Privacy Policy

Who this covers

This policy is from MitHub LLC ("MitHub", "we"). It covers this website, mithub.club, and every conversation that starts from it or that we start with you: email, phone calls, text messages, WhatsApp, Instagram and any channel we add later.

Three other documents say more about specific channels, and they are part of this one: the Calling and AI Disclosure for phone calls, the SMS Terms and SMS Privacy for text messages, and the Cookie Notice for what this site puts in your browser. The Terms of Service cover the deal itself.

Two audiences, deliberately kept apart

MitHub has two kinds of people in it. Companies buy recruiting and pay when they hire. Candidates are individuals: they train, get evaluated, open a public profile and get introduced to companies. Candidates never pay us to get a job.

The same person can be both, and that is exactly why we split them. We treat every contact as belonging to one of four flows, and each flow carries its own permissions:

Flow	What it is
Company · service	You run a company and asked us about talent, or we are already working together. We answer you, coordinate interviews and keep you posted on an open search.
Company · marketing	We approach a company that has not asked us anything yet, or we offer services to one that did. This is prospecting, and it is the flow with the strictest rules.
Candidate · recruiting	You applied, you are in a process, or we are introducing you to a company. Status, interviews, an offer, a document we need from you.
Candidate · marketing	Courses, live sessions, events and MitHub programs. Wanting a job is not the same as wanting our promotions, so this one is asked for separately.

A permission never travels between flows. Applying for a job is not permission to be sold a course. Asking us for a quote is not permission to be prospected forever. Agreeing to a text about your interview is not agreeing to promotional texts. If we want to move you from one flow to another, we ask again.

What we collect

If you run a company

Your name and your role, the company name and the country it operates in.
A way to reach you back: work email, phone number, WhatsApp or the Instagram account you wrote from.
What you told us is breaking in your process, what you have already tried, and what kind of person or system you think you need.
What happens afterwards: the roles we open for you, the candidates we send, the interviews, and whether you hired.

If you are a candidate

Your name, your city and country, the languages you speak and how well.
The roles you are after, the tools you have actually operated, and a description of work you have shipped: what was broken, what you built, what changed after.
Documents you give us: a CV, a portfolio, links to work. Professional links such as LinkedIn or GitHub. An intro video, if you record one.
A way to reach you: email, phone or WhatsApp.
What comes out of a process: our notes on an evaluation or an interview, the roles we put you forward for, and what the company said. Where you agreed to it, a recording or a transcript of a call.

From anyone who talks to us

The content of the conversation, on whatever channel it happened, and the address, number or handle it came from.
When it happened, which of our people or systems handled it, and how it ended.
Consent records. Which permission you gave, the exact words you were shown when you gave it, the date and time, the page or the call it happened on, and what you were asking for at that moment. The record also keeps the IP address and the browser the request came from, because a consent nobody can place at a time and a place is not evidence. We keep these because when a regulator or a carrier asks whether you agreed, "we think so" is not an answer.
Opt-out records. If you tell us to stop, we keep enough to make sure we actually stop: the number or address, the channel, and when you asked. This record outlives a deletion request, because erasing it is what would let us contact you again by accident.

What the website itself does

Your draft stays with you. The company door and the talent door save what you type in your own browser. It does not reach us until you press send, and "Start over" wipes it.
Documents are read in your browser. A PDF, TXT or MD you drop into the form is parsed on your own machine and the text lands in your draft. The file is never uploaded to us.
Dictation is your browser, not us. The "say it" option uses the speech recognition built into your browser. On Chrome and Edge that means your browser sends the audio to Google to turn it into text. That is the browser doing it. We never receive audio, only the text you decide to keep and send.
Request logs. Vercel serves this site and keeps ordinary server logs: IP address, browser, page and time.
No analytics product runs on this site today. No Google Analytics, no Vercel Web Analytics, no third-party tracker. If we turn one on, this page and the Cookie Notice say so before it goes live.

What we use it for

Answering you, on the channel you used or the one you asked for.
Understanding what is breaking in a company and telling them what we would build, including telling them not to hire anyone.
Evaluating a candidate, opening and maintaining a public profile, and preparing an introduction.
Introducing candidates to companies and running the interviews and follow-up that come after.
Running the free classroom, the faculties and the live sessions.
Sending you the messages you agreed to receive, on the channel you agreed to receive them on.
Keeping the records a business has to keep: agreements, invoices, consent, opt-outs, and what we did and when.
Improving how MitHub works, and keeping it and you safe from fraud and abuse.

What we do not do. We do not sell personal information. We do not rent, trade or hand over contact lists. We do not share mobile numbers or consent records with anyone so they can market to you. The only advertising tool on this site is the Meta Pixel on the workshop pages (/taller and /taller-gracias), and you can turn it off at /taller?pixel=off: see the Cookie Notice.

Candidate information and employers

This is the part that matters most if you are a person, not a company, so it is written out in full.

Your public profile

A profile goes public only after you send us your information and ask us to open one. While you fill the form in, you see a live preview of exactly how it will look.
A public profile carries professional information only: your name, your photo, your role, your city and country, the languages you speak, the tools you operate, the work you documented and your professional links.
A profile never publishes your phone number, your email or your street address. The same rule applies to any CV you upload: if it has a phone, an email or an address on it, it does not go up. Companies reach you through MitHub.
You can ask us to take your profile down at any time, and we do it. Write to contacto@mithub.club or use the privacy request form.

What an employer actually receives

Your public profile and the work you documented on it. That is the default, and it is the part that is already public anyway.
Anything beyond that goes only when you tell us to, for that specific company: your direct contact details, a CV that is not public, an interview recording or transcript, or our evaluation notes.
We do not sell candidate databases, and we do not post your profile to job boards or other platforms without telling you first.
When a company decides something about you, we pass on what they tell us. We do not control what an employer does with your information once you are in their process. At that point their own privacy policy applies too.

Automated evaluation

We use automated tools to organise, summarise and score applications. A person at MitHub makes the decision to advance or reject. You can ask us what an automated tool considered about you, and you can ask a person to look at it again. Write to contacto@mithub.club.

How we contact you

MitHub uses phone calls, text messages, WhatsApp, Instagram and email, and some of that is automated: AI voice agents on calls, and automated messages on the text channels. The Calling and AI Disclosure and the SMS Terms spell out each one.

The rule underneath all of them is the same: we contact you on a channel when you gave us that channel and that permission, or when the law lets us without one, such as replying to something you sent.

Marketing calls that use an artificial or prerecorded voice, including an AI voice, and marketing text messages, need your prior express written consent. We ask for it separately, in its own checkbox, never pre-ticked, and agreeing is never a condition of buying anything from us or of being considered for a job. You can take it back at any time and we act on it.

Where AI is involved

Voice agents. Some calls are placed or answered by an AI voice agent. It says it is an AI at the start of the call, and you can ask for a person at any point.
Messages. Some messages on SMS, WhatsApp and Instagram are drafted, routed or sent automatically.
Applications. Automated tools help organise, summarise and score what candidates send. A person still decides.
Transcripts. Where you agreed to a call being recorded, we may transcribe and summarise it automatically.

We do not hand your information to anyone so they can train general purpose AI models on it. Where an AI provider processes your information to give MitHub a feature, they do it under contract, for us, and not for their own purposes.

Who else processes it

What for	Provider	Where
Website hosting and server request logs	Vercel	United States
Business email	Google Workspace	United States
Phone calls, text messages and branded caller ID	Twilio	United States
Messaging	WhatsApp and Instagram (Meta)	United States and Ireland
Fonts on this site	Google Fonts	United States
Video. The player loads only after you press play; the thumbnail picture loads with the page	YouTube, privacy-enhanced mode	United States
Video on the older landing pages kept at /legacy-wp/	Vimeo	United States
The library that reads your PDF, downloaded to your browser. Your file is not uploaded.	cdnjs (Cloudflare)	Global
Sign-in and the consent ledger, where enabled	Supabase	United States
Measuring our ads and showing workshop reminders. Only on /taller and /taller-gracias, and can be turned off at /taller?pixel=off	Meta Pixel (Meta Platforms)	United States and Ireland

These are service providers. They process your information to give MitHub a service, under contract, and not for their own marketing. Handing your number to a telephone carrier so that a call can physically reach you is not selling it.

