Privacy Policy

This Privacy Policy governs the processing of personal data by S&OPlayers as Data Controller pursuant to Brazil’s General Data Protection Law (LGPD, Law 13.709/2018).

We are committed to handling your information with utmost transparency, integrity, confidentiality, and security across all platform touchpoints.

We collect data across the following categories: (a) Registration Data: name, email, encrypted password, and social login identifiers (Google and Apple); (b) Diagnostics & Maturity: responses to 6-dimension S&OP assessments, industry sector, and computed scores; (c) Professional Data: uploaded resume files (PDF/DOCX), extracted work history, skills, and LinkedIn profile URLs; (d) Telemetry & Analytics: anonymized IP address, browser/device metadata, page navigation, and interaction telemetry via PostHog and Firebase Analytics; (e) Leads & Inquiries: email addresses provided for PDF report exports and paid plan waitlists.

We process data under strict LGPD Article 7 legal grounds: (I) Contract Performance (Art. 7, V): authentication, diagnostic scoring, and report generation; (II) Consent (Art. 7, I): marketing communications, waitlists, and analytics cookies; (III) Legitimate Interest (Art. 7, IX): service improvement, UX optimization, and fraud prevention; (IV) Legal Obligation (Art. 7, II): statutory connection log retention under Marco Civil da Internet (Art. 15).

Career Hub features and resume analysis leverage enterprise Large Language Models (LLMs) through secure gateways such as OpenRouter.

Non-Training Guarantee: Resume text and personal data submitted for analysis are processed privately and ephemerally solely to produce the requested career insights. Your personal data is NEVER used to train public foundation AI models and is never sold to third parties.

We do not sell personal data. We share information only with essential infrastructure providers: (a) Google Cloud / Firebase (hosting, Firestore database, authentication, report storage); (b) PostHog (product analytics and session replay); (c) OpenRouter (AI inference APIs); (d) Resend (transactional emails); (e) Payment and ticketing providers where applicable.

We use cookies and localStorage to remember language preferences (soplayers_language), maintain active sessions, and record consent choices (soplayers_cookie_consent).

You may manage or decline optional analytics cookies via our consent banner or in your browser settings.

Because our cloud infrastructure (Google Cloud, PostHog, OpenRouter) operates in data centers in the United States and European Union, your data may be transferred internationally under standard contractual clauses and robust security safeguards.

We employ TLS encryption in transit, encryption at rest within Firestore, and strict role-based access rules.

Data is retained while your account remains active. When you delete your account, associated data is permanently erased from active databases within 30 days, subject only to statutory retention mandates.

Under LGPD, you have the right to: confirmation of processing, access, correction of incomplete or outdated data, anonymization/blocking, data portability (JSON export available in Settings), deletion, information on sharing entities, and consent revocation.

These rights can be exercised directly within platform Settings or by emailing our Data Protection Officer.

For inquiries regarding this policy, data subject requests, or communication with our DPO, please email: privacidade@soplayers.com (or contato@soplayers.com).

Formal data subject requests are addressed within 15 (fifteen) business days.