Privacy Policy

Ruzora LLC (“Ruzora”, “we”, “us”) is a New Mexico limited liability company. We connect companies in the United States with senior software engineers in Latin America, through two service lines: staff augmentation (engineers embedded in a client’s team) and a software factory (fixed-price custom development).

Registered address: 1209 Mountain Road PL NE STE R, Albuquerque, NM 87110, USA.
Contact: team@ruzora.com

This policy covers www.ruzora.com, the Ruzora client portal, the Ruzora candidate portal, the Sol app at sol.ruzora.com, our email and phone communications, and the Ruzora Model Context Protocol (MCP) server at mcp.ruzora.com.

We collect three kinds of information: what you give us, what your software gives us, and what an AI assistant gives us on your behalf.

Information you give us directly

• If you are hiring: your name, work email, phone number (optional), company name and company website, plus whatever you write in a message field, book a call about, or tell us on that call.
• If you sign in to Sol with LinkedIn or Google (optional, for company users): we use the provider only to confirm who you are and which company you work for.
  • LinkedIn (optional sign-in and verification): we receive your name, email and LinkedIn member ID; we store your email (and, for a work address, your company domain), your LinkedIn member ID and the date you verified.
  • Google (optional sign-in for company Google Workspace accounts; personal Gmail accounts are not accepted): we receive your name, email and workspace domain; we store only your email and company domain.
  We never store the provider’s access tokens, your name or your profile picture, and neither provider receives your Sol conversation data.
• If you are a candidate: your name, email, phone number (optional), LinkedIn profile URL (optional), the role category you are interested in, your CV or résumé if you upload one, and the results of any Ruzora assessment you take (technical interview, coding challenge, written responses). If you record a video interview, how AI reviews it, who processes the recording, and the optional opt-in to help improve our vetting models are explained in our AI Interview Notice.
• If you subscribe to our newsletter: your email address.
• If you are a client under contract: billing contact details, payment method details handled by our payment processor (we never see or store full card numbers), signed agreements, invoices, and timesheet or milestone records.

Information collected automatically

• Standard web request data: IP address, browser and device type, referring page, and the pages you view on our site.
• Product analytics events (which pages and buttons were used) and error reports when something on the site breaks.
• A session cookie (portal_token) if you log into the client portal. It exists so you stay logged in; it is not used for advertising.
• On the MCP server: the caller’s IP address, held only in memory for a few minutes to enforce rate limits, then discarded. It is not written to our database.
• Visitor identification. On our public marketing pages we use a business-visitor identification service (RB2B) that attempts to match a visitor from a business network to a named professional and work email address, so we can follow up with companies that look like a fit. This runs on our public pages only — never inside the client or candidate portals. If you would rather not be identified this way, email team@ruzora.com and we will suppress your record.

Information we do not ask for

None of our website forms or MCP tools ask for national identification numbers (such as a Peruvian DNI or a US Social Security number), payment card data, health data, or credentials (passwords, API keys, or login details for any other service), and we do not ask for any other special-category personal data there either. Please do not send them to us. If a document you upload, such as a CV, happens to contain one, we do not use it, and you can ask us to delete it. If a signed engagement later requires contractor-onboarding data, that is collected separately through our contracting and payments providers and governed by the agreement you sign at that point.

• To answer you. If you ask about hiring, we email or call you back about hiring. That is the whole point of the form.
• To match people to roles. Candidate profiles and assessment results are used to build shortlists for client engagements.
• To run the engagement. Contracts, invoices, payments, and delivery reporting for clients we work with.
• To send the newsletter, if you asked for it.
• To understand the market. We look at the work history in candidate profiles to learn which companies already work with Latin American engineers, on which technologies, and through which firms. We use that to decide which companies to contact about our services and which firms to partner with. When we contact a company because candidates have worked with it, we never mention those candidates and never show that company their profiles. We never sell this information.
• To improve the site and the service. Aggregate analytics, error monitoring, and understanding which pages and channels actually help people.
• To meet legal and accounting obligations.

We do not sell personal information, and we do not share it with advertising networks for their own purposes.

Business outreach. Ruzora also runs business-to-business outreach. If you are a professional at a company that fits the services we provide, we may contact you at your work email or professional profile using contact data from public sources and commercial business-data providers. Every such message includes a way to opt out, and one reply asking us to stop is enough — write to team@ruzora.com and we will remove you.

