Last updated: March 15, 2026
1. Data controller
TikJobs is responsible for processing personal data collected through the tikjobs.pro platform. For any inquiries: datos@tikjobs.pro.
2. Infrastructure and providers
TikJobs uses industry-leading infrastructure providers:
| Service | Provider | Location | Purpose |
|---|
| Database | Supabase (PostgreSQL) | AWS US-East | Profiles, posts, transactions |
| Authentication | Supabase Auth | AWS US-East | Login, registration, sessions |
| Video hosting | Cloudflare Stream | Global CDN | Candidate videos |
| Web hosting | Vercel | Global Edge | Web application |
| Payments | Stripe | US/EU | Payment processing |
| Analytics | Google Analytics | Global | Anonymous usage metrics |
3. Types of data processed
3.1 Candidate data
- Profile: name, email, city, country, desired role, experience, skills
- Contact: WhatsApp (optional), contact email
- Content: presentation video, description, profile photo
- Metrics: video views, saves, unlocks received
3.2 Recruiter data
- Profile: name, email, company (optional), city
- Activity: unlocked candidates, credits purchased, transaction history
- Payments: Stripe transaction reference (no card data)
4. Legal basis for processing
- Contract execution: providing TikJobs service per accepted terms
- Consent: for optional communications and non-essential cookies
- Legitimate interest: service improvement, fraud prevention, security
- Legal obligation: retention of tax data per applicable regulations
5. Technical security measures
- Encryption: TLS 1.3 in transit, AES-256 at rest (Supabase)
- Access control: Row Level Security (RLS) in PostgreSQL, role-based policies
- Authentication: JWT tokens, secure sessions, bcrypt for passwords
- Isolation: per-user data separation with database-level RLS
- Monitoring: access logs, security alerts, audit of sensitive operations
- Backups: automatic daily backups with 30-day retention
6. Contact data flow
The most sensitive data on TikJobs is the candidate's contact. Here's the flow:
- The candidate enters their WhatsApp and/or email in their profile
- This data is stored encrypted in the database
- The data is not shown to any recruiter by default
- A recruiter can unlock the contact by paying 1 credit
- The system logs each unlock (who, when, which candidate)
- Only after unlocking, the recruiter can see the WhatsApp/email
- The candidate receives a notification that their contact was unlocked
7. Retention and deletion
| Data | Retention | Deletion |
|---|
| Account and profile | While active | 30 days after request |
| Videos | While user keeps them | Immediate upon deletion |
| Payment data (ref.) | 5 years (tax requirement) | Automatic after 5 years |
| Access logs | 90 days | Automatic |
| Unlock history | 1 year | Automatic |
8. User rights
Any user can exercise the following rights by emailing datos@tikjobs.pro:
- Access: obtain a complete copy of their data
- Rectification: correct incorrect data
- Erasure: request total deletion of their account and data
- Portability: receive their data in JSON format
- Objection: object to data processing for specific purposes
- Restriction: restrict the processing of their data
Response deadline: maximum 30 business days.
9. International transfers
Data may be processed outside Paraguay through our infrastructure providers (Supabase on AWS US-East, Cloudflare global CDN, Stripe US/EU). All these providers comply with international data protection standards.
10. Data controller contact
For any inquiries about your data management: