Candidate Privacy Notice

The data controller is Uncharted Territories Inc., 2021 Fillmore Street, 55, San Francisco, CA 94115, USA — a Delaware corporation, the company behind Tomas Pueyo's Uncharted Territories publication. For anything in this notice, including exercising your rights, write to david@unchartedterritories.co.

It covers people we identify and contact ourselves as possible candidates for a specific open role — currently our open roles in design and engineering. If you applied to us directly through the hiring page, we additionally hold what you chose to send us (application, resume, links), used for the same recruitment purpose under the same rights described here.

• Your name and how you present yourself professionally (title, roles, location at the city or country level).
• Professional contact details — normally the email address you publish yourself; occasionally one confirmed through a licensed talent-search tool.
• Links to and content of your public professional work: portfolio site, case studies, app store listings, GitHub or similar, public design-community profiles.
• Public career information: employers, roles, and dates as you have published them.
• Our own short notes evaluating the above against the role (for example, whether your portfolio shows shipped product work).

That is the full list. We do not collect data about your private life, and we do not want special-category data (health, beliefs, etc.); if a public source contains any, we do not record it.

We did not get your data from you, so you are entitled to know the source. It comes from publicly accessible professional sources:

• Your own portfolio or personal website — our preferred source. Where you publish a contact address there, that is the address we use, and the email we send you says so.
• Public professional profiles and communities: LinkedIn, Behance, Dribbble, GitHub, and similar.
• Public team pages, conference pages, and professional directories.
• Licensed talent-search databases that compile public professional profiles. We only use a database's contact data if the vendor can name where it came from; the specific source of your data is named in the first email we send you.

One purpose: recruitment for a specific, currently open role — finding people whose work fits, contacting them about the role, and evaluating mutual fit if they reply. We do not use candidate data for marketing, we do not build long-term talent pools from sourced profiles, and we do not sell or share your data for advertising.

The legal basis is our legitimate interest in hiring for that role (GDPR Article 6(1)(f)). We documented a legitimate interest assessment before any sourcing began, weighing our interest against your rights; you can request a summary at the address above. Because we rely on legitimate interest, you have an unconditional right to object — next section.

• If we source your profile and do not contact you within 30 days, we delete it.
• If we contact you and you do not reply, we send at most one follow-up, then delete your data within 30 days of our last message.
• If you object, we delete within 7 days and keep only the suppression-list entry described above.
• If you engage with us about the role, we keep the data while the conversation is live, then delete it within 6 months of the search closing unless you ask us to stay in touch.

Inside the company, only the small team running this search. Outside it, only service providers processing data on our instructions under contract: email and document tools (Google Workspace), applicant tracking (Airtable), and our hosting and database providers (Render, Supabase). We are a US company, so data is processed in the United States; our providers commit to GDPR-standard safeguards, including the EU standard contractual clauses, for data transferred from the EU.

• Access — ask for a copy of the data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted.
• Restriction — limit what we do with it while a question is resolved.
• Objection — tell us to stop — see the section above; we honor it, full stop.

Write to david@unchartedterritories.co; we answer within a month. We may ask you to confirm you control the email address the request concerns — nothing more.

We use software, including AI tools, to help find public portfolios and organize what they show. Every decision about whether to contact you, and every hiring decision, is made by a person. No automated decision with legal or similarly significant effects is made about you.

If you think we have handled your data unlawfully, you can complain to your data-protection authority. In Spain that is the Agencia Española de Protección de Datos, www.aepd.es; elsewhere in the EU, your national supervisory authority. We would rather you write to us first so we can fix it, but that is your choice, not a condition.

If we change how we handle candidate data, we update this page and the date at the top. Material changes reach anyone we are actively in contact with by email.