Privacy Policy

Effective Date: August 17, 2026

Overview

Uplift is operated by Uplift Careers LLC. This Privacy Policy explains how Uplift collects, uses, stores, and protects personal data when you use the Service.

1. Information We Collect

When you use Uplift, we collect the information needed to provide resume review, cover letter generation, job-search organization, billing, support, and account security features. The exact data we collect depends on how you interact with the Service.

• Account Information: your name, email address, login credentials, verification status, subscription status, and any profile details you provide when registering or updating your account.
• Workspace and Career Data: resumes, cover letters, generated documents, job applications, interview notes, contacts, goals, skills, achievements, education history, and other materials you save in the product.
• Usage and Device Data: log data, browser type, IP-based network information, session details, page interactions, feature usage counts, diagnostics, and first-party content link clicks used to secure and improve the Service.
• Payment and Transaction Data: subscription tier, billing status, Stripe customer or checkout references, and transaction metadata. Payment card details are processed by Stripe and are not stored directly by Uplift.
• Support and Communications Data: messages you send to support, billing questions, account recovery requests, bug reports, and any attachments or screenshots you choose to include.
• Preference Data: product settings such as theme preference and similar choices that help us remember how you want the Service to behave.
• Google Account and Google Docs Import Data: if you use Google sign-in, Google may provide basic account information such as your email address, name, profile image, and account identifier. If you choose Google Docs import, Uplift processes the Google Doc you select, including document text, title, and formatting information needed to convert it into an editable Uplift resume.

Please avoid uploading personal information that is not necessary for your job search. Uplift does not require sensitive personal data, but you may choose to include it if you decide it is relevant to your resume, cover letter, application materials, or job search.

1. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar laws apply, we process personal data under one or more of the following legal bases:

• Performance of a Contract: to create your account, deliver resume and application tools, generate requested content, process payments, and provide customer support.
• Legitimate Interests: to secure the Service, prevent fraud or abuse, troubleshoot issues, measure product performance, and improve features using aggregate or de-identified operational information.
• Consent: where we rely on your consent for a specific activity, including the optional use of redacted resume-parsing samples to improve resume importing and profile autofill, explicit consent to process sensitive personal data that you choose to include in User Content, optional communications, or any future non-essential cookies that legally require consent.
• Legal Obligation: to comply with tax, accounting, fraud prevention, law enforcement, or other legal requirements.

If we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

1. How We Use Your Information

We use personal information to run and improve the Service in ways that are directly related to job-search support.

• Create and maintain user accounts and authenticated sessions.
• Store, organize, and display your resumes, cover letters, applications, contacts, and related workspace data.
• Provide AI-assisted features such as resume reviews, resume tailoring, cover letter generation, and related document workflows.
• Authenticate you through Google sign-in when you choose that option, and import the Google Doc you select when you choose Google Docs import.
• Process subscriptions, prepaid plans, refunds, invoices, and other billing operations through Stripe.
• Respond to support requests, privacy requests, and account or billing issues.
• Protect the Service, enforce our Terms of Service, detect abuse, and maintain system integrity.
• Analyze aggregate usage trends so we can improve product quality, reliability, and user experience.
• If you select the optional improvement checkbox during a file import, retain and analyze a redacted copy of that resume and the profile details extracted from it to improve how Uplift imports resumes and autofills profiles. Google Docs imports are not included in this program.
• Measure whether Uplift-owned videos, posts, and similar content links are being opened, using first-party click counts without attribution cookies, visitor profiles, or third-party advertising tracking.

We do not rent, sell, or share your personal information or workspace content for third-party marketing. We also do not use your uploaded documents for advertising profiling. We use retained resume-parsing samples for improvement only when you provide the separate optional consent described above, and we redact direct personal identifiers before retaining those samples.

We may also create and use aggregated, de-identified information, such as anonymized labor-market, hiring-trend, and job-search analytics, for service improvement and market-insight purposes. Aggregated, de-identified information does not identify you, and we do not attempt to re-identify it. Any sharing of your identifiable profile or User Content with an employer or recruiter would happen only through the strictly opt-in programs described in the Employer and Recruiter Connection Programs section below, and only with your explicit consent.

1. Cookies, Local Storage, and Consent

Uplift uses a limited set of cookies, browser storage, and similar technologies to operate securely and remember your settings.

• Essential Cookies: used for login state, session continuity, fraud prevention, CSRF protection, and core security controls.
• Preference Storage: we may use browser storage such as local storage to remember settings like theme preference and similar product choices.
• Payment and Checkout Technologies: Stripe may use cookies or similar technologies required to complete secure checkout and fraud screening.

Because these technologies are generally necessary to provide the Service, disabling them may prevent parts of Uplift from working properly. You can control cookies through your browser settings and can clear local storage from your browser at any time.