Beyond that, we share information when a company you are in a process with needs it and you told us to send it, when a professional advisor such as a lawyer or an accountant needs it, when a law or a valid legal request requires it, and if MitHub is ever sold or merged, in which case this policy follows the information.

Cookies and browser storage

mithub.club does not set cookies. What it saves lives in your browser's local storage and never reaches us: your language, which door you were on, your form draft, your dictation language, any talent you shortlisted and how far you got in the classroom. The Cookie Notice lists every key, what it holds and how to clear it.

How long we keep it

What	How long
Consent records and opt-out requests	At least five years. The FTC's Telemarketing Sales Rule requires records of express consent, of calls, and of do-not-call requests to be kept that long.
Call and message records for campaigns covered by that rule	Five years.
Inquiries and conversations	While the relationship is live, and afterwards while we may still need them for records, tax or legal reasons.
Candidate profiles and application material	While your profile is up. You can ask us to take it down at any time and we do.
Your form draft in your browser	Until you clear it or press "Start over". We never have it.
Server request logs	Under Vercel's own retention, which we do not control.

If you ask us to delete your information we do, except where a law requires us to keep it. The main exception is your consent and opt-out records. Deleting those would destroy the proof that you asked us to stop, and would let us contact you again by mistake. So we keep the minimum needed to honour your request, and nothing else.

How we keep it

This website is static and holds no database of your answers. What you type stays in your browser until you press send. What reaches us arrives in business email, WhatsApp, Instagram and our telephony account, over encrypted transport, on accounts MitHub controls, and access is limited to the people who need it to do the work.

We do not claim certifications we do not hold, and no system is perfectly secure. If something happens that puts your information at risk, we tell the people affected and the authorities that have to be told.

Your rights

Wherever you live, you can ask us to do any of this, and the way to ask is the privacy request form or an email to contacto@mithub.club:

See what we hold about you, and where it came from.
Correct something that is wrong.
Delete it.
Take your public profile down.
Stop contacting you, on one channel or on all of them.
Get a copy in a format you can take elsewhere.
Have a person review an automated evaluation.

We answer within 45 days and tell you if we need longer. It is free. We may ask you to confirm you are who you say you are, which is protection for you, not an obstacle. Asking costs you nothing: we will not treat you worse, drop you from a process or change a price because you exercised a right.

Colombia. MitHub operates from Colombia, so Ley 1581 de 2012 and its habeas data rights apply to what we handle from there. You can also complain to the Superintendencia de Industria y Comercio.
United States. California, Colorado, Connecticut, Texas, Virginia and other states give residents rights of access, correction, deletion and portability, and the right to opt out of sale or of sharing for cross-context behavioural advertising. We do not sell personal information. The only sharing for that kind of advertising is the Meta Pixel on the workshop pages, and opening /taller?pixel=off is your opt-out.
Anywhere else. Write to us and we handle your request through the same process.

Where your information travels

MitHub's team works from Medellín, Colombia. The companies we serve are mostly in the United States. The providers in the table above are mostly in the United States. So information you send us moves between Colombia and the United States and is likely to be stored in the United States.

If you are a candidate somewhere else in Latin America, your information reaches the United States the moment it reaches one of those providers or an employer. Countries have different privacy laws. We apply this policy to your information wherever it sits.

Age

MitHub is for working adults. It is not aimed at anyone under 18 and we do not knowingly collect information from anyone under 18. If you believe a minor sent us something, write to contacto@mithub.club and we will delete it.

Changes to this policy

The effective date at the top changes when this document changes. If a change is material we put a dated note on this page. If a change would affect a permission you already gave us, we ask you again instead of assuming the old permission still covers it.

Contact

MitHub LLC
Phone and text: +1 706 403 3251
Email: contacto@mithub.club
WhatsApp: +57 320 757 7561
Privacy requests: mithub.club/privacy-request