this stage, Gupy uses Artificial Intelligence to: Verify that the information you entered matches the information in the attached documents; and determine whether the file you submitted is the type of document requested. *The Client Company may, at its discretion, choose not to use the AI feature in its onboarding process.*	These are entered by you or by the Client Company on the Platform. The company may enter, replace, or correct data and/or documents directly on the platform.
Dependent information (including children and adolescents): full name, CPF, date of birth, relationship to the employee, and authorization information for labor and social security purposes.	To comply with the Client Company’s legal and regulatory obligations under applicable labor and social security laws.	Entered by you or by the Client Company on the Platform.
Browsing Data: Information about your device, records of access to the web application (such as IP address, date, and time), time spent on the platform, duration of access, clicks, and search terms.	To monitor the platform’s operation; to conduct analyses for improvements; launch new products and services; comply with legal and administrative obligations.	We may collect this information automatically through cookies and other similar technologies while you browse Gupy Admissão. To learn more, please see our Cookie Notice.

Gupy may use WhatsApp as a communication channel during certain stages of the recruitment, selection, and onboarding process, as authorized by the Client Company.

The use of WhatsApp may include features such as:

sending invitations to begin the onboarding process;
notifications regarding pending or rejected documents in the onboarding process;
sending reminders or updates about process stages;
automatically scheduling interviews, allowing candidates to select available times directly on WhatsApp;
sending operational notifications related to the progress of the selection or hiring process.

The purpose of these communications is to facilitate interaction between you and the Client Company, making the recruitment and hiring process more efficient and accessible.

Messages may be sent via WhatsApp only when this feature is enabled by the Client Company and may be disabled depending on the settings of the onboarding process.

The cell phone number you provide may be used for this purpose and shared with service providers responsible for delivering the messages, solely to facilitate these communications.

With whom do we share the data we collect?

We are authorized by the Data Controller to share your Personal Data with other data processors, including government agencies, if necessary for the purposes listed in this Privacy Notice, in accordance with the principles and safeguards established by the LGPD.

Your Data will be shared (only if strictly necessary) with certain service providers we engage to assist us in carrying out our activities, namely:

Service Provider	Service Provided	Location
Amazon Web Services	Cloud data storage and processing.	State of Virginia, USA
Beamer	Sending platform notifications.	United States
Capta Mobility Cyber Solutions	Automated routing for transportation voucher benefits.	Brazil
Datadog, Inc.	Application monitoring.	United States or European Union
Here	Data-driven distance calculation.	Netherlands
DocuSign	Digital signature.	European Union and/or United Kingdom
Google Analytics	Web analytics.	United States
Hotjar	Conducting product research and usability analysis.	Malta
LinkedIn	Integration with Recruiter System Connect (RSC).	United States
OpenAI	Automatic completion of candidate resumes on the Platform.	United States
MailGun	Sending emails, including notifications about the status of the hiring process and requests to update registration information.	San Antonio, Texas, USA
Salesforce	Support Channels and CRM.	Brazil
Salú	Scheduling and administration of the pre-employment exam.	Brazil
E-Social	Validation and verification of registration information with government systems, when necessary to comply with legal labor and social security obligations.	Brazil
Infobip	Sending SMS notifications to inform users of pending documentation, updates to the onboarding process, and operational communications	Germany

These service providers have been carefully selected, are bound by strict confidentiality agreements and obligations regarding the protection of your Data, and may process it solely and exclusively for the purpose of providing the service contracted by the Company through Gupy.

Other specific legal requirements may lead to the sharing of personal data, including for the purpose of defending our rights and interests in any type of dispute or to comply with orders from competent authorities.

Data on Children and Adolescents

During the hiring process, personal data of children and adolescents may be processed, particularly when related to dependents for employment, social security, or benefit purposes.

In such cases:

The processing will occur exclusively to comply with legal or regulatory obligations;
Data will be collected through entry by you or by the Client Company;
Gupy will act as a Data Processor, in accordance with the Client Company’s instructions.

The processing of personal data of children and adolescents will comply with the provisions of the General Personal Data Protection Law and the Statute of the Child and Adolescent, particularly the principle of the best interests of the child and adolescent.

Where applicable, Brazilian regulations related to the protection of children and adolescents in the digital environment will also be taken into account.

International Transfer of Personal Data

We may transfer your Personal Data outside of Brazil, specifically to the United States or countries in the European Union, if the Client Company or any of the Sub-processors have servers in those countries, such as in the case of data storage locations.

We comply with all guidelines established by current legislation and adopt best practices for data security and protection to ensure the integrity, confidentiality, availability, and privacy of your Personal Data throughout the entire process.

Our relationships with such companies are governed by contracts that include data protection and information security obligations appropriate to the nature of the Personal Data processing we perform and consistent with the requirements of Brazilian law.

How Gupy Protects Your Personal Data

We take the privacy and protection of your personal data very seriously, and for this reason, we have adopted technical, administrative, and organizational security measures and best practices to protect our systems and databases, using the best technologies available on the market, including antivirus software, data encryption, anonymization of personal data, information access controls, the use of firewalls, and the implementation of an information security policy, software solution architecture with intrusion prevention and the use of HTTPS, institutional measures (Privacy and Data Protection Governance Program), employee training and awareness, protection against unauthorized access, among others.

However, despite our efforts, given the nature and architecture of the internet—which includes elements beyond our control—it is impossible to guarantee that malicious actors will not gain access to or misuse personal data, as this is an inherent risk associated with the use of computerized systems.

Artificial Intelligence at Gupy

How does Artificial Intelligence work?

In Gupy Admissão, Gupy’s Artificial Intelligence is used to validate and verify admission documents uploaded to the platform.

The Artificial Intelligence used in Gupy Admissions does not verify the authenticity, legal accuracy, or formal validity of the documents submitted, nor does it consult government databases to validate their legal validity.

The verification performed by the platform is strictly formalin nature , intended to ensure that the information has been filled out correctly and that the type of document submitted matches the requirements; it does not verify the authenticity, accuracy, or legal validity of the submitted documents.

The use of Artificial Intelligence is not mandatory and may be disabled by the Client Company, which may choose to manually verify the documents and directly manage the submission or entry of information on the platform.

What data does Artificial Intelligence analyze, and for what purposes?

ID card, Proof of residence, Work Permit (CTPS), Driver’s License (CNH), Voter Registration Card, Military Service Certificate, Bank information, National Health Card (CNS), NIS (PIS, PASEP, or NIT), CPF, Occupational Health Certificate (ASO), among others that may be included as standard documents, depending on the diverse needs of client companies.

This data is read by Gupy AI for the sole purpose of verifying the consistency between the information contained in the attached document and the information you have provided, thereby assisting in the organization and verification of the information required for the hiring process.

Your rights as a data subject

You may exercise your rights under the LGPD, such as confirmation of the existence of data processing, the right of access, correction of incomplete, inaccurate, or outdated data, the right to data portability, withdrawal of consent, the right to object, or a request to delete your account or your data.

Since Gupy acts as a Personal Data Processor in the context of the hiring process, these rights should preferably be exercised with the Client Company, which acts as the Personal Data Controller and is responsible for defining the purposes and means of processing.

However, if this is not the case and you encounter issues related to the usability of Gupy Admissão, please contact us via support.

Gupy Admissão complies with and follows the guidelines established by the LGPD.