Privacy Policy

Effective Date: January 24, 2026
Last Updated: July 19, 2026

1. Introduction

This Privacy Policy ("Policy") describes how Upleva ("Company," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website at upleva.ai, our applications, and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Policy. If you do not agree with our policies and practices, please do not use the Service.

This Policy should be read in conjunction with our Terms of Service and Cancellation and Refund Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an Account: Name, email address, password, and profile information
• Subscribe to a Plan: Billing address, payment method details (processed securely by our payment processor)
• Upload Documents: Resumes, CVs, and other professional documents you submit for analysis or website creation
• Take a Mock Interview: Microphone audio you stream during a live interview, which we process in real time to run the conversation and produce your transcript, scores, and report. We do not store audio or video recordings of your interviews, and your camera preview never leaves your device
• Apply for a Role: Your name, email address, phone number, and the CV you attach when applying through our careers page. Applications are used only for recruitment; email careers@upleva.ai to have yours removed
• Create Website Content: Professional information, work history, skills, education, certifications, and other content for your portfolio website
• Contact Support: Communications, inquiries, and feedback you send to us
• Participate in Surveys: Responses to optional surveys or questionnaires

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device Information: Device type, operating system, browser type and version, unique device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, and navigation paths
• Log Data: IP address, access times, referring URLs, error logs
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking: Information collected through cookies, pixels, and similar technologies (see Section 9)

2.3 Information from Third Parties

We may receive information from:

• Authentication Provider: Sign-in and verification events from our managed authentication service, which handles email-and-password accounts
• Payment Processors: Transaction confirmation and fraud prevention data
• Analytics Services: Aggregated usage and performance data

2.4 Sensitive Information

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving the Service

• Create and manage your account
• Process your CV/resume and generate portfolio websites
• Provide AI-powered CV analysis, ATS scoring, and career insights
• Host and maintain your published websites
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Improve, personalize, and optimize the Service
• Develop new features and services

3.2 Communications

• Send transactional emails (account verification, password reset, payment confirmations)
• Notify you of service updates, security alerts, and policy changes
• Send promotional communications (with your consent, where required)
• Respond to your comments, questions, and requests

3.3 Analytics and Research

• Analyze usage patterns and trends to improve the Service
• Conduct research and development
• Generate aggregated, anonymized insights
• Train and improve our AI models (using anonymized data)

3.4 Legal and Security

• Comply with legal obligations and respond to lawful requests
• Enforce our Terms of Service and other policies
• Detect, prevent, and address fraud, abuse, and security issues
• Protect the rights, property, and safety of Upleva and our users

4. How We Share Your Information

We may share your information with:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud Infrastructure: Trusted cloud providers for hosting and encrypted data storage
• Payment Processing: Dodo Payments for secure subscription billing
• Email Services: Transactional and marketing email providers
• Analytics: Usage analytics and performance monitoring tools
• Customer Support: Help desk and support ticket systems

These providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal process
• Government or regulatory requests
• Law enforcement investigations
• To protect our legal rights or defend against legal claims

4.3 Business Transfers

If Upleva is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

4.5 Published Websites

When you publish a portfolio website through our Service, the content you include becomes publicly accessible. You control what information appears on your published website.

5. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal and regulatory obligations
• Resolve disputes and enforce our agreements
• Support business operations and improve our services

5.1 Active Accounts

While your subscription is active, we retain all account data, uploaded documents, and generated content necessary to provide the Service.

5.2 After Subscription Ends

As outlined in our Cancellation and Refund Policy:

• Websites and Insight Reports: Your published websites and CV insight reports are permanently deleted when your subscription ends (when a cancellation takes effect or the subscription expires)
• Account and Documents: Your account and uploaded documents are retained so you can subscribe again later; you may request deletion at any time (see Section 8)
• Interview Data: Live interview session data expires within 7 days; completed interview reports remain available while your account is active. Interview audio and video are never stored

5.3 Anonymized Data

We may retain anonymized, aggregated data indefinitely for analytics, research, and service improvement purposes. This data cannot be used to identify you.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls and authentication requirements
• Infrastructure Security: Hosted on secure cloud infrastructure with regular security audits
• Monitoring: Continuous monitoring for security threats and vulnerabilities
• Employee Training: Regular security awareness training for our team

7. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country.

When we transfer data internationally, we implement appropriate safeguards:

• Standard Contractual Clauses approved by relevant authorities
• Data processing agreements with service providers
• Compliance with applicable data protection frameworks

By using the Service, you consent to the transfer of your information to countries outside your country of residence.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal of Consent: Withdraw consent where processing is based on consent

8.2 European Economic Area (EEA) Residents

If you are in the EEA, you have rights under the General Data Protection Regulation (GDPR):

• All rights listed above
• Right to lodge a complaint with your local data protection authority
• Right to know the legal basis for processing your data

Legal Bases for Processing: We process your data based on: (a) your consent; (b) performance of our contract with you; (c) our legitimate interests; or (d) compliance with legal obligