Privacy Notice

This notice explains what data of yours we process, for what purposes, with whom we share it and how you exercise your rights. It applies to anyone who uses NeoRole from any country. We wrote it in accordance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties published in the Official Gazette of the Federation on March 20, 2025 (LFPDPPP), Colombia's Law 1581 of 2012 and Decree 1377 of 2013, and Brazil's General Data Protection Law (LGPD) for those who use NeoRole from Brazil.

If you are a coach, the Privacy notice for coaches also applies to you.

1. Controller

1.1. The controller of your data is Juan Obando Cortés, an individual, trade name Parachute Partners / NeoRole, Mexican tax ID (RFC) OACJ780807J82, domiciled in Mexico City, Mexico. If you need the full address for a formal procedure, request it at [email protected]. He operates the NeoRole service (neorole.app).

1.2. For everything related to your data: [email protected]. Your requests are handled by the controller himself, Juan Obando Cortés. For legal matters: [email protected]. For questions about your account: [email protected].

2. Data we process

We treat the data marked (S) as sensitive or as requiring reinforced protection: you provide it voluntarily, we only use it to provide the service to you, we never sell it and we do not share it without your authorization (sections 3.2, 4 and 6).

We do not ask for data from minors. NeoRole is for people over 18.

3. What we use your data for

3.1. Purposes necessary for the service (they do not require additional consent because we need them to perform the contract with you)

a) Create and manage your account and your plan.
b) Generate CVs, cover letters, guides, match analyses and answers with AI.
c) Operate the interview simulator, NeoCoach, the Compass, process tracking, job search and the extension.
d) Charge, invoice, refund and prevent payment fraud.
e) Send you service emails: security, billing reminders, session reminders and follow up reminders.
f) Operate your connection with your coaches within what you authorize: messages, tasks, calendar, bookings, session payments, summaries and reviews.
g) Handle support and requests about your data.
h) Comply with legal and tax obligations.

3.2. Purposes that require your express consent

You give this consent by accepting this notice and, where the screen asks for it, with the checkbox or button of each feature. You can withdraw it whenever you want.

a) Store and use your salary information to give you recommendations inside NeoRole (section 6).
b) Store and process your Compass results and your conversations with NeoCoach.
c) Share with each coach the categories you turn on (section 5).
d) Count your progress anonymously in a coach's verified results (the "results" category).
e) Show your profile to recruiters (NeoRole Connect).
f) Connect Gmail and use voice sessions.
g) Use anonymized data to train our own AI models or for market information products.

3.3. Secondary purposes (you can refuse at any time and the service stays the same)

a) Send you product news.
b) Improve the service with anonymized data.
c) Produce labor market statistics and reports with data that does not identify you.

To refuse a purpose in 3.2 or 3.3 write to [email protected] or use the controls in Settings. If you disagree with any secondary purpose from the start, you can tell us before using the service or at any time afterwards.

4. What we never share

Even if you want us to, we never share with coaches, recruiters or companies:
a) your conversations with NeoCoach;
b) your Compass answers and scores (only the deliverables you decide to share, and never to filter or rank you);
c) your payment data.

Recruiters never see your salary information.

5. Authorization by categories for coaches

5.0. This section applies when the coach program is available in your account.

5.1. A coach sees nothing of yours until you authorize it. The authorization is per coach and per category. Every category starts off in each connection, including any we add in the future.

5.2. Second step. Self knowledge tests, Salary and Results ask for a second confirmation, with a text that says exactly what the coach will see or publish.

5.3. Withdrawal. From Settings, Privacy you see what you have on with each coach and you turn it off in one click. Access is cut off immediately. Withdrawing does not affect what the coach already saw before.

5.4. Expiration. You can set an expiration date on an authorization, for example when a program ends.

5.5. What the coach can and cannot do. The coach only sees what is authorized while it is active. They cannot download or export your data in bulk. Their terms forbid them from using it for anything other than supporting you and from contacting you for other purposes.

5.6. What the coach creates about you. Your coach can write private notes about your process, which you do not see on the platform, and create tasks, messages and session notes. If you want to know what data of yours is in those notes, you can request it with your right of access (section 14). Before each session NeoRole prepares a draft summary for you with what is authorized and your tasks. You review it and decide whether to send it; the coach only sees what you send.

5.7. If the coach belongs to a firm. If your coach works at a firm, the owner or administrator of that firm only sees your data if you also authorize the firm. The firm's assistant staff see calendar and messages, never private notes or deliverables.

