Data controller
Controller
TBR Software S.A. de C.V. (hereinafter, “Edgebound” or “Edgebound Labs”), with address at Torre Virreyes, Pedregal 24, Floor 3, Col. Molino del Rey, Miguel Hidalgo, Mexico City, is responsible for the processing, use and protection of the personal data you provide in connection with your participation in recruitment, selection and talent evaluation processes.
This Notice is issued in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the Privacy Notice Guidelines, and complements Edgebound’s general Privacy Notice.
01
Personal data subject to processing
To carry out the purposes described in this Notice, Edgebound may collect and process the following categories of personal data:
- Identification data
- Full name, date of birth, sex, nationality, marital status and identity documents (voter ID, passport or resident card).
- Contact data
- Email address, phone number, address and geographic location.
- Work and academic data
- Professional history, work references, education, certifications, technical or creative portfolios, and professional profiles on public platforms (LinkedIn, GitHub, etc.).
- Asset or financial data
- Only when the nature of the role requires it (for example, positions handling financial resources) and with your express consent.
- Sensitive personal data
- Only when strictly necessary and based on applicable regulations, after obtaining your written and express consent.
Edgebound applies the minimization principle: it only collects the data strictly necessary to evaluate your application. We do not request data that is not relevant to the selection process.
02
Processing purposes
2.1 · Primary purposes
The personal data collected will be used for the following purposes, which are essential to the selection process:
- Verify and confirm your identity.
- Evaluate your profile, experience and professional competencies.
- Manage your participation in interviews and technical, psychometric or skills assessments.
- Validate the work and academic references you provided.
- Create and manage internal candidate files.
- If selected, begin the onboarding and hiring process.
2.2 · Secondary purposes
Additionally, we may use your data for the following purposes —which are not necessary for the selection process but help us improve our talent management:
- Consider your profile in future recruitment processes that match your experience and competencies.
- Send you informational communications about job opportunities at Edgebound.
If you don’t want your data used for secondary purposes, you may say so at any time by writing to rh@edgebound.com with the subject “Opt-out candidate secondary purposes”. Refusal will not affect your participation in active selection processes.
03
Use of Artificial Intelligence in selection processes
Edgebound may use artificial intelligence-based tools to support recruitment and selection processes, including —but not limited to— preliminary résumé analysis, profile classification and evaluations of fit with the role’s requirements.
Our commitments
- No hiring or rejection decision will be made solely on an automated basis. Every final decision will include the involvement and judgment of a human resources professional.
- Results generated by AI tools will be used only as supporting input, not as the sole or determining criterion.
- AI tools will not be used to analyze sensitive personal data (ethnic origin, health status, sexual orientation, beliefs) as part of the selection process.
- Candidates may request information about whether AI tools were used to evaluate their profile by sending a request to rh@edgebound.com.
04
Transfers of personal data
Edgebound may transfer your personal data to the following third parties:
| Recipient | Purpose | Country |
|---|---|---|
| Recruitment and assessment platforms | Managing the selection process, administering technical and psychometric assessments | Mexico / USA |
| Background-check providers | Validation of work and academic references and, where applicable, criminal records | Mexico |
| Cloud infrastructure providers | Secure storage of candidates’ digital files | United States |
| Competent authorities | When required by applicable law or upon a duly founded and reasoned request | Mexico |
All third parties that receive candidate personal data maintain confidentiality and data-protection agreements with Edgebound. International transfers are carried out under contractual clauses that guarantee a level of protection equivalent to that established by the LFPDPPP.
Outside the cases above, Edgebound will not sell, assign or transfer your personal data without your prior consent.
05
Security measures
Edgebound holds ISO/IEC 27001:2022 certification and implements administrative, technical and physical measures to safeguard and protect candidates’ personal data, in accordance with the LFPDPPP, its Regulations and international information-security standards.
Candidate files are stored in systems with access control, encryption in transit and at rest, and periodic backups. Access to the data is limited exclusively to human resources staff and the evaluators involved in the corresponding selection process.
06
Retention period
The personal data provided will be retained according to the following criteria:
- Candidates not selected
- Data will be retained for up to 24 months after the close of the selection process they took part in. After this period, it will be securely deleted, unless the candidate expressly authorizes its retention for a longer period for future opportunities.
- Selected candidates
- Data will be incorporated into the employee file and governed by internal human resources policies and applicable labor law.
- Early revocation
- Candidates may request deletion of their data at any time —even before the 24-month period ends— by sending a request to rh@edgebound.com.
07
Exercising ARCO rights and revoking consent
You have the right to access, rectify, cancel or oppose the processing of your personal data (ARCO rights), as well as to revoke the consent granted. The request must include:
- The data owner’s full name and address or other means to communicate the response.
- Documents proving your identity (simple copy of voter ID, passport or resident card).
- A clear and precise description of the personal data over which you seek to exercise your right.
- For rectification, indicate the changes to be made and provide supporting documentation.
- Any other document that helps locate your personal data.
Exercise your rights
Candidate ARCO requests
Send your request to Human Resources. We will respond within a maximum of 20 business days.
Edgebound will respond to your request within a maximum of 20 (twenty) business days from the date of receipt. If the request is valid, it will be made effective within the following 15 (fifteen) business days. These timeframes may be extended as provided for in the LFPDPPP.
08
Underage candidates
Edgebound’s recruitment processes are aimed exclusively at people over 18 years old. Edgebound does not intentionally collect personal data of minors for recruitment purposes.
For internship or community-service programs involving people under 18, the express consent of a parent or legal guardian will be required, in accordance with applicable law.
09
Competent authority
If you believe your right to personal data protection has been violated by any conduct of Edgebound in connection with a recruitment process, or if you wish to file a complaint, you may turn to the Secretariat of Anti-Corruption and Good Governance (SABG), the competent authority for the protection of personal data held by private parties.
Secretariat of Anti-Corruption and Good Governance (SABG) → www.gob.mx/sabg
10
Changes to the Privacy Notice
Edgebound may modify or update this Notice at any time to address legislative reforms, internal policies or new requirements. Updates will be published on the Portal with the corresponding update date.
In the event of substantial changes affecting the processing of candidate data in active processes, Edgebound will notify the candidates involved through the contact means provided.
11
Contact
For any query, request or notification regarding the processing of your personal data as a candidate, you can contact us through:
Human Resources · Edgebound
Have a question about your data?
Last updated: June 7, 2026 · Version 2.0 · General Privacy Notice available at privacy notice.