1. Introduction

Welcome to UpFolio. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

By using UpFolio, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

When you use UpFolio, you may provide us with:

• Account Information: Name, email address, password
• CV Content: Personal information, work experience, education, skills, and any other data contained in your uploaded CV
• Portfolio Content: Text, images, links, and other content you add to your portfolio
• Payment Information: Processed securely by Stripe (we do not store full credit card details)
• Communications: Messages you send to our support team

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: IP address, browser type, device type, operating system
• Cookies and Similar Technologies: To improve your experience and analyze usage patterns
• Analytics Data: Aggregated data about how users interact with the Service

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Process your CV with AI, generate your portfolio, and enable portfolio sharing
• Account Management: Create and manage your account, authenticate your identity
• Payment Processing: Process subscription payments through Stripe
• Service Improvement: Analyze usage patterns to improve features and user experience
• Customer Support: Respond to your inquiries and provide technical assistance
• Communications: Send service-related emails, updates, and marketing communications (with your consent)
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and enforce our Terms and Conditions

4. AI Processing and Data Usage

4.1 How We Process Your CV

When you upload a CV, we use artificial intelligence services (including third-party AI providers) to:

• Extract information from your CV
• Generate portfolio content, descriptions, and formatting
• Suggest improvements to your portfolio presentation

4.2 AI Model Training

We do not use your CV content or personal data to train AI models. Your content is processed solely to generate your portfolio and is not shared with AI providers for model training purposes.

We may use anonymized, aggregated usage data (not containing personal information) to improve the Service, but this data cannot be traced back to individual users.

5. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

5.1 Public Portfolios

Portfolios you create are publicly accessible to anyone with the shareable link. This is the core functionality of UpFolio. You control what information is included in your portfolio.

5.2 Service Providers

We work with trusted third-party service providers who process data on our behalf:

• Stripe: Payment processing and subscription management
• AI Providers: To process your CV and generate portfolio content
• Hosting Services: To store data and deliver the Service
• Analytics Services: To understand usage patterns and improve the Service

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Storage and Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Secure payment processing through PCI-compliant providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention and Deletion

7.1 How Long We Keep Your Data

We retain your personal data for as long as your account is active or as needed to provide the Service. We may also retain certain data for legitimate business purposes, including:

• Legal, accounting, or tax requirements
• Security and fraud prevention
• Resolving disputes and enforcing our agreements

7.2 Deleting Your Account

You may delete your account at any time through your account settings. When you delete your account:

• Your portfolio will be permanently removed from public access
• Your CV and portfolio content will be deleted from our active systems
• Your personal information will be deleted or anonymized

Note: Certain data may be retained in backups for up to 90 days or as required by law for legal, accounting, or security purposes. This data will not be accessible and will be permanently deleted according to our retention schedule.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request that we limit how we use your data
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us at support@upfolio.me. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Analyze how you use the Service
• Improve performance and user experience

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of the Service.

10. Children's Privacy

UpFolio is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@upfolio.me, and we will delete it promptly.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using UpFolio, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.

If we make material changes, we will notify you via email or through a prominent notice on the Service. Your continued use of UpFolio after changes become effective constitutes your acceptance of the updated Privacy Policy.

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on your consent, contractual necessity, legal obligations, and legitimate interests
• Data Protection Officer: You may contact us regarding data protection matters at support@upfolio.me
• Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

Email: support@upfolio.me

We will respond to your inquiry as soon as reasonably possible, typically within 30 days.