Uplift does not currently rely on third-party advertising cookies. If we later introduce any non-essential cookies or tracking technologies that require consent under applicable law, we will provide an appropriate consent mechanism before enabling them.

1. Google Sign-In and Google Docs Import

Google sign-in is optional. If you choose to sign in with Google, Uplift uses the basic account information Google provides to create or access your Uplift account, keep you signed in, prevent account abuse, and provide account support.

Google Docs import is optional and is requested in context when you choose to import a resume from Google Docs. Uplift requests per-file Google Drive access for this feature, limited to the document you explicitly select through Google Picker. We use the authorization, selected document identifier, and selected document content only to export that document as DOCX and convert it into an editable resume in your Uplift workspace. Uplift does not request broad Google Drive access for this feature, does not read unrelated Google Drive files, does not modify the selected document, and does not store Google OAuth access or refresh tokens for Google Docs import after the import request is completed.

If you save an imported Google Doc as a resume in Uplift, the converted resume is stored and handled as User Content so you can edit, review, tailor, export, and use it in your job-search workflow. Uplift does not sell Google user data, use Google user data for advertising, or use Google user data obtained through Google APIs to create, train, or improve generalized artificial intelligence or machine learning models. Any use or transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can delete imported resumes from your Uplift account where product controls are available, request account deletion or privacy assistance by contacting support, and revoke Uplift's Google access through your Google Account permissions.

1. Browser Extension and Limited Use

The Uplift Assistant browser extension helps you use your Uplift account on job posting and job application pages. The extension can scan the current tab for job posting details, detect resume and cover-letter upload fields, attach selected documents, and autofill application fields from the profile information you save in Uplift.

The extension uses activeTab access when you open or invoke Uplift, plus narrow host permissions for Uplift pages and the supported applicant-tracking-system hosts needed for embedded application forms. These narrow permissions do not give Uplift access to unrelated sites. The extension does not continuously track the sites you visit, submit applications on your behalf, query your browsing history, or keep a browsing-history log.

If you choose Start job search session, your browser asks whether to grant the optional https:/// host permission. If you accept, Uplift can keep its controls available and identify job or application pages locally as you move between HTTPS pages during that browser session. This optional permission is not requested at installation, is not silently restored after a browser restart, and is removed when the job-search session ends. If you decline it, active-tab access and the narrow supported ATS permissions remain available.

Local scanning of a page can identify job details, navigation changes, and resume or cover-letter upload fields without transmitting the page content just because the optional permission is enabled. When you use the extension, Uplift may process the current job page URL, job title, company, location, salary text, job description text, supported applicant-tracking-system slug, detected upload-field labels, profile fields, selected resumes or cover letters, and user-triggered actions such as tailoring a document, generating a cover letter, attaching a document, autofilling a form, or marking an application as applied.

Limited Use: Uplift uses browser extension data only to provide and improve its single purpose: helping job seekers detect job postings, tailor application documents, attach selected resumes or cover letters, and autofill job application forms. We do not sell extension data, do not use extension data for advertising, and do not use website content or browsing activity except as required for the job-search workflow you invoke.

Extension data is transmitted to Uplift over HTTPS only when you sign in or invoke a requested job-search, document-generation, document-attachment, or autofill workflow, or when needed to protect the Service, comply with law, or operate the requested product feature. You can stop extension transmission by signing out or not invoking an extension workflow on a page.

1. User-Submitted Content and AI Features

As part of using the Service, you may upload, submit, or store personal content such as resumes, cover letters, job applications, contacts, interview notes, and other materials ("User Content").

• We collect and store User Content to provide the features you request, including storage, organization, editing, document generation, resume review, and related AI-assisted workflows.
• We use an uploaded resume and its parsed data to provide the resume import and profile autofill you request. We retain a redacted copy to improve resume importing and profile autofill only if you separately select the optional improvement checkbox for that file import. Google user data obtained through Google APIs is not included in this improvement program and remains subject to the Google-specific limits above.
• We do not rent, sell, or share User Content with third parties for marketing or unrelated purposes. Sharing with an employer or recruiter would happen only through the strictly opt-in programs described in the next section, and only with your explicit consent.
• When you actively use AI-powered features, relevant content may be sent to service providers such as OpenAI strictly to fulfill your request and operate that feature.
• All User Content is encrypted in transit and at rest using industry-standard practices.
• You retain full ownership rights to your User Content.
• It is your responsibility to ensure any personal information you submit through the Service is accurate and lawful to share.

We instruct our service providers to handle data only for authorized service purposes and subject to contractual restrictions, security measures, and applicable law. We do not permit third-party AI providers to use your User Content to train their general-purpose models unless we disclose that use and obtain any consent required by applicable law.