5.8. When the connection ends. The coach stops seeing your data and you choose to keep or delete what you worked on with them.

5.9. Coaches in other countries. Your coach may live in another country (for example Colombia). By authorizing a category you accept that the information is viewed from that country. The data stays stored on NeoRole's servers; the coach only sees it on screen.

5.10. Companies that pay for your program. If a company enrolls you in an outplacement program, the company only sees aggregate progress of the group, never your individual data, unless you expressly authorize it.

6. Express consent for your salary information

6.1. You record your current or expected salary yourself, voluntarily. We store it and use it only to give you recommendations inside NeoRole. It is not shared with anyone without your authorization and recruiters never see it.

6.2. Where you record your salary, an unchecked box may appear with this text:

"I authorize NeoRole to store and use my salary information only to give me recommendations inside the platform. It is not shared with anyone without my authorization."

When the box appears and you do not check it, the data is not stored. Your consent is kept in the record in section 8.

6.3. If you already had a salary stored before this notice, it is kept for the same purpose until you delete it or withdraw your consent.

6.4. You can withdraw your consent at any time; when you do, we delete your salary information.

7. NeoRole access to your information

7.1. Authorized staff. Only authorized NeoRole staff, under a duty of confidentiality, access account data, and only for support, security, fraud prevention, finance and legal compliance. They see profile data, plan, usage metrics and AI consumption. They do not open the content of your CVs, conversations or Compass results, unless you ask them to in order to solve a problem.

7.2. Support view "view as" a coach. To solve problems in the coach program, NeoRole can see a coach's account as the coach sees it:
a) it is read only: nothing can be changed, sent or deleted;
b) each entry is recorded with who opens it, the reason and the time;
c) it lasts 30 minutes by default, never more than 2 hours, and closes on its own;
d) it only shows of you what that coach can see with your current authorizations;
e) each view of your data inside that view appears in your Privacy history marked as "NeoRole (support)".

7.3. NeoRole does not use this view to review users on its own initiative or for commercial purposes.

8. Record of authorizations and views

8.1. Authorizations. Every time you give or withdraw an authorization we store: you, the coach or recipient (including NeoRole in the case of salary), the category, the action, the date and time, and the version of this notice in force. That record is not edited or deleted while it must be kept as evidence (section 13).

8.2. Views. Every time a coach, a firm or NeoRole (support) views something of yours, it is recorded: who, which category, date and time. You see it in Settings, Privacy, for example: "Ana Pérez viewed your tailored CV for Clip on October 20".

8.3. These records give you control, prove your consent and help detect misuse.

9. Payment data

9.1. Payments for your plan and for sessions with coaches are processed by Stripe (Stripe, Inc. and its affiliates). Stripe receives your card details directly; NeoRole only receives the result of the charge, the plan, the amount, the currency and the card fingerprint that Stripe generates to prevent the same card from repeating trials.

9.2. When you pay for a session, the coach sees that you paid and the amount that corresponds to them. They do not see your card.

9.3. We keep the history of charges and refunds for the period required by tax law (section 13).

10. Processors (providers that process data on our behalf)

These providers process data only to provide their service to NeoRole and under our instructions:

11. Transfers (to third parties that are not our processors)

Transfer acceptance clause. By accepting this notice and turning on each authorization on screen, you accept the transfers in this section that require consent. If you do not accept them, do not turn on those categories or features; the rest of the service stays the same.

We do not sell your data or share it for advertising.

12. Automated processes and human review

12.1. Scheduled processes: follow up suggestions, weekly summaries, plan reminders, campaigns for inactive accounts, session reminders, summary drafts before each session, daily recalculation of coaches' verified results, counter resets and expiration of bonuses and invitation codes.

12.2. The match analysis, scores and suggestions are support tools. They do not decide for you or exclude you from anything.

12.3. You have the right to object to automated processing that significantly affects you without human intervention and to ask a person to review it. Write to [email protected].

12.4. You can unsubscribe from non essential emails from the link in each email.

13. How long we keep your data

When the purpose ends, data is blocked for the time required by law and then deleted.

14. Your rights

14.1. Rights. You can access your data, rectify or update it, cancel it and object to its use (ARCO rights in Mexico; to know, update, rectify and delete in Colombia). You can also revoke your consent and limit the use or disclosure of your data, for example to stop receiving news.

14.2. How. Write to [email protected] from your registered email with:
a) your name and account email;
b) the right you want to exercise and the data it refers to;
c) for rectification, the correct data;
d) if you act on behalf of someone else, the document that proves the representation.

