Gupy Recruitment and Selection Privacy Notice for Job Applicants
This notice applies to applicants,
who use the Gupy Recruitment and Selection Platform to apply for and track the hiring processes of Gupy’s client companies.
Who are we?
Gupy Recruitment and Selection, Ltd.
CNPJ: 23.514.668/0001-52
As the owner of the Gupy Recruitment and Selection Platform, we act as the Data Controller when we make independent decisions regarding data processing, and we act as the Data Processor when we process data on behalf of our Client Companies.
In this case, the Client Company is the responsible Data Controller, and you may contact it directly with any questions regarding the selection process.
Data Protection Officers (DPO)
Project Manager: Renata Benjamin Gonçalves
Alternate Project Manager: Angélica Ritter Machado
Contact: privacidade@gupy.com.br
Project Lead's Portal: Click here to submit a request
What data is collected? For what purposes?
Gupy collects and uses your personal data to enable you to participate in recruitment processes conducted on our platform and to allow you to track your applications.
It is important to note that we do not collect unnecessary or excessive data, nor do we process it for any purposes other than those described in this Notice.
We may also synchronize information you provide, such as your name and profile URL, with publicly available data on LinkedIn, to make it easier for Client Companies to discover your professional profile.
Please note: Gupy receives resumes or information from Candidates only through official channels, namely the Gupy Recruitment and Selection Platform (whether via traditional application or quick application) and applications via WhatsApp.
Resumes sent through other communication channels, such as email, the support channel, the Gupy Data Subject Portal, or others, will be discarded to ensure the security and proper handling of your data.
The collection and processing of the data detailed here, for each purpose, are flexible and tailored to your interaction with Gupy, and may or may not be used in combination. This means that not all data categories listed in the table below will necessarily be collected; the actual collection and processing will depend on the information you share and the platform features you choose to use.
It is important for you to know that:
Client companies that conduct their recruitment processes through Gupy also act as Data Controllers for your personal data. This means they may process this information for their own purposes, in accordance with their own Privacy Notices. In addition, they may invite you—via email, WhatsApp, or LinkedIn—to apply for job openings on the platform or to register potential candidates in their talent pools—provided that such data has been obtained lawfully and in compliance with applicable laws.
When the Client Company is a financial institution or an insurance company, in accordance with legal provisions and regulations of the Central Bank of Brazil and SUSEP (Superintendence of Private Insurance), your data may, subject to the Client Company’s internal policies, be collected by such companies for potential analysis related to illicit activities such as money laundering and terrorism (BACEN Circular No. 3978 and SUSEP Circular No. 612/2020).
Therefore, we recommend that you carefully read the Privacy Notice of each company to which you wish to apply in order to understand how your data will be used.
Minimum Age for Registration
Gupy processes personal data of individuals aged 14 and older, who are considered adolescents under the law, for participation in selection processes for young apprentice positions. Such data is processed solely in the adolescent’s best interest and following their own submission.
In processing this data, the need for comprehensive protection required by the Statute of Children and Adolescents and the Constitution will always be taken into account, with the aim of promoting the adolescent’s physical, social, moral, and psychological development as provided for in the apprenticeship contract.
By analyzing the criteria defined by the Client Company, the resume, and other information provided by the Candidate (in their profile and during the application process for that specific position), Gupy’s AI Agents organize the resumes of the candidates who have applied for the position based on their alignment with these criteria and the company’s profile.
This ranking of candidates is not static and changes throughout the selection process, based on new applications or withdrawals and, especially, on the recruiter’s interaction with the resumes.
It is worth noting that Artificial Intelligence does not eliminate any of the resumes it analyzes, nor does it make decisions regarding their acceptance or rejection. During the selection process, all decisions are made directly by the recruiter and/or the manager responsible for the position.
What are your rights?
-
Confirmation
Find out whether we process your data and what data we process.
-
Access
Request access to your data and obtain detailed information about how it is processed.
