Terms of Use and Privacy Policy

Kelory acts as the controller of personal data processed on this platform.

Privacy inquiries and data subject requests: contato@kelory.com.br.

• Registration, authentication and accounts: full name, username, email address, date of birth, profile photo and password stored as a cryptographic hash.
• Google social sign-in (when used): Google identifier (google_sub), verified email address and basic profile information returned through Google OAuth.
• Profile and portfolio: information provided by users, including job title, bio, links, skills, languages, work and education history, and contact details they choose to publish.
• Password recovery: email address, temporary code hash, expiry time, IP address and requesting user agent.
• Certificates: user identifiers, course association and certificate verification code.
• Transactional emails: sender, recipient, subject and technical delivery status.
• Operational and security logs: IP address, user agent and event context stored in audit records and internal analytics.
• Integrations: CSV files uploaded for LinkedIn imports and event data sent to webhooks configured on the platform.

• Authenticate users, maintain sessions and enforce permission-based access controls.
• Provide contracted features (blog, portfolio, user management, certificates and integrations).
• Enable public portfolio publishing and certificate verification where applicable.
• Send operational emails (welcome messages, password resets and technical notifications).
• Monitor security, prevent abuse and fraud, and keep audit trails.
• Produce operational and usage metrics to improve the product and provide technical support.

Depending on the circumstances, personal data may be processed on the following legal bases:

• Performance of a contract and pre-contractual measures (LGPD, Article 7(V)).
• Compliance with a legal or regulatory obligation (LGPD, Article 7(II)).
• Legitimate interests in security, fraud prevention, auditing and operational improvements (LGPD, Article 7(IX)).
• Establishment, exercise or defense of rights in judicial, administrative or arbitration proceedings, where necessary (LGPD, Article 7(VI)).
• Consent when required for specific purposes.

Your data may be shared only when necessary to operate the platform, meet legal obligations or perform configured integrations.

We do not sell personal data to third parties.

• Google (OAuth and Google Analytics GA4).
• Transactional email provider for operational messages.
• Technical infrastructure (hosting, networking and content delivery where applicable).
• Administrator-configured webhooks receiving application events according to their active settings.

Some technology providers used by the platform may process data outside Brazil. Where this occurs, we seek appropriate safeguards and compliance with the LGPD.

We use cookies and local storage to operate the platform and remember preferences.

You can review your choices using “Manage cookies” in the website footer.

• PHP session cookie: required for authentication and session security.
• Local storage for cookie preferences: kelory_cookie_choice and kelory_cookie_interacted.
• Google Analytics (GA4): used to measure audience and performance. Its tag remains loaded even when optional cookies are rejected. In that state, analytics storage is denied and Google may receive cookieless pings for measurement and modeling; after consent, storage may be enabled for full measurement.
• Google Tag Manager (GTM): when configured, its container may remain loaded after rejection. It receives consent signals so compatible tags can adjust storage, measurement and personalization.
• Microsoft Clarity: used to analyze usage and experience. Its tag remains loaded after rejection but operates in no-consent mode, without persistent optional cookies or continuity between sessions; after acceptance it may enable full session and analysis features.

Users may stop using the platform and request account closure and deletion at any time through account features or the support and privacy contact channel.

The platform may suspend, limit, disable or delete accounts, profiles, portfolios, content or access for reasons involving security, fraud or abuse prevention, legal obligations or valid orders, protection of others, breaches of these terms or platform rules, or discontinued features, subject to applicable law.

When deletion is initiated by a user or the platform, account access and associated features may end immediately or after necessary checks. Public content linked to the account may be removed, unpublished or anonymized.

Deleting an account does not necessarily erase all records immediately. Information needed for legal or regulatory compliance, fraud prevention, security, audits, billing, dispute resolution, exercising rights or protecting others may be retained for the necessary period.

Residual copies in backups and technical logs may remain for a limited period until regular system rotation, with restricted access and no new incompatible uses.

• Account data is kept while the account is active or as needed to comply with legal obligations.
• Password recovery codes expire after a short period (normally measured in minutes) and are invalidated after use.
• Technical logs and audit trails may be retained longer for security, support and compliance.
• Where possible and applicable, data is deleted, anonymized or blocked once its purpose has ended.

Under the LGPD, you may request, among other rights:

To exercise your rights, email contato@kelory.com.br.