1. Employer and Recruiter Connection Programs (Future, Opt-In)

Uplift may in the future offer optional programs that connect job seekers with employers, recruiters, or hiring platforms, such as an opt-in talent marketplace or an opt-in profile-visibility feature. No such program exists today. This section explains, in advance, how any such program would treat your data.

• Strictly opt-in: participation would always require your explicit, informed consent. We would never enroll you automatically, and no profile information or User Content would be shared with an employer or recruiter without your explicit consent.
• What could be shared: only with your consent, and only the categories you approve at enrollment. These are the categories a standard hiring or applicant-tracking workflow handles: your name and contact details, resume and cover letter content, work history, education, skills, certifications, portfolio or professional profile links, and the application materials or application status information you choose to make visible.
• Employer systems: if you direct us to share information with an employer or recruiter, that information may be delivered into the recipient's own hiring tools, such as an applicant tracking system (ATS), where it is processed under the recipient's privacy practices. We would identify the recipient or recipient category before you consent.
• Sensitive data stays yours to control: we would not separately disclose sensitive personal data; the recipient would receive it only if it appears in materials you explicitly choose to share.
• No penalty for opting out: declining to participate, or leaving a program after joining, would never limit your access to Uplift's core job-search features.
• Advance notice: before launching any such program, we would update this Privacy Policy, describe the specific data categories, recipients, retention, and controls involved, and obtain any consent required by applicable law.

Until such a program launches and you choose to enroll, nothing about how your data is handled changes, and no profile information or User Content is shared with employers or recruiters.

1. Sensitive Personal Data

Uplift does not require or recommend including sensitive personal data unless you decide it is relevant to your job search. Sensitive personal data may include information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation.

If you choose to include sensitive personal data in resumes, cover letters, notes, uploaded documents, imported documents, generated documents, or application materials, you consent to Uplift processing that information to provide the features you request. This may include storage, parsing, editing, resume review, document generation, AI-assisted workflows, export, support, security, and account administration.

We do not ask for genetic data or biometric data for uniquely identifying you, and we do not use uploaded photos for face recognition or biometric identification. We also do not use sensitive personal data for advertising profiling or to make hiring, employment eligibility, credit, housing, insurance, or similar legal or similarly significant decisions about you.

You can reduce this processing by not including sensitive personal data, by editing or deleting content that contains it, or by contacting support for account deletion or privacy assistance. Some features may not work as intended if the content you provide is incomplete or removed.

1. Third-Party Processors and International Transfers

To provide and operate Uplift, we use trusted processors and infrastructure providers, including:

• Stripe for subscription billing, checkout, and payment operations.
• Google for Google sign-in, OAuth authentication flows, and optional Google Docs import when enabled.
• Cloudflare for R2 object storage and related delivery, DNS, or security services when configured.
• Microsoft Azure for Azure Communication Services transactional email delivery.
• OpenAI for AI-powered product features that you actively request, such as resume review and document generation.

Some of these providers may process data in the United States or in other countries where they operate. When personal data is transferred across borders, we rely on appropriate safeguards such as data processing terms, contractual commitments, access controls, and other measures designed to protect personal data consistent with applicable law.

These providers maintain their own privacy and security policies. We expect them to process personal data only as needed to deliver services to Uplift.

1. Data Retention

We retain personal information only for as long as reasonably necessary to provide the Service, satisfy legal obligations, resolve disputes, and enforce our agreements. Our general retention guidelines are:

• Active account and workspace data: retained while your account remains active so we can provide the Service.
• Deleted account data: generally removed from active systems within 30 days after a completed deletion request, subject to limited exceptions below.
• Backups and disaster-recovery copies: may remain in rotating backups for up to 90 days before being overwritten.
• Billing, tax, and transaction records: may be retained for up to 7 years to comply with accounting, tax, and legal obligations.
• Support communications: generally retained for up to 24 months after the last support interaction so we can follow up on recurring issues and maintain service quality.
• Security, fraud-prevention, and operational logs: generally retained for up to 90 days unless a longer period is needed for incident response, legal obligations, or dispute resolution.
• Redacted resume-parsing improvement samples: retained only after the separate optional opt-in, for up to 365 days by default. You can delete all retained copies immediately by withdrawing consent in Account settings, and they are also deleted with verified account deletion requests.
• Resume-improvement consent history: a minimal record of the notice version and grant or withdrawal timestamps may be retained for up to 365 days for consent accountability. This record does not contain resume content or extracted profile details and is deleted with a verified account deletion request.

If we must retain certain information for legal, security, fraud-prevention, or contractual reasons, we may keep that limited information for longer than the periods above.

1. Your Choices and Account Controls

You have practical controls over much of the information in your Uplift account.

• You can access and update account information from within the product where those controls are available.
• You can edit or delete many resumes, cover letters, applications, contacts, and other saved workspace items directly in your account.
• You can revoke Uplift's Google access through your Google Account permissions. Revoking access stops future Google imports, but it does not automatically delete resumes or workspace content already imported into Uplift.
• You can cancel a paid subscription from your account settings, subject to the billing terms that apply to your plan.
• Personalized job match emails are disabled by default. You can enable or disable them in account settings, and every job match email includes an unsubscribe link that turns off those notifications without affecting saved matches or required account messages.
• You can withdraw resume-improvement consent and delete all retained improvement copies directly in Account settings. Future file imports remain opted out unless you actively select the optional checkbox again. Withdrawing consent does not affect processing that was lawful before withdrawal.
• You can request a copy of your account data, request deletion, request correction, or ask for other privacy-related assistance by contacting support@upliftcareers.ai. These requests are handled manually after we verify your identity and review any legal exceptions that apply.
• You can manage cookies and local storage through your browser settings, although doing so may affect the functionality of the Service.
• GDPR and UK GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy rights, you may have the following rights, subject to legal limitations:

• Right of Access: request a copy of the personal data we hold about you.
• Right to Rectification: request correction of inaccurate or incomplete personal data.
• Right to Erasure: ask us to delete personal data when retention is no longer necessary or otherwise required by law.
• Right to Restrict Processing: ask us to limit certain processing in specific circumstances.
• Right to Data Portability: request a portable copy of data you provided to us where that right applies.
• Right to Object: object to certain processing based on our legitimate interests.
• Right to Withdraw Consent: withdraw consent where we rely on consent as the legal basis.

We currently fulfill these rights through a mix of in-product controls and verified support handling. Data access and portability requests are prepared internally after verification. Some requests, including full deletion, restriction, objection, or data that must be retained for legal reasons, may require manual review rather than an automated in-product workflow.

You also have the right to lodge a complaint with your local supervisory authority if you believe our processing violates applicable law. We encourage you to contact us first so we can try to resolve your concern directly.

1. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to:

• Know: request details about the categories of personal information we collect, the sources of that information, the purposes for collection, and the categories of third parties to whom we disclose it.
• Access: request a copy of specific pieces of personal information we have collected about you, subject to applicable exceptions.
• Delete: request deletion of personal information we collected from you, subject to legal and operational exceptions.
• Correct: request correction of inaccurate personal information.
• Opt Out of Sale or Sharing: direct a business not to sell or share personal information for cross-context behavioral advertising.
• Non-Discrimination: receive equal service and pricing even if you exercise your privacy rights, except as permitted by law.

Uplift does not currently sell personal information or share personal information for cross-context behavioral advertising as those terms are used under California law. If that changes, we will provide an appropriate method to exercise opt-out rights. Disclosures made at your direction with your explicit consent, such as the future opt-in employer-connection programs described above, are not a sale or sharing for cross-context behavioral advertising under California law. California residents may also use an authorized agent to submit a request on their behalf, subject to verification requirements.

California privacy requests may be submitted through support@upliftcareers.ai. We may ask for information needed to verify identity, confirm residency, or confirm an agent's authority before acting on a request.

1. Data Security

We take the security of personal information seriously and maintain administrative, technical, and organizational safeguards designed to protect the data we process.

• Personal data and User Content are encrypted in transit and at rest using industry-standard encryption controls.
• Data transmitted between your device and our systems is protected using HTTPS/TLS.
• Access to production systems and data is limited to authorized personnel and service providers with a legitimate business need.
• We use monitoring, logging, and operational safeguards to help detect, investigate, and respond to misuse or security incidents.

No method of storage or transmission is completely secure. We therefore cannot guarantee absolute security, but we work to maintain safeguards appropriate to the nature of the data we handle.

1. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make material changes, we will update the Effective Date and may notify you through the Service or via email.

Your continued use of the Service after any updates constitutes your acceptance of the revised Privacy Policy.

1. Contact Us and Privacy Contact

If you have questions about this Privacy Policy, want to exercise a privacy right, or need to contact our privacy contact, reach out to us using the information below.

For access requests, deletion requests, or other privacy rights requests, we may ask you to verify control of the relevant account before we fulfill the request. Requests that cannot be completed directly in the product are handled manually by support.

If you need help with a privacy request or want to understand how this policy works alongside the product rules, visit our Contact page (https://upliftcareers.ai/contact) or review our Terms of Service (https://upliftcareers.ai/terms).

Uplift Careers LLC Privacy Contact: support@upliftcareers.ai

Last Updated: August 17, 2026