-
Correction or Update
Correct incomplete, incorrect, or outdated data.
-
Portability
We will provide a digital copy in a widely supported format to facilitate the transition to another service provider.
-
Data Deletion
Delete data that is unnecessary, excessive, or that may have been processed in violation of the law.
-
Sharing
Request information about how your data is shared.
-
Withdraw consent
To revoke, at any time, the consent you provided to us through the Platform and to delete the data collected on that basis.
-
Opposition
You may object to the processing of your data when it is not based on your consent.
-
Petition to the ANPD
File a request with the National Data Protection Authority (ANPD).
With whom do we share the data we collect?
Gupy shares your data with:
- Client Companies, when you apply for a job opening;
- The Gupy Talent Pool;
- Companies belonging to the Gupy business group in cases of merger, acquisition, or sale, when there is a specific purpose for doing so. In such cases, the purpose will be stated in the respective privacy notice;
- Government authorities/agencies, in cases of legal proceedings, investigations, etc.;
- Suppliers and service providers contracted to enable the operation of our services and Platform, only when strictly necessary. Carefully selected and subject to strict confidentiality and data protection obligations, these companies may process your information solely to facilitate the partnership or service contracted by Gupy.
Other specific legal requirements may lead to the sharing of personal data, including for the purpose of defending our rights and interests in any type of dispute or to comply with orders from competent authorities.
Client Companies, in their capacity as Data Controllers, may share your information with their business partners and service providers. In this case, for more information about the processing of your data, you should consult the respective Privacy Notices.
International Transfer of Personal Data
Gupy may transfer your personal data outside of Brazil when necessary to use services essential to the platform’s operation, such as cloud storage and other tools required to carry out its activities.
These transfers are carried out digitally and will continue as long as there is a purpose and a legal basis justifying them.
Our relationships with these companies are governed by contracts that include data protection and information security obligations appropriate to the nature of the personal data processing we perform and consistent with the requirements of Brazilian law, including, where applicable, the standard clauses stipulated by the ANPD.
In the case of transfers to European Union countries, these are carried out based on the adequacy decision recognized by the ANPD, which considers that these countries have a level of personal data protection equivalent to that provided for in Brazilian law.
In addition, Gupy evaluates its partners and suppliers before establishing any partnership, conducting International Transfer Impact Assessments to assess and monitor potential risks.
These companies, which act as Data Processors, are listed in the table below.
| Suppliers and Partners | Purpose | Location |
| Amazon Web Services | Cloud data storage and processing | United States |
| Beamer | Sending notifications from the Gupy platform | United States |
| Datadog | Bug and application monitoring | United States or European Union |
| Here | Distance calculation based on data | Netherlands |
| Hotjar | Conducting surveys and usability analysis of the Gupy Platform | Malta |
| Infobip | Sending messages by the client company and quick application via WhatsApp | Germany |
| Integration with Recruiter System Connect (RSC) | United States | |
| MailGun | Email delivery | United States |
| Matching profiles from the Gupy Talent Bank to recommend job openings | United States | |
| OpenAI | Automatic completion of professional information on your resume | United States |
Update
This Privacy Notice may be updated at any time; such changes will be posted on our services and can be reviewed whenever you wish. Therefore, we recommend that you visit this page periodically to stay informed about any changes. If any significant changes are made that require new consent from you, you will be notified via the Gupy Recruitment and Selection Platform.Version History:
- June 30, 2026 - Current Version
- June 26, 2025 - Privacy Notice - Version 9
- December 2, 2024 - Privacy Notice - Version 8
- March 20, 2024 - Privacy Notice - 7th version
- December 7, 2023 - Privacy Notice - 6th version
- December 7, 2022 - Privacy Notice - 5th version
- August 19, 2021 - Privacy Notice - 4th version
- April 14, 2021 - Privacy Notice - Version 3
- February 5, 2021 - Privacy Notice - Version 2
- July 14, 2020 - Privacy Notice - Version 1