This section matters if you reached us through Claude, ChatGPT, Cursor, Perplexity, or any other AI assistant. Please read it even if you skip the rest.

Ruzora publishes a public Model Context Protocol (MCP) server at https://mcp.ruzora.com/mcp. It lets an AI assistant look up information about Ruzora and, when you ask it to, contact us for you. It requires no account and no authentication.

What that means in practice

• An assistant can submit your details to us. If you tell your assistant something like “ask Ruzora about hiring two React engineers,” the assistant may call one of our write tools and send us your name, email address, phone number (if you provided one), and company name and website — or, for a candidate application, your name, email, phone, LinkedIn URL, role interest, and a short message.
• It lands in our CRM. A submission made through the MCP server creates exactly the same record in Ruzora’s customer relationship management system as filling in a form on this website would. It is tagged so we know it came from an AI assistant.
• We will contact you about it. A real person at Ruzora will follow up by email, and by phone if you gave us a number. Treat a tool call as a request to be contacted, because that is how we treat it.
• We only receive what the assistant sends. We do not request or store your conversation with the AI assistant, its history, or anything else in it — only the fields the tool sends, which are the ones listed above.
• People review what you send. Applications and enquiries that arrive through the MCP server are reviewed by people at Ruzora. No automated decision to accept or reject you is made through the MCP server. If you apply as a candidate, we may invite you to an assessment as a next step, and that invitation may be sent automatically; whether you are put forward for a role is decided by a person.
• The read-only tools collect nothing about you. Asking an assistant what roles Ruzora has open, what a job involves, or what Ruzora does sends us no personal data at all.

Your assistant is not us

The AI assistant is your software, not ours. Your conversation with it is governed by that provider’s privacy policy (Anthropic, OpenAI, and so on), not this one. We have no visibility into it and no control over it. Ruzora is also not responsible for the accuracy of anything an assistant says about us; the authoritative answers are on this website.

If you did not mean to be contacted

Assistants sometimes act more eagerly than their users intended. If a record was created for you and you did not want one, email team@ruzora.com from the address in question and we will delete it. No explanation needed.

We share personal information with the following categories of recipients:

• Clients, for candidates we put forward. If you apply to Ruzora’s talent network and we shortlist you for a role, we share your professional profile and assessment results with that client so they can decide whether to interview you. We do not share candidate contact details with a client before there is a signed agreement in place.
• Service providers who run parts of our stack. They process data on our instructions and for no other purpose. As of the date above these are: Neon (database), Railway and Vercel (application hosting), Cloudflare R2 (file storage), Resend (transactional email), Instantly (outbound email), Stripe (payments), BoldSign (e-signature), Deel (contractor payments), Anthropic (the AI model powering the assistant on this site, and grading candidate interview answers), OpenAI (speech-to-text transcription of candidate interview recordings), Google (Gemini, audio analysis of candidate interview recordings: spoken-English level, intelligibility and pace), Wise (a second payments rail alongside Deel), RB2B (business-visitor identification, described in section 2), Slack (our internal workspace, where new enquiries are announced to our team), Google Tag Manager, PostHog and Google Analytics (product and site analytics), and Sentry (error monitoring).
• Identity providers for optional Sol sign-in. LinkedIn (sign-in and verification for company users) and Google (sign-in for company Google Workspace accounts) confirm who you are when you choose to sign in with them. They learn that you signed in to Sol; neither receives your Sol conversation data. What we keep from each is described in section 2.
• Business-data providers used for outbound research. When we research companies that may be a fit, we send business contact details to Apollo, Hunter, Explorium, Bright Data, PhantomBuster, Perplexity, and Serper for matching and verification. This concerns professional contact data, not candidate profiles or client account data.
• Professional advisers — accountants and lawyers — where needed, under confidentiality obligations.
• Authorities, where we are legally required to, or to protect our rights, safety, or property.
• A successor, if Ruzora is ever acquired or merged. You would be told before your information became subject to a different privacy policy.

We use a small number of cookies and similar technologies:

• Strictly necessary. The portal_token session cookie that keeps you logged into the client portal.
• Analytics. Google Analytics (loaded through Google Tag Manager) and PostHog, used to understand which pages and campaigns work. Ruzora does not use these to build advertising profiles.
• Error monitoring. Sentry, which records technical details when something breaks so we can fix it.

Most browsers let you block or delete cookies. Blocking analytics cookies does not affect anything on the public site; blocking the session cookie will stop the client portal from working.

