1. Overview
ProfileForge ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, where it is stored, and your rights regarding your data. By using ProfileForge, you agree to the practices described here.
2. Information We Collect
Information you provide: When you use ProfileForge, you may enter personal and professional details such as your name, contact information, job title, industry, skills, career achievements, target role, resume content, LinkedIn profile information, education, certifications, projects, job descriptions, and other career-related information. This information is used to maintain your Career Profile and generate LinkedIn profile content, resumes, optimizations, job-tailored content, conversions, audits, and messages.
Uploaded files and imports: If you upload a resume, upload LinkedIn screenshots, or paste LinkedIn profile text, it is processed to extract candidate Career Profile information for your review. We do not save extracted import data into your Career Profile until you confirm it, and uploaded resume files/screenshots are treated as temporary source material where technically practical.
Saved generated work: If you choose to save a generated profile or resume, we store the generated text, section details, title, document type, target role, job label, timestamps, and account identifier so you can access that saved work later. Pro users may save up to 5 generated resumes at a time.
Account information: If you create an account, Supabase stores your first name, last name, email address, encrypted password credentials, authentication session data, subscription/access status, and usage records so you can log in and use account-based features.
Avatar/profile photo: If you upload an avatar or profile photo, it is stored in a private Supabase Storage bucket under your account folder. We store the private avatar file path in your account metadata. The image is displayed in the app using short-lived signed links and is not intended to be publicly accessible.
Feedback submissions: If you submit feedback via the feedback button, your message may be sent to our email and stored so we can review and respond to it.
Usage and attribution data: We use Google Analytics to collect product usage information such as pages visited, feature interactions, time spent, approximate region, browser/device type, and traffic source. For account users, we may also store privacy-safe signup attribution such as country code, referral host, sanitized referral URL/path, landing page, and campaign tags like utm_source, utm_medium, and utm_campaign so we can understand which marketing channels are working. We do not store raw IP addresses or raw external referrer query strings for this attribution, and we do not send names, email addresses, resume text, job description text, generated profile text, saved profile content, or avatar images to Google Analytics.
Local storage: We may use your browser's localStorage to remember product state and usage information. Supabase may also store your login session in your browser so you stay signed in.
3. How We Use Your Information
We use the information you provide to maintain your Career Profile, process imports for review, generate LinkedIn profile content, resumes, career documents, job-tailored content, conversions, audits, and messages using Google Gemini AI models, manage account access including optional Google sign-in, display your account identity/avatar, enforce free and Pro usage limits, provide the saved profile/resume library, process subscription access, understand signup source and country-level marketing performance, respond to feedback, troubleshoot the Service, and improve ProfileForge. We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Third Party Services
Google Gemini AI: Your profile details and prompts may be sent to Google's Gemini API to generate content using Gemini models, including Gemini 2.5 Flash and Gemini 3.5 Flash where available. Please review Google's Privacy Policy for information on how they handle data.
Google Analytics: We use Google Analytics to understand product usage. We configure our analytics helper not to send names, emails, resume content, profile text, saved profiles, or avatar images. You can opt out using the Google Analytics Opt-out Browser Add-on.
Supabase: Supabase provides authentication and stores account/session records for logged-in users, Pro access records, usage records, Career Profile records, import review records, saved generated profiles/resumes, and private avatar files/paths.
Vercel: ProfileForge is hosted on Vercel. Vercel may log standard server access data such as IP addresses, request timestamps, and request metadata as part of normal hosting operations.
Polar: If you upgrade to a paid plan, payment processing is handled by Polar.sh. We do not store your card or payment details.
5. Cookies and Tracking
ProfileForge uses minimal cookies and browser storage. Google Analytics uses cookies or similar technologies to understand anonymised or aggregated usage patterns. We do not use advertising cookies, retargeting pixels, or sell tracking data.
6. Data Retention
We do not store uploaded resume files or LinkedIn screenshots as files by default. Import candidates may be retained as review records until confirmed, failed, deleted, or no longer needed. Generated profile and resume content is not stored unless you choose to save it. Saved generated profiles and resumes are retained in your account until you delete them or request deletion; Pro users may save up to 5 resumes at a time. Avatar/profile photos are retained until replaced, removed, or deleted on request. Account, Career Profile, subscription, and usage records are retained as needed to operate the Service, prevent abuse, and comply with legal or accounting requirements. Feedback emails are retained in our inbox and deleted periodically.
7. Data Security
We use Supabase authentication, database access controls, and private storage policies to protect account-based data. Avatar files are stored in a private bucket and are intended to be accessible only to the account owner through signed links. No online service can guarantee absolute security, but we take reasonable steps to protect user data.
8. Your Rights (GDPR)
If you are located in the European Union or another region with privacy rights, you may have the right to access, correct, export, restrict, or delete personal data we hold about you. You can delete saved profiles and resumes from the saved work library where available. To request deletion of account data, saved work, avatar/photo, or feedback you submitted, contact us at hasaanzia786@gmail.com.
9. Children's Privacy
ProfileForge is not intended for users under the age of 16. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes are posted constitutes acceptance.
11. Contact
For any privacy-related questions or requests, contact us at hasaanzia786@gmail.com.