14.3. Timelines in Mexico. We answer within 20 business days at most from receipt of the request and, if it applies, we make it effective within the following 15 business days. If you disagree with the answer, you can go to the Ministry of Anti Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

14.4. Timelines in Colombia. Inquiries: 10 business days, extendable 5 more with notice. Claims: 15 business days, extendable 8 more with notice (Law 1581, articles 14 and 15). If you disagree, you can complain to the Superintendence of Industry and Commerce after completing the procedure with us.

14.5. From the app. You can delete your account in Settings, Security, and withdraw authorizations in Settings, Privacy.

15. Security and breaches

15.1. We use encrypted connections, encryption at rest, row level access rules in the database, insert only records for authorizations and views, and restricted access for staff.

15.2. If a breach occurs that significantly affects your rights, we notify you by email without delay, with what happened, which data was affected, what we did and what you can do. In Colombia we also notify the Superintendence of Industry and Commerce. In Brazil, the ANPD when applicable.

15.3. If you find a vulnerability, report it to [email protected].

16. Cookies

We use strictly necessary cookies for your session and to remember an invitation code for one day. We do not use advertising cookies or third party tracking pixels. You can set your browser to reject cookies, although some features may then stop working.

17. Users in Colombia

17.1. This notice is the privacy notice of Decree 1377 of 2013 and, with its sections 1 to 15, sets out our information processing policy. Person in charge of handling inquiries and claims: Juan Obando Cortés, at [email protected].

17.2. Your sensitive data (self knowledge, conversations with NeoCoach and salary) is optional to provide: you are not obliged to give it and the basic service works without it.

17.3. Your data is transferred to the United States and stored there to operate the service.

18. Users in Brazil (LGPD)

18.1. We process your data on the basis of performance of the contract (art. 7, V), legitimate interest (art. 7, IX) and your consent (art. 7, I and art. 11, I for sensitive data).

18.2. You have the rights in article 18 of the LGPD, including portability and information about who we share with. Data protection officer (encarregado): Juan Obando Cortés, [email protected]. You can file complaints with the ANPD.

19. European Union, United Kingdom, Switzerland and California

19.1. European Union, European Economic Area, United Kingdom and Switzerland. NeoRole does not direct its marketing to those territories, but if you use the service from there the General Data Protection Regulation (GDPR) may apply to you.
a) Legal bases (art. 6 GDPR): performance of the contract (account, processes, AI documents, Compass); legitimate interest (security, fraud prevention, improvement with anonymized data, administrative access and access records); legal obligation (invoicing records); consent (Gmail, news, sensitive data, connection with coaches and each category you authorize).
b) Rights (arts. 15 to 22): access, rectification, erasure, restriction, portability, objection and withdrawal of consent without affecting prior processing. We answer within one month, extendable two more months in complex cases with notice.
c) Transfers: your data goes to the United States with the providers in section 10, under standard contractual clauses of the European Commission or other mechanisms of art. 46 GDPR.
d) Data protection officer: given our current volume we are not required to appoint one. Write to [email protected].
e) You can file a complaint with the data protection authority of your country.

19.2. California, United States. We do not currently reach the thresholds that make the CCPA/CPRA mandatory, but we apply its standards voluntarily:
a) Categories we collect: those in section 2.
b) Rights: to know what data we hold, where it comes from, for what and with whom we shared it in the last 12 months; to delete it; to correct it; to limit the use of sensitive information (Compass, NeoCoach, salary and integration tokens) to what is necessary for the service; and not to be treated differently for exercising them.
c) We do not sell or share your information for advertising, so no opt out of sale mechanism is needed.
d) Write to [email protected] with "CCPA Request" in the subject. We answer within 45 calendar days at most, extendable 45 more with notice.

20. Changes to this notice

20.1. This notice has versions. If something important changes (new purposes, new recipients or new sensitive data), we notify you by email at least 15 days in advance and ask you to accept it when you sign in. For a new purpose not listed here, we ask for your consent again.

20.2. The current version and previous ones are at neorole.app/privacidad.

Annex 1. Short privacy notice (sign up and invitation code screens)

Juan Obando Cortés (Parachute Partners / NeoRole), controller of NeoRole, processes your data to create your account, provide you the AI service, charge your plan and, only if you authorize it, share with your coaches the categories you turn on. Your salary, your Compass results and your conversations with NeoCoach are sensitive data: we use them only to provide you the service, with your consent, and they are never sold. You can refuse to receive news or statistical uses by writing to [email protected]. Full notice: neorole.app/privacidad.