Privacy Policy

Last updated: May 25, 2026

This Policy describes how Linkelyzer handles your personal data and complies with the Lei Geral de Proteção de Dados (Lei nº 13.709/2018, LGPD).

1. Data controller

Linkelyzer is a product operated by BLANSKILAB TECNOLOGIA LTDA - ME, registered under CNPJ 47.822.463/0001-00, headquartered in Joinville, SC, Brazil, which is the controller of the personal data processed through the site linkelyzer.com.br and the associated services. Contact: contato@linkelyzer.com.br.

2. Data Protection Officer (DPO)

In compliance with art. 41 of the LGPD, the Officer (DPO) is Leonardo Blanski. Dedicated channel for privacy matters: privacidade@linkelyzer.com.br.

3. Data we collect

3.1 Provided directly by you

  • Full name, email and password (encrypted with bcrypt) at sign-up
  • Phone and the channel through which you found us (optional, during onboarding)
  • Content you send: resume in PDF, job URL, LinkedIn profiles you provide

3.2 Collected via LinkedIn (OAuth)

When you connect your LinkedIn account, we access, via official OAuth 2.0, only your public profile data (name, headline, photo, summary, experiences, education, skills). We do not have access to your password and we never publish, send messages or perform any action on your behalf.

3.3 Collected automatically

  • IP address, device type, browser, language and country (via the CF-IPCountry header)
  • Usage data: pages visited, analyses performed, date of last login
  • Cookies and identifiers (see item 11)

3.4 From third parties

When you pay for credits or a subscription, the processor (Stripe) shares with us payment confirmation, the transaction identifier and the last 4 digits of the card. We do not store the full card number, CVV or expiration date.

4. Data collected by the Chrome Extension

When you click the Linkelyzer Extension buttons on a LinkedIn page you are viewing, the extension reads the following fields from the rendered page and sends them to Linkelyzer's servers:

  • On job pages (/jobs/view/*): title, company, location, job description, job URL.
  • On profile pages (/in/*): name, headline, about, location, industry, professional experiences (role, company, duration, description), education, skills, certifications, languages.

The extension does NOT read, does NOT store, and does NOT transmit:

  • LinkedIn cookies
  • LinkedIn session tokens or those of any other site
  • Data from other tabs you are not actively viewing
  • Data from pages you are not viewing at the moment of the click

The data extracted from LinkedIn is treated as untrusted data on our back-end: it goes through sanitization (removal of control characters and injection patterns) and strict validation before any AI processing. AI models are explicitly instructed to ignore any instructions contained within the extracted data.

5. Tracker data

Jobs you add to the Tracker (manually or via the extension) are associated with your Linkelyzer account. You can delete any job at any time. Deleted jobs are removed permanently within 30 days. Jobs archived automatically (status "Offer" or "Rejected" for more than 30 days) remain in your account until you delete them.

6. Purposes and legal bases

We process your data for the following purposes, with the respective legal bases from art. 7º of the LGPD:

PurposeLegal basis
Create and manage your accountContract performance (art. 7º, V)
Process profile, CV and Job Fit analysesContract performance (art. 7º, V)
Process payments and issue receiptsContract performance + legal obligation (art. 7º, V and II)
Email verification and password recoveryContract performance (art. 7º, V)
Fraud prevention, abuse and securityLegitimate interest (art. 7º, IX)
Sending operational communicationsContract performance (art. 7º, V)
Sending marketing communicationsConsent (art. 7º, I)
Analytics and marketing cookiesConsent (art. 7º, I)
Product improvement and aggregated metricsLegitimate interest (art. 7º, IX)

7. Sharing with third parties

We share strictly necessary data with the following processors, under contractual clauses:

  • Stripe, payment processing (billing data)
  • OpenAI, generation of AI analyses (profile/CV content submitted)
  • MailerSend, sending transactional emails (address and name)
  • LinkedIn, OAuth authentication (session and official identifiers)
  • Infrastructure and monitoring providers, hosting, logs and operational telemetry

We do not sell personal data. We share it only to fulfill the contracted service or legal obligations.

8. International transfer

Some of the processors above process data outside Brazil (mainly the United States). The transfers occur based on art. 33 of the LGPD, through specific contractual clauses and security policies adopted by each provider. By using our services you are aware of and agree to these transfers.

9. Data retention

  • Account data: while the account is active. Accounts inactive for more than 12 months may be anonymized.
  • Analyses and results: while relevant to the service or until you request deletion.
  • Generated resumes (CV): 30 days from the generation date. After this period the record and the associated PDF file are deleted automatically from our systems (including the object storage).
  • Tax/financial data (payments): 5 years, as required by the Código Tributário Nacional.
  • Access and security logs: up to 6 months, under the terms of the Marco Civil da Internet.
  • Data after account deletion: eliminated within 30 days, except for a legal retention obligation.

10. Your rights as a data subject (art. 18 of the LGPD)

You may, at any time, request:

  1. Confirmation of the existence of processing of your data
  2. Access to the data we hold about you
  3. Correction of incomplete, inaccurate or outdated data
  4. Anonymization, blocking or elimination of unnecessary, excessive data or data processed in non-compliance
  5. Portability of the data to another provider, upon express request
  6. Elimination of personal data processed based on consent
  7. Information about the public and private entities with which we share your data
  8. Information about the possibility of not providing consent and its consequences
  9. Withdrawal of consent and review of automated decisions (see item 12)

11. How to exercise your rights

Send your request to privacidade@linkelyzer.com.br. We respond within 15 calendar days. We may request additional identity verification before performing the action.

12. Security

We adopt technical and administrative measures to protect your data: encryption in transit (HTTPS/TLS), passwords stored with bcrypt, access controls, event logging and periodic security reviews. No system is 100% secure. In the event of a security incident with risk to the data subjects, we will notify you and the ANPD within the timeframes set out in art. 48 of the LGPD.

13. Cookies and similar technologies

We use cookies in the following categories:

  • Essential, login session and preferences (language, currency). Cannot be disabled.
  • Analytics, Google Analytics to understand aggregated use. Require consent.
  • Marketing, Facebook Pixel to measure conversions. Require consent.

You can manage cookies in your own browser and withdraw consent at any time.

14. Automated decisions (art. 20 of the LGPD)

Our analyses generate scores and recommendations with the aid of artificial intelligence. This is an automated decision based on your profile data. You have the right to request human review and to receive clear information about the criteria and procedures used. The score is for guidance only and does not constitute a guarantee of a professional outcome (hiring, job, raise, etc).

15. Children and adolescents

Our services are intended for people aged 18 or over. We do not intentionally collect data from minors under 18. If you are a legal guardian and have identified the processing of data of a minor under your responsibility, contact us so we can eliminate this information.

16. Autoridade Nacional de Proteção de Dados (ANPD)

You have the right to file a complaint directly with the ANPD, through the portal gov.br/anpd.

17. Changes to this Policy

We may update this Policy periodically. Whenever there is a material change, we will notify you by email or by a prominent notice on the platform before the new version takes effect.

18. Contact

General questions: contato@linkelyzer.com.br. Privacy and LGPD matters: privacidade@linkelyzer.com.br.