Privacy Policy

1. Information We Collect

• Account Email: We collect your email address when you create an account to facilitate secure login via magic links and send application reminder notifications.
• Job Descriptions: The raw job description text (`raw_jd`) you paste is processed to extract structured fields (e.g., company, role, requirements).
• Resumes & Extracted Text: If you choose to upload a resume, the file is securely stored in Supabase Storage, and the extracted text is processed to generate AI fit scores.
• AI Fit Scores: Generated metrics (role fit, culture fit, matching strengths and gaps) are saved alongside your application records.

2. Local Mode Data & Deletion

If you use Uppend without an account ("Local Mode"), your application data and AI scores are stored exclusively in your browser's IndexedDB. This data remains on your device. You can permanently delete all local-mode data at any time by using the Clear Local Data control located in the Settings page. This action is irreversible and wipes your IndexedDB storage entirely.

3. Third-Party Processors

Uppend relies on the following third-party services to function:

• AI Processors (Google and Groq): To generate structured data and fit scores, we send the job description text you provide and the text extracted from your resume to an AI provider. We do not send your account ID or login email, but your resume text may contain your name and contact details. The shared AI pool uses Google Gemini and may use Groq when Gemini is unavailable. If you use the 'Bring Your Own Key' (BYOK) feature, your text goes only to the provider(s) whose key(s) you have saved. Each provider handles this data under its own terms, including how long it keeps it and whether it uses it to improve its products (see the Gemini API terms and the Groq data documentation). Because the shared AI pool currently uses Google's free (unpaid) Gemini API tier, Google may use the job description and resume text sent through it to improve its products and machine learning technologies, and human reviewers may read it. If you use your own API key (BYOK), your text is handled under the terms that apply to your own key's plan.
• Supabase: Our backend provider. For authenticated users, Supabase handles database storage, authentication, and secure file hosting for resumes (Supabase Storage).
• Gmail SMTP: Used to deliver authentication magic links and optional follow-up reminder emails regarding your applications.

4. Essential Cookies & Storage

Uppend does not use tracking, marketing, or analytics cookies. We use essential cookies required for Supabase authentication to maintain your secure session. We also use your browser's local storage to remember non-sensitive UI preferences, such as your dark mode theme preference and cookie banner dismissal state.