• confirmation that processing occurs;
• access, correction and updating;
• anonymization, blocking or deletion where applicable;
• information about data sharing;
• portability where applicable;
• withdrawal of consent when consent is the legal basis.

We use technical and organizational measures appropriate to the platform, including session-based authentication, password hashing, CSRF tokens, input and upload validation, permission controls, audit trails and security event logging.

No environment is entirely immune to incidents. If we identify a significant impact, we will take appropriate steps under applicable law.

• Users must provide accurate, up-to-date information appropriate to the platform's purposes and update it when needed.
• Accounts are personal. Users must keep credentials confidential and report suspected unauthorized access or compromise.
• Creating an account in another person's name without permission, using a false identity to deceive others or circumventing blocks, suspensions or security controls is prohibited.

Users retain the rights they hold in texts, images, portfolios, comments, files and other content they submit.

By submitting or publishing content, users grant the platform a non-exclusive, royalty-free license limited to what is necessary to store, process, technically reproduce, reformat, display, distribute and promote that content within platform operations and its own channels.

This license does not transfer ownership and generally ends when content is removed or the account closes, subject to temporary technical copies, audit records, legal requirements and material needed to defend rights or protect others.

• Users represent that they have the rights, permissions or legal bases necessary for submitted content.
• Personal data, images, trademarks, works and third-party information may only be uploaded with authorization or another appropriate legal basis.

• Using the platform for fraud, scams, spam, harassment, discrimination, threats, illegal content, violation of third-party rights or improper exposure of personal data.
• Distributing malware, exploiting vulnerabilities, attempting unauthorized access, disrupting service or bypassing authentication, rate limiting, moderation or security.
• Abusive scraping, unauthorized automation, mass collection of personal data or bots that impair availability, security or other users' experience.
• Malicious reverse engineering, copying databases or reusing platform content contrary to law, these terms or third-party rights.

The platform may review reports and take proportionate action, including requesting changes, recategorizing, limiting visibility, unpublishing, restricting features, suspending accounts or removing content for security, fraud, abuse, breaches of these terms, protection of others or legal requirements.

When reasonably possible, we will explain the action and provide a channel for clarification or review. Immediate action may be taken for urgent security or fraud situations, significant risks, manifestly unlawful content or lawful authority requests.

The platform may use or link to third-party services such as authentication, hosting, analytics, email, storage, social networks and other integrations. Those services may have their own terms and policies.

The platform does not control the conduct, availability, content or policies of independent third parties, without excluding obligations that the law assigns to the platform.

Maintenance, outages, fixes, technical changes and feature development may occur. We do not guarantee uninterrupted availability, but seek appropriate continuity, security and recovery measures.

Features may be introduced, changed or discontinued. Material changes affecting significant rights, payments already made or ongoing obligations will be communicated and handled in accordance with applicable law.

Essential messages about accounts, security, authentication, moderation or important changes may be sent as operational communications. Promotional communications, if used, will offer an unsubscribe option where required.

The platform's owned or licensed software, code, interfaces, visual identity, trademarks, documentation, institutional texts, database organization and other assets are protected under applicable law.

Using the platform does not grant ownership of those assets or permission to copy, resell, sublicense or exploit protected elements outside the permissions expressly granted.

Each user is responsible for their actions and content, including accuracy of published information and rights to submitted material.

The platform does not exclude or limit liability that cannot lawfully be excluded under Brazilian law. Nothing in these terms waives mandatory rights under Brazil's Consumer Protection Code, the LGPD or other applicable rules.

Where services, integrations or content are provided by independent third parties, their respective responsibilities remain, without removing legal obligations applicable to the platform.

Support may be contacted as an initial attempt to resolve a dispute, without restricting access to consumer protection authorities, Brazil's ANPD, the courts or other lawful channels.

If any provision is deemed invalid or unenforceable, the remaining provisions remain effective to the extent permitted by law.

These terms are governed by Brazilian law. Questions, complaints, reports or review requests may be sent to contato@kelory.com.br.

These Terms of Use and this Privacy Policy may be updated to reflect legal, technical, security or business changes or new features. The current version will be published here with its updated date.

Material changes may be communicated through available channels and, when necessary or technically applicable, may require renewed acceptance before certain features continue to be used. Existing rights and mandatory rules remain protected.