Privacy Policy

Last updated: March 2026

DreamMatch ("we", "us", or "our") operates the platform available at dreammatch.app. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service. By using DreamMatch, you agree to the practices described in this policy.

Data We Collect

  • Account information: email address and OAuth identifiers from Google or LinkedIn.
  • Profile data: information extracted from your LinkedIn PDF export, including name, current role, work experience, education, skills, and certifications.
  • Dream declarations: the companies, roles, and culture preferences you declare on the platform.
  • AI-generated data: skill embeddings (mathematical representations of your skill profile) and gap analysis results generated by our AI models.
  • Usage data: pages visited, actions taken, and session metadata to improve the platform.
  • Payment data: when purchasing credits, payment processing is handled by Stripe. We do not store full card details.

How We Use Your Data

  • Deliver the core service: analyze your profile against your declared dream companies and generate a personalized skill gap analysis.
  • Company matching: surface your profile to companies that may be a match (only after you grant visibility consent).
  • Platform improvement: aggregate and anonymized data to improve matching algorithms and AI model performance.
  • Communications: send gap analysis results, monthly digests, and service updates to your registered email.
  • Payments: process credit purchases and manage your credit balance.

Legal Basis for Processing (LGPD)

  • Consent (Art. 7, I): Profile visibility to companies — you explicitly opt in via the consent toggle in your settings.
  • Contract performance (Art. 7, V): Account creation, gap analysis generation, and core service delivery.
  • Legitimate interest (Art. 7, IX): Platform security, fraud prevention, and service improvement using aggregated data.

How Your Data Is Shared

  • Companies never see your individual profile data until they purchase a profile reveal AND you have granted visibility consent.
  • Before a reveal, companies only see aggregated, anonymized statistics (e.g., "47 professionals want to work here").
  • You can revoke visibility consent at any time in your settings — this immediately removes your profile from company views.
  • We do not sell personal data to third parties.
  • We share data with service providers listed under International Transfers only as necessary to operate the platform.

International Data Transfers

DreamMatch uses the following third-party processors, all headquartered in the United States. Data transfers from Brazil to these processors are covered by Brazil Standard Contractual Clauses (SCCs), mandatory since August 2025 under ANPD Resolution CD/ANPD No. 19/2024.

ProcessorPurposeCountry
AnthropicAI-powered PDF parsing and gap analysis generationUnited States
OpenAISkill and culture embeddings for matchingUnited States
SupabaseDatabase, authentication, and file storageUnited States
ResendTransactional email deliveryUnited States
StripePayment processing for credit purchasesUnited States
ExaCompany data enrichment and searchUnited States
VercelApplication hosting and content deliveryUnited States

Cookies

We use only essential cookies necessary for the platform to function. See our Cookie Policy for the full list. No advertising or tracking cookies are used. Cookie Policy.

Your Rights Under LGPD

  • Access: Request a copy of all personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data. You can delete your account directly from your settings page.
  • Portability: Request a machine-readable export of your profile data.
  • Consent withdrawal: Withdraw any consent at any time without affecting lawfulness of prior processing.
  • Information about sharing: Request details of which third parties have received your data.
  • To exercise any of these rights, contact us at privacy@dreammatch.app or use the controls available in your settings.

Data Protection Officer

DreamMatch has designated a Data Protection Officer (Encarregado de Proteção de Dados) as required by LGPD Art. 41. You can contact our DPO at:

Data Protection Officer

privacy@dreammatch.app

Data Retention

  • Your data is retained for as long as your account is active.
  • Upon account deletion, all personal data is deleted within 30 days.
  • Aggregated, anonymized data (e.g., trend analytics with no individual identifiers) may be retained indefinitely for platform improvement.
  • Payment records are retained as required by applicable tax and financial regulations.

Changes to This Policy

We will notify you of material changes to this Privacy Policy by email to your registered address at least 15 days before changes take effect. The "Last Updated" date at the top of this page reflects the most recent revision.

Privacy Policy — DreamMatch