Privacy policy
Last updated: September 19, 2026
Who we are
Jornatta is an online career platform available at jornatta.org. For any question about privacy or your data, write to contato@jornatta.org.
What data we collect
Account data (name, email and, if you choose to sign in with Google, the name, email and profile picture from that account). Professional profile data you write (summary, experience, education, skills, languages, target country/market, optional photo). Content you create in the platform (resumes, cover letters, job analyses, interview practice sessions, applications and notes). Subscription data (plan, status and billing history, processed by our payment provider). And aggregated usage metrics, described below.
How we use your data
To create and maintain your account, generate and store your resumes and documents, run the AI analyses and practice sessions you request, show job listings for the country you choose, charge and manage your subscription, send account emails (confirmation, password reset, receipt, plan change), and to fix issues and improve the product.
Newsletter and optional communications
When you subscribe to the newsletter, we collect the email address you provide to send the career content you requested. You can unsubscribe at any time by writing to contato@jornatta.org. The newsletter is optional and separate from essential account emails such as confirmation, password reset, receipts, and subscription notices.
Artificial intelligence
When you use an AI feature (job analysis, cover letter, text suggestions, interview practice), the text needed for that task is sent to language models run by external providers through the AI gateway we use. That content is used to produce the answer you asked for. We do not use your data to train our own models. AI output is a suggestion: always review it before sending anything to an employer.
Job listings
Listings come from external sources (Jooble for Brazil and the United States, Careerjet for Portugal, and Adzuna for Canada) and from openings published by Jornatta itself. When querying those sources we send only the search terms and location you typed. We do not send your name, email, resume, account identifier, IP address or browser details. Clicking a listing takes you to the advertiser's site, where their own privacy rules apply.
Product metrics
We use our own aggregated metrics to understand how people move through the steps in Jornatta (for example: visit, sign-up, resume created, subscription). These records do not include your name, email, account identifier, IP address, searches, job descriptions, resumes or interview answers. We do not use tracking cookies or third-party tools for this measurement. A session is identified by an anonymous code that only exists in the open browser tab. You can turn this off in Settings → Product analytics, effective immediately.
Providers that process data for us
We do not sell your data. We rely on providers acting on our instructions: Supabase (database, authentication and file storage), Lovable and Cloudflare (hosting and site delivery), Lovable's AI gateway and the language-model providers reached through it, Stripe (payments and invoices), Google (only if you choose to sign in with Google), and the service that delivers account emails. Job sources receive only your search terms, as explained above.
International transfers
Some of these providers process data outside your country, including outside Brazil and the European Economic Area. In those cases we rely on the contractual safeguards they offer.
How long we keep data
We keep your data while your account exists. Deleting a document removes it. Deleting your account removes your profile data and associated content, except records we must keep for tax or accounting obligations (for example, payment records). Aggregated metrics are not linked to your identity and remain.
Your rights
You can access, correct, export (by downloading your resumes as PDF) and delete your data in your account settings, and turn product metrics off. You can also request confirmation of processing, restriction or objection by writing to contato@jornatta.org. Depending on your country these rights come from the GDPR (Portugal and the EU) or the LGPD (Brazil), and you may complain to the competent authority.
Security
We apply reasonable technical and organizational controls: authentication, encryption in transit, row-level access policies in the database and restricted administrative access. No system is fully immune to incidents; if a relevant one occurs we will notify as required by applicable law.
Minors
Jornatta is intended for people aged 18 or over. We do not knowingly collect children's data.
Changes
We may update this policy. The last updated date at the top marks the current version, and relevant changes will be announced in the platform.