Upply ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this privacy policy carefully.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, password (encrypted)
- Profile Information: Phone number, address, LinkedIn profile, website, employment history, education, skills
- Demographic Information: Optional information such as ethnicity, veteran status, disability status (only if voluntarily provided for job applications)
- Payment Information: Processed securely through Stripe; we do not store credit card details
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on pages
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, referring URLs
- Cookies: Session cookies and preference cookies
1.3 Information from Automation Features
- Form Structure Data: When you use our automation features, we read the structure of job application forms to identify fields
- Session Tokens: To maintain secure communication with our servers
- We do NOT collect browsing history or activity outside of workflow execution
2. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Auto-fill job applications with your saved information
- Process transactions and send related information
- Send administrative information, updates, and security alerts
- Respond to customer service requests
- Improve our services and develop new features
- Detect and prevent fraud or abuse
- Comply with legal obligations
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:
- Service Providers: With trusted third parties who assist in operating our services (e.g., AWS for hosting, Stripe for payments)
- Legal Requirements: If required by law or in response to valid legal requests
- Protection of Rights: To protect our rights, privacy, safety, or property
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share information
4. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Secure data centers with physical security controls
- Regular backups and disaster recovery procedures
5. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required for legal obligations.
6. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to certain processing of your information
- Withdrawal of Consent: Withdraw previously given consent
6.1 California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (which we do not do).
6.2 European Privacy Rights (GDPR)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local supervisory authority.
7. Third-Party Services
Our services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We use the following third-party services:
- Stripe: Payment processing (Privacy Policy)
- Amazon Web Services: Cloud hosting (Privacy Policy)
- Google OAuth: Authentication (Privacy Policy)
8. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We ensure appropriate safeguards are in place for such transfers.
10. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we will provide additional notice via email or through our services.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
By using Upply, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.