Privacy Policy

Last updated: May 31, 2026

This Privacy Policy is provided as a starting template tailored to how Upskiller works today. It is not legal advice. Please have it reviewed by qualified legal counsel before you rely on it.

Upskiller, Inc. (“Upskiller”, “we”, “us”, or “our”) operates the website at upskiller.tech and the related career-development services (the “Service”). This Privacy Policy explains what personal data we collect, how we use and share it, and the rights you have over it. By using the Service, you agree to the practices described here.

Who we are

Upskiller, Inc. is the controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at privacy@upskiller.tech.

Information we collect

Information you provide to us

• Account information — when you sign in with Google, we receive your name, email address, and profile photo from your Google account.
• Profile and career data — your current and desired positions, career goals, professional summary, work experience, education, skills, and certifications.
• CV and uploaded files — résumé/CV files you upload (PDF or DOCX) and the structured data we extract from them.
• LinkedIn data — if you choose to import your LinkedIn profile, the profile, experience, and education data returned for the LinkedIn URL you provide.
• Job postings you submit — the URLs and job-description text you paste in for evaluation.
• Generated content — cover letters, interview questions and answers, preparation plans, and interview-tracker entries created through the Service.
• Payment information — when you subscribe to a paid plan, our payment processor (Stripe) collects your payment details. We do not store full card numbers on our servers.
• Communications — messages you send us, such as support requests.

Information we collect automatically

• Usage data — pages viewed, features used, and actions taken within the Service.
• Device and log data — IP address, browser type, device information, and timestamps.
• Cookies and similar technologies — see our Cookie Policy for details.

Information from third parties

• Google — authentication and basic profile information when you sign in.
• LinkedIn data provider — when you import a LinkedIn profile, public profile data is retrieved on your behalf through a third-party data provider (RapidAPI).
• Stripe — confirmation of payment and subscription status.

How we use your information

We use your personal data to:

• create and manage your account;
• provide the core Service — parse your CV, build your profile, evaluate positions, and generate cover letters, interview questions, and preparation plans;
• process payments and manage subscriptions;
• analyze and improve the Service and develop new features;
• communicate with you about your account, updates, and support requests;
• maintain the security and integrity of the Service; and
• comply with legal obligations and enforce our Terms of Service.

AI processing

Several features rely on artificial intelligence. To provide them, we send relevant content you provide — such as your CV text, profile data, and the job postings you submit — to Google’s Gemini API, which processes the content and returns the generated result (for example, a position evaluation or a cover letter). This processing is carried out by Google as our service provider under its API terms; we do not use your personal data to train our own AI models. AI-generated output may be inaccurate or incomplete and should be reviewed before you rely on it — see our Terms of Service.

Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for.
• Consent — for optional features such as analytics cookies and importing data at your request. You may withdraw consent at any time.
• Legitimate interests — to secure, maintain, and improve the Service, where those interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws, such as tax and accounting requirements.

How we share your information

We do not sell your personal data. We share it only in the following circumstances:

Service providers (subprocessors)

We rely on trusted third parties to operate the Service. They process your data only on our instructions and for the purposes described below.

Other disclosures

• Legal and safety — when required by law, regulation, or legal process, or to protect the rights, property, or safety of Upskiller, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, your data may be transferred subject to this policy.

International data transfers

We are based in the United States, and our service providers may process your data in the United States and other countries whose data-protection laws differ from those in your country. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Data retention

We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account or ask us to erase your data, we delete or anonymize it within a reasonable period, except where we must retain certain information to comply with legal, tax, or accounting obligations or to resolve disputes.

Your privacy rights

Depending on where you live, you may have some or all of the following rights.

EEA / UK residents (GDPR)

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your data (the “right to be forgotten”);
• restrict or object to certain processing;
• receive your data in a portable format (data portability);
• withdraw consent at any time; and
• lodge a complaint with your local data-protection authority.

California residents (CCPA/CPRA)

• know what personal information we collect and how we use it;
• request deletion or correction of your personal information;
• opt out of the “sale” or “sharing” of personal information — note that we do not sell or share your personal information; and
• not be discriminated against for exercising your rights.

To exercise any of these rights, email us at privacy@upskiller.tech. We will respond within the timeframe required by applicable law and may need to verify your identity before acting on your request.

Data security

We protect your data using encryption in transit, access controls, and the security infrastructure provided by Google Firebase. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; however, we work to protect your data and to notify you and the relevant authorities of any breach as required by law.

Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us at privacy@upskiller.tech and we will delete it.

Third-party links

The Service may contain links to third-party websites, including the job postings you evaluate. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you through the Service. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions or requests regarding this Privacy Policy or your personal data, contact us at privacy@upskiller.tech.