Privacy
Privacy Policy
Last updated: August 19, 2026
At TŌPTĒCH we take your privacy seriously. This document explains what data we collect, how we use it, and what your rights are under the General Data Protection Regulation (GDPR) and the Spanish Data Protection Act (LOPDGDD).
What data do we collect?
- •Email: Only if you choose to receive your report.
- •CV/LinkedIn: We store the content and generated analysis to show you your report.
- •Usage data: Anonymous analytics to improve the service (Vercel Analytics).
How do we protect your data?
- •Encrypted connections (HTTPS/TLS) at all times.
- •CVs and analyses stored securely in encrypted databases.
- •SOC 2 certified providers (Convex, Anthropic, Vercel).
Cookies
- •Technical cookies: Required for operation (session, preferences).
- •Analytics cookies: Vercel Analytics (anonymous, no personal identification).
- •We don't use advertising or third-party tracking cookies.
Your rights (GDPR)
- •Access: You can request what data we have about you.
- •Rectification: Correct incorrect data.
- •Erasure: Delete your data ("right to be forgotten").
- •Portability: Receive your data in a structured format.
- •Objection: Object to the processing of your data.
Data retention
- •CVs and analyses: Kept indefinitely during beta; later 30 days, then automatically deleted.
- •Emails: Kept while you have an active subscription.
Progress shared with organizations
- •Coordinators from an organization only view aggregated progress after you explicitly consent to specific categories for that organization.
- •Administrators of your organization can view aggregated program progress without individual consent, limited to educational support and without access to content such as CVs, answers, salary data, companies, or notes.
- •We record the organization, categories, version, and grant or revocation dates so your choice can be demonstrated.
- •Institutional reads are audited without storing professional content, emails, staff names, or other unnecessary data.
- •You can change or revoke consent at any time and export your own history from your profile.
Controller: TŌPTĒCH · Address: Spain · Supervisory authority: Spanish Data Protection Agency (AEPD)