Privacy Policy

Last updated: March 3, 2026

1. Data We Collect

We collect the information you provide directly when creating your account and using our services:

  • Account data: full name, email address, password (encrypted), institution, position, ORCID.
  • Academic data: publications, degrees, teaching, thesis supervision, grants, conferences, certifications, academic service, outreach, and awards.
  • Documents: files you upload such as certificates, diplomas, and evidence documents.
  • Payment data: processed by Stripe or MercadoPago. We do not store card numbers.
  • AI analysis data: when you use the smart document analysis feature, the content of your files is processed by artificial intelligence (Anthropic Claude) to extract academic information. We do not store the document content after analysis.

2. How We Use Your Data

  • Provide and improve the AcademicOS service.
  • Generate CV exports in PDF format.
  • Process subscription payments.
  • Send notifications related to your account.
  • Analyze academic documents using artificial intelligence (optional feature initiated by the user).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Storage and Security

Your data is stored on secure Supabase servers (AWS infrastructure) with encryption at rest and in transit. The application is deployed on Vercel with mandatory HTTPS.

4. Cookies

We use essential cookies for authentication and service functionality. We do not use tracking or advertising cookies.

5. Your Rights

Regardless of your location, you have the right to:

  • Access: view all your stored data.
  • Rectification: correct inaccurate data from your profile.
  • Erasure: permanently delete your account and all associated data.
  • Portability: export all your data in JSON format from Settings.
  • Objection: object to the processing of your data in certain circumstances.
  • Automated decisions: object to the use of your data in automated decision-making processes or profiling, including document analysis with artificial intelligence.

These rights are offered in compliance with Chilean Law No. 21,719 on Personal Data Protection, the GDPR for EU residents, the CCPA for California (USA) residents, and other applicable data protection regulations in Latin America.

You can exercise these rights from the Settings section or by contacting us directly.

6. International Data Transfers

AcademicOS operates from Chile and uses infrastructure providers with servers in multiple regions. Your data may be processed on servers located outside your country of residence, always with adequate security guarantees:

  • Supabase: data storage with AES-256 encryption at rest.
  • Stripe / MercadoPago: PCI DSS certified payment processing.
  • Vercel: hosting with mandatory HTTPS and global distribution.
  • Anthropic: smart document analysis processing with AI, with encryption in transit (TLS). Anthropic does not store or use data to train their models.

7. Data Retention

We retain your data as long as you maintain an active account. Upon deleting your account, all data is permanently removed within 30 days.

8. Legal Bases for Processing

Your personal data is processed in accordance with the following legal bases, as established by Law No. 21,719:

  • Consent: by creating your account, you expressly accept our terms and privacy policy. This consent is free, specific, informed, and unambiguous.
  • Contract performance: processing is necessary to provide the AcademicOS service you have contracted.
  • Legal compliance: to fulfill applicable legal obligations, such as fiscal data retention for payments.
  • Legitimate interest: to improve security, prevent fraud, and ensure service operation, provided your fundamental rights do not prevail.

9. Processing Principles

In compliance with Law No. 21,719, we apply the following guiding principles to all data processing:

  • Lawfulness and fairness: we process your data fairly, transparently, and in accordance with the law.
  • Purpose limitation: we only collect data for specific, explicit, and legitimate purposes.
  • Proportionality: we only request data strictly necessary for the service.
  • Quality: we keep your data accurate, complete, and up to date.
  • Security: we implement appropriate technical and organizational measures to protect your data.
  • Transparency: we inform you clearly and accessibly about the processing of your data.
  • Confidentiality: we guarantee the secrecy of your personal data and restrict access to necessary personnel only.
  • Accountability: we proactively demonstrate compliance with these obligations.

10. Automated Processing and Artificial Intelligence

AcademicOS offers an optional smart document analysis feature that uses artificial intelligence (Anthropic Claude API) to extract academic data from PDF files and images:

  • It is completely optional and requires your explicit action to initiate.
  • The document content is sent encrypted (TLS) to Anthropic servers (USA) for processing.
  • Anthropic does not store or use the content of your documents to train their AI models.
  • Extracted data is presented for your review before being saved to your account.
  • You have the right to object to this automated processing at any time, without affecting your use of the rest of the service.

11. Security Breach Notification

In the event of a security breach affecting your personal data, AcademicOS commits to: notifying the Personal Data Protection Agency within the timeframes established by Law No. 21,719; informing you directly if the breach poses a high risk to your rights and freedoms; and implementing immediate measures to contain and mitigate the effects of the breach.

12. Data Controller

The data controller is AcademicOS. We have a designated Data Protection Officer (DPO). For any inquiries, rights exercise requests, or complaints related to the protection of your personal data, you may contact our DPO at privacidad@academicos.app

13. Contact

For privacy and data protection inquiries, write to us at: privacidad@academicos.app

14. Voluntary Public Profiles

AcademicOS offers an optional feature that allows users to create a public profile accessible via a unique URL (academicos.app/p/username). This feature is strictly voluntary and subject to the following conditions: (1) Explicit activation: the profile remains private by default. It is only made public after the user's express consent. (2) Granular control: the user chooses what information to share (publications, education, positions, etc.). Contact data such as email is never publicly visible, regardless of settings. (3) Search engine indexing: by activating a public profile, the user consents to it being indexed by search engines such as Google. (4) Immediate revocation: the user may deactivate their public profile at any time from Settings → Public Profile. Deactivation takes effect immediately. (5) Responsibility: the information on the public profile is the responsibility of its owner. AcademicOS acts as a data processor on behalf of the user for the data they choose to publish.