1. Data Controller and Scope
Arnaldo Castro operates this talent acquisition and recruitment platform. This Privacy Policy describes how we collect, process, store, and protect the personal data of candidates, applicants, and internal platform users.
2. Personal Data We Collect
- Identity and Contact Data: Full name, email address, phone number, location, and national identification when required by the job application process.
- Professional and Academic Profile: Resume (CV), work history, education, skills, references, assessment responses, and interview records voluntarily submitted by the candidate.
- Authentication and Technical Metadata: Session identifiers, IP address, browser user-agent, and security audit logs necessary to protect account integrity.
3. Google OAuth 2.0 Authentication & Google API Services User Data Policy
When you choose to sign in or register using Continue with Google (Google OAuth 2.0), Arnaldo Castro requests access exclusively to basic OpenID Connect identity scopes (, , and ):
- Data Accessed: Your Google account primary email address, display name, profile picture URL, and unique Google user identifier.
- Purpose of Use: We use this information strictly to authenticate your identity, create or link your candidate or recruiter account, and pre-fill your basic identification fields during the application or sign-in workflow.
- Limited Use Compliance: Arnaldo Castro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell, rent, or transfer Google user data to third parties for advertising, creditworthiness, or data-brokering purposes.
4. Purpose and Legal Basis of Processing
Personal data is processed exclusively for evaluating candidate suitability for open requisitions, managing recruitment workflows, communicating application updates, and maintaining platform security under your explicit consent and legitimate pre-contractual interest.
5. Data Retention, Security, and Multi-Tenant Isolation
All information is encrypted in transit (TLS) and at rest within logically isolated multi-tenant security boundaries, governed by role-based access controls (RBAC) and immutable audit trails.
6. Data Subject Rights and Contact
You may exercise your rights of access, rectification, update, portability, or deletion of your personal data at any time by contacting Arnaldo Castro at privacy@seeker.com.uy.