Privacy Policy

1. Data controller

Nextplacement SpA, tax ID 77.229.797-1, registered at Nueva Providencia 1881, oficina 1201, Providencia, Santiago, Chile.

Privacy contact: privacy@alkemicascend.com

2. What data we process

We do not request or require sensitive data such as health, ethnic origin, political or trade-union affiliation, or sexual orientation. We recommend you do not include such data in your CV. If you do, it will be protected in the same way as the rest of the document.

3. Why we use it and on what basis

4. Artificial intelligence and processing of your CV

To generate analyses and materials, the content of your CV and your responses are sent to language models operated by OpenAI. This processing is essential to providing the service: without it, the platform cannot function.

We use OpenAI's business interface, whose terms do not provide for the data sent to be used to train their models.

Content generated by artificial intelligence may contain errors or inaccurate statements. See the AI Notice for detail.

5. Visibility to companies and headhunters

This feature is off by default. Your profile is not visible to any organisation unless you expressly enable it from the service settings.

When you enable it, authorised organisations can see only the following fields derived from your career target:

• Target role
• Industry
• Seniority band
• Geography
• Your chosen visibility level, which defaults to anonymous

Your CV is never shared with third parties. Neither are your name, your email address, your reports, your assessments, your profile picture, nor any other profile data. You can switch visibility off at any time, with immediate effect.

6. Third-party data: suggested professional contacts

When you work on a target company, the service may suggest relevant people within it --- for example, who holds a role you would benefit from speaking to. This section explains how we handle the data of those people, who are not users of the service.

What data, and where it comes from. Suggestions are obtained by searching public sources on the internet. The data is professional in nature: name, role, company and, where the public source includes it, professional contact information. Every suggestion states the source it came from, and that reference is retained alongside the contact if you save it. We do not extract data from LinkedIn or from any other platform whose terms of use prohibit it.

On what basis. We process this data on the basis of legitimate interest: helping a professional identify relevant contacts in their field. We consider that this interest does not unduly override the rights of the people suggested, because the data is professional in nature and publicly sourced, it is processed in a strictly business context, no profiling or automated decision-making is carried out about those people, and it is neither sold nor transferred to third parties.

What is stored and what is not. A suggestion is not stored merely by being shown. It is stored only when you individually confirm it, at which point it becomes part of your own contact list. The service does not build or maintain a database of people who are not users.

For how long. A confirmed contact is retained for as long as you keep it and your account remains active. It is deleted when you delete that contact, or when you delete your account.

Rights of the suggested person. Anyone whose data appears in the service may request access, rectification, objection or deletion by writing to privacy@alkemicascend.com. We will handle those requests within the same timeframes and on the same terms as those of our own users, without requiring them to be a user of the service.

Your responsibility. You decide whether and how to contact that person. That communication is yours, not ours, and is subject to the professional-communications and data-protection rules applicable in your jurisdiction and in that of your recipient.

6 bis. Information you enter about other people

Some features let you record details about people who do not use Alkemic Ascend:

• Networking contacts you add yourself: name, role, company, relationship stage and notes, and optionally email, phone and LinkedIn profile URL.
• Interview Prep: the interviewer's name (optional) or a link to one of your contacts, their role in the process, their job title (optional), and any job description or notes you add.
• Free text in your CV, answers or notes may also mention other people, such as a former manager.

Purpose. To help you organise your network and prepare for your interviews. We do not use this information for anything else. We do not research these people and we do not contact them.

Legal basis. Our legitimate interest, and yours, in providing and using these tools (Art. 6(1)(f) GDPR; in Chile, from 1 December 2026, article 13(d) of Law 19.628 as amended by Law 21.719). We have assessed that this interest does not override the rights of the people concerned, given the limited, professional nature of the data and the safeguards below.

Who sees it. Only you. It is never included in any export for administrators or sponsors.

