1. Overview
ProfileForge ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, where it is stored, and your rights regarding your data. By using ProfileForge, you agree to the practices described here.
2. Information We Collect
Information you provide: When you use ProfileForge, you may enter personal and professional details such as your name, contact information, job title, industry, skills, career achievements, target role, resume content, LinkedIn profile information, education, certifications, projects, job descriptions, interview answers, and other career-related information. This information is used to maintain your Career Profile and generate LinkedIn profile content, resumes, ATS checks and repairs, optimizations, job-tailored content, conversions, audits, messages, and Interview Preparation questions and readiness feedback.
Uploaded files and imports: If you upload a resume, upload LinkedIn screenshots, or paste LinkedIn profile text, it is processed to extract candidate Career Profile information for your review. We do not save extracted import data into your Career Profile until you confirm it, and uploaded resume files/screenshots are treated as temporary source material where technically practical.
Saved generated work: If you choose to save a job, interview report, generated profile, or resume, we store the relevant content, title, document type, target role, timestamps, and account identifier so you can access that Saved Work later. Pro users may save up to 5 jobs, interview reports, LinkedIn profiles, and resumes in each category.
Account information: If you create an account, Supabase stores your first name, last name, email address, encrypted password credentials, authentication session data, subscription/access status, and usage records so you can log in and use account-based features.
Avatar/profile photo: If you upload an avatar or profile photo, it is stored in a private Supabase Storage bucket under your account folder. We store the private avatar file path in your account metadata. The image is displayed in the app using short-lived signed links and is not intended to be publicly accessible.
Feedback submissions: If you submit feedback via the feedback button, your message may be sent to our email and stored so we can review and respond to it.
Usage and attribution data: We use Google Analytics to collect product usage information such as pages visited, feature interactions, time spent, approximate region, browser/device type, and traffic source. For account users, we may also store privacy-safe signup attribution such as country code, referral host, sanitized referral URL/path, landing page, and campaign tags like utm_source, utm_medium, and utm_campaign so we can understand which marketing channels are working. We do not store raw IP addresses or raw external referrer query strings for this attribution, and we do not send names, email addresses, resume text, job description text, generated profile text, Saved Work content, or avatar images to Google Analytics.
Local storage: We may use your browser's localStorage to remember product state and usage information. Supabase may also store your login session in your browser so you stay signed in.
3. How We Use Your Information
We use the information you provide to maintain your Career Profile, process imports for review, generate LinkedIn profile content, resumes, ATS checks and repairs, career documents, job-tailored content, conversions, audits, messages, and Interview Preparation questions and readiness feedback using Google Gemini AI; manage account access including optional Google sign-in; display your account identity/avatar; enforce free and Pro usage limits; provide Saved Work; process subscription access; understand signup source and country-level marketing performance; respond to feedback; troubleshoot the Service; and improve ProfileForge. We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Third Party Services
Google Gemini AI: Your profile details, prompts, and supported interview audio may be sent to Google's Gemini API for generation or transcription using Google Gemini AI. Voice recordings are processed for transcription and are not retained as Saved Work. Please review Google's Privacy Policy for information on how they handle data.
Google Analytics: We use Google Analytics to understand product usage. We configure our analytics helper not to send names, emails, resume content, profile text, Saved Work content, or avatar images. You can opt out using the Google Analytics Opt-out Browser Add-on.
Supabase: Supabase provides authentication and stores account/session records for logged-in users, Pro access records, usage records, Career Profile records, import review records, Saved Work for jobs, interview reports, LinkedIn profiles, and resumes, and private avatar files/paths.
Vercel: ProfileForge is hosted on Vercel. Vercel may log standard server access data such as IP addresses, request timestamps, and request metadata as part of normal hosting operations.
Polar: If you upgrade to a paid plan, payment processing is handled by Polar.sh. We do not store your card or payment details.
5. Cookies and Tracking
ProfileForge uses minimal cookies and browser storage. Google Analytics uses cookies or similar technologies to understand anonymised or aggregated usage patterns. We do not use advertising cookies, retargeting pixels, or sell tracking data.
6. Data Retention
We do not store uploaded resume files or LinkedIn screenshots as files by default. Import candidates may be retained as review records until confirmed, failed, deleted, or no longer needed. Generated profile and resume content is not stored unless you choose to save it. Saved Work items such as jobs, interview reports, LinkedIn profiles, and resumes are retained in your account until you delete them or request deletion; Pro users may save up to 5 items in each category at a time. Avatar/profile photos are retained until replaced, removed, or deleted on request. Account, Career Profile, subscription, and usage records are retained as needed to operate the Service, prevent abuse, and comply with legal or accounting requirements. Feedback emails are retained in our inbox and deleted periodically.
7. Data Security
We use Supabase authentication, database access controls, and private storage policies to protect account-based data. Avatar files are stored in a private bucket and are intended to be accessible only to the account owner through signed links. No online service can guarantee absolute security, but we take reasonable steps to protect user data.
8. Your Rights (GDPR)
If you are located in the European Union or another region with privacy rights, you may have the right to access, correct, export, restrict, or delete personal data we hold about you. You can open, edit, and delete Saved Work items from the saved work library where available. Signed-in users can request deletion from Account menu โ Request account deletion; users who cannot sign in can use the Delete account support page.
9. Children's Privacy
ProfileForge is not intended for users under the age of 16. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes are posted constitutes acceptance.
11. Contact
For any privacy-related questions or requests, contact us at Support page.
