FAQ – Privacy & Security
Frequently asked questions about how Plooral protects your data and ensures your privacy.
This FAQ is a summary intended to facilitate reading by clients, users, and/or interested parties and does not replace the contract and applicable terms published by Plooral. In case of conflict, the original documents (contract/terms and annexes) shall prevail.
About Plooral
Plooral is a SaaS platform for recruitment and selection (Plooral Hire) and learning/training (Plooral LX). Each product has its own supplementary terms or annexes, linked to the main Terms/contract of platform use.
Companies that register on the platform can post jobs, manage candidates, use communication tools, administer tests, and, depending on the plan, access additional modules. Plans and classifications are described in the applicable contract/terms.
Candidates can register on the Platform to create their profile and express interest in available positions or be contacted by companies.
For more detailed information on how Plooral processes personal data, please visit our Privacy Notice.
Aviso de Privacidade →Our Privacy Notice
Plooral's Privacy Notice contains the following information and you can access it on our Privacy Notice page:
- What personal data do we collect?
- For what purposes is data processed?
- How long is data stored?
- Information security measures
- Will data be shared with third parties?
- Cookies
- Data subject rights
- DPO Contact
Plooral's Privacy Governance Program
Since 2021, Plooral has maintained a structured privacy program with recurring updates. Consolidated documents include:
- Appointment act and responsibilities of the Data Protection Officer and the Privacy Committee;
- Record of Processing Activities;
- Privacy and Information Security Policies;
- Incident Response Plan;
- Data Protection Impact Assessment Procedure;
- Data Subject Request Guide;
- Continuous Monitoring and Assessment Plan for the Program.
Plooral's role as a data processing agent
We are a SaaS platform that mediates the relationship between companies and candidates, therefore, we are processors.
We only hold the position of Controller for basic user data that is essential for login and platform use (name, email, password). All other data is the responsibility of the controller (client or candidate).
Sharing data with third parties or abroad
Plooral may use processors outside of Brazil, such as cloud hosting services which, in this case, are hosted on AWS, recognized for its security and reliability.
All contracted third parties comply with legal requirements and security commitments.
Processing of sensitive data
Plooral does not process data from children or adolescents.
The data subject's image may be processed if they choose to upload it to their profile.
Legitimate interest
Data may be processed for marketing purposes, such as sending newsletters and product offers.
The data subject may exercise the right to object at any time.
Information security
Plooral adopts sound technical and organizational practices, including:
- Measures to ensure the confidentiality, integrity, and availability of data, such as firewalls, antivirus software, VPNs, segregated networks, access control, and encryption;
- Incident response plan;
- Privacy and information security policies;
- Team awareness training.
Contact
For any additional information, please contact our DPO at dpo@plooral.com.
Last updated: September 11, 2025.