What reaches our AI provider. Contact details (email, phone, LinkedIn) are never sent. For Networking contacts, our AI provider receives the role, company, relationship stage and notes under an alias, never the name; we do not run web searches on contacts. For Interview Prep, we remove the interviewer's name, including the name of a linked contact, from everything sent to our AI provider, our web-search provider and our error-monitoring tools. The other interview details you enter (the interviewer's role and job title, the company, the job description, your notes and your answers in the simulation) are sent to our AI provider to generate your simulation and guide. A first name written on its own in your notes or answers is not detected, so please avoid naming people there.

How long we keep it. The interviewer's name and job title and your notes on the interview are deleted automatically 12 months after the interview date (or after you created the interview, if you gave no date), or earlier if you remove them or delete the interview or your account. Contacts and other details are kept until you delete them or your account.

Your responsibility. Enter only what you need for your own preparation. Do not enter health information or other sensitive details about anyone.

If you are one of these people. We do not notify you individually: usually we hold your name and professional details, but no way to contact you, and where a user has stored your contact details, contacting you would reveal that user's private job search and use details they gave us only for their own reference (Art. 14(5)(b) GDPR). This section is how we inform you. You can ask us at privacy@alkemicascend.com whether we hold information about you, and request access, correction, deletion or that we stop processing it. We may ask for details to locate it. We will tell you what we hold and its source to the extent the law requires, while protecting the rights of the user who entered it.

7. Who we share data with

We do not sell your personal data. We do share data for advertising purposes, only with your consent. We work with the following providers. Most act as processors on our behalf.

For Google Ads and Meta Pixel, Nextplacement SpA acts as joint controller with those providers of the advertising-measurement data collected through those services, under the terms each provider publishes. Google Analytics 4 runs only with your analytics consent and is described in the rows below.

For sign-in with Google and LinkedIn, each provider acts as an independent controller of its own sign-in service (see section 16).

When a registration conversion is attributed to Google Ads, we transmit a SHA-256 hash of your email address, trimmed and lowercased, to Google. We never send Google the address itself.

That hash is derived personal data, not anonymised data, because the same address produces the same hash and can therefore still identify you. The rights in section 11 apply to it. It is sent only if you have granted marketing consent, and only for conversion attribution (Enhanced Conversions). If you have not granted marketing consent, or if you withdraw it, no hash is generated.

Interview Prep. To prepare your simulation and guide, we send your CV or profile summary and the interview details described in section 6 bis to OpenAI, and we search the web through Tavily for public information about companies only: the employer you are interviewing with and its main clients and competitors. We never search for information about individual people. The interviewer in the simulation is an AI and does not represent or imitate any real person.

We may also disclose data when a competent authority lawfully requires it.

8. International transfers

Our providers operate infrastructure outside Chile, principally in the United States and the European Union. By using the service, your data is transferred to and processed in those jurisdictions under the contractual mechanisms each provider makes available.

If you sign in with Google or LinkedIn, the provider processes the authentication data as an independent controller and under its own transfer mechanisms; the data it sends us is stored on the same infrastructure described in this section.

9. How long we keep your data

10. Deleting your account

You can request deletion of your account from the service settings. The process is as follows:

• You request deletion and confirm it through a single-use link sent to your email address.
• On confirmation, your access to the service is revoked immediately.
• A 7-day window opens during which you can cancel the request, in case of accidental deletion.
• After that window, your stored files --- CV, assessment documents and generated documents --- and all your account data, assessments, reports and derived data are permanently deleted.

What is retained and why. Usage records, AI consumption and cost records, audit records and error records are not deleted: they are unlinked from your identity and retained in anonymised form. We need them for accounting, cost control, security and compliance. After deletion, those records can no longer identify you.

Deleting your Alkemic Ascend account does not delete your Google or LinkedIn account; you can revoke Alkemic Ascend's access there.

11. Your rights

You may exercise the following rights:

• Access the personal data we process about you.
• Rectify inaccurate or incomplete data.
• Request deletion of your data.
• Object to certain processing and withdraw your consent where processing is based on it.
• Request a copy of your data in a structured format.

To exercise them, write to privacy@alkemicascend.com. We will respond within the timeframes set by applicable law. If you believe we have not handled your request properly, you may complain to the data protection authority for your jurisdiction.

12. Cookies and similar technologies

We use a small set of cookies. Essential and functional cookies are necessary for the service to operate and do not require consent. Analytics cookies are only activated if you authorise them. Advertising cookies are only activated if you authorise marketing.

You can change or withdraw your analytics and marketing preferences at any time from the service settings. Withdrawing stops these cookies being set again and takes effect immediately.

Cookieless audience measurement. We use Vercel Web Analytics to count visits in aggregate. It sets no cookies and stores nothing on your device; each visit is identified by a temporary value discarded after 24 hours that cannot identify you. We do this on the basis of our legitimate interest, to measure the site's reach. You can object by choosing "Reject" in the cookie notice or in Settings.

We do use advertising cookies (_gcl_au and _fbp) to attribute conversions across sites, only with your marketing consent. If you have not yet chosen, or if you decline, those cookies are not set. No advertising cookie is set before consent. We do not sell your personal data.

We do not record your screen or your browsing within the service.

13. Security

We apply database-level data isolation, so each user can access only the information in their own account. Sensitive operations run exclusively on our servers. Administrative access is restricted and logged.

No system is completely invulnerable. If a security breach affecting your personal data occurs, we will notify you in accordance with applicable law.

14. Minors

The service is not directed at people under 18 and we do not knowingly collect data from them. If we identify an account belonging to a minor, we will delete it.

15. Changes to this policy

We may update this policy. Each version has an identifier and an effective date. When a change substantially affects how we process your data, we will inform you and, where appropriate, ask you to accept the new version before continuing.

16. Third-party sign-in

You can create your account and sign in with your Google or LinkedIn account instead of using your email address and a password. This is optional: sign-up with email and password remains available.

What data we receive. When you choose this option, the provider sends us, through the OpenID Connect protocol, your name, your email address, the address (URL) of your profile picture, and the identifier the provider assigns to you. We do not receive your password with the provider. We also do not receive your connections, posts, work history or any other content from your profile.

What we use it for. Only to authenticate you and to create your account or link it to an existing one. We store this data with your account; we do not currently display your profile picture in the service. We do not import your LinkedIn profile content. What section 6 says still holds: signing in with LinkedIn does not mean extracting data from that platform. It means receiving the sign-in data you authorise at that moment.

Automatic account linking. If you already have an Alkemic Ascend account with the same email address, and the provider confirms that the address is verified, we automatically link both sign-in methods to a single account. Linking does not replace the name, language or country you already entered. We will email you whenever a new sign-in method is linked to your account.

What the provider knows. We do not send the provider your CV, your assessments, your reports or any other data from your account. However, because authentication happens on its service, the provider knows that you used your account to sign in to Alkemic Ascend and when you did so. Each provider carries out that processing as an independent controller of its own sign-in service, under its own privacy policy: Google (https://policies.google.com/privacy) · LinkedIn (https://www.linkedin.com/legal/privacy-policy).

Legal basis. Performance of the contract: it is a way of accessing your account that you choose.

How to withdraw. You can revoke Alkemic Ascend's access from your Google or LinkedIn account settings. Revoking it does not delete your Alkemic Ascend account or the data we already hold; to do that, request account deletion as described in section 10. It is not currently possible to unlink the sign-in method from within the service.

17. Sign-up attribution

When you create an account, we record once how you arrived: the campaign tags in the link you followed (if any), whether you came from a Google or Meta ad (but not the ad-click identifier itself), the referring website's domain, the sign-up page and page version you used, whether you signed up inside the Instagram, Facebook or LinkedIn app, and your sign-up method (email, Google or LinkedIn). We use this only to measure the effectiveness of our marketing, on the basis of our legitimate interest. We keep it for up to 24 months or until you delete your account, whichever is sooner. You can object at any time by contacting us at privacy@alkemicascend.com.