We keep personal information only as long as it is useful for the purpose it was collected for, or as long as the law requires.

• Contract, invoice, and payment records: retained for as long as required by US tax and accounting rules.
• Newsletter subscribers: until you unsubscribe.
• Enquiries and leads: retained while the relationship is active, and for 24 months after our last contact with you. After that we delete the record or reduce it to anonymous, aggregated statistics that cannot identify you.
• Candidate profiles: retained for 24 months from your last activity with us — an application, an assessment, or a reply. At that point we delete the profile or ask you to confirm you would like us to keep it on file. You can ask us to delete it sooner at any time.
• Server logs and analytics: retained per the default retention of the providers listed above.

You can ask us to delete your information sooner — see Your choices.

Ruzora is a US company and our systems are hosted with US-based cloud providers. Ruzora personnel and contractors are located in the United States and in Latin America, so information may be accessed from those countries in the course of delivering the service.

Cross-border transfer. If you are outside the United States — for example a candidate in Peru or elsewhere in Latin America — the information you send us is transferred to the United States, where it is stored and processed by our hosting providers (Neon, Railway and Vercel) and by the other service providers listed in Who we share it with. We make that transfer on the basis of your consent, which you give when you submit a form, apply, or ask an AI assistant to send your details to us. You can withdraw that consent at any time by writing to team@ruzora.com; withdrawal stops future processing but does not undo processing that already happened.

Email team@ruzora.com from the address concerned and we will, within a reasonable time and at no charge:

• tell you what information we hold about you;
• correct anything that is wrong;
• delete it, unless we are required to keep it for tax, accounting, or legal reasons;
• stop contacting you, including removing you from every outbound list we run;
• send you a copy of what you gave us.

Every marketing email we send also contains a one-click unsubscribe link.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so and have no plans to. We also do not use your information to train AI models, and we do not permit our providers to use it to train theirs.

We honour the requests above wherever you live, rather than only where a particular law requires it. If you are in a place with specific statutory privacy rights and you need us to handle your request under that framework, say so in your email and we will work with you.

Ruzora is operated from Peru, so Peru’s Personal Data Protection Law (Ley N.º 29733, Ley de Protección de Datos Personales) and its regulation, approved by Supreme Decree N.º 016-2024-JUS, apply to all the personal data we process, wherever you live: in Peru, elsewhere in Latin America, in the United States or anywhere else. The rights below apply to everyone, whatever your country.

The data protection law of your own country may give you additional rights, for example Brazil’s LGPD (Law 13.709), Mexico’s LFPDPPP, Colombia’s Law 1581 of 2012, Argentina’s Law 25.326 or Chile’s Law 19.628. You can exercise those through the same contact below.

• Legal basis. We process your personal data on the basis of your free, prior, express and informed consent, which you give when you submit a form, apply to our talent network, or ask an AI assistant to send your details to us through our MCP server. The purposes are the ones described in How we use it.
• International transfer. Your data is transferred to and stored in the United States, as described in Where it is stored. That transfer is also based on your consent.
• Your rights. You can exercise your rights of access, rectification, cancellation and objection (the “ARCO” rights), and your right to data portability, at any time and free of charge. You can also withdraw your consent at any time.
• How to exercise them. Email team@ruzora.com, our data-protection contact, from the address concerned. Say which right you are exercising and we will respond within the time limits set by the regulation.
• Complaints. If you are not satisfied with our answer, you may file a claim with Peru’s National Authority for Personal Data Protection (Autoridad Nacional de Protección de Datos Personales) or with the data protection authority in your own country.

We use encrypted connections (HTTPS/TLS) across our sites and APIs, restrict access to personal information to the people who need it, and rely on established providers for hosting, storage, and payments. Our public MCP server is rate-limited per IP address and only accepts the details you send it — it cannot be used to read or delete anything already in our systems.

No system is perfectly secure, and we will not pretend otherwise. If you believe you have found a vulnerability in a Ruzora site or API, please write to team@ruzora.com and we will respond.

Ruzora’s services are for businesses and for working professionals. They are not directed at anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

When we change this policy we update the “last updated” date at the top. If a change materially affects how we handle information you have already given us, we will tell the people affected directly rather than relying on you to re-read this page.

Ruzora LLC
1209 Mountain Road PL NE STE R
Albuquerque, NM 87110
United States

Email: team@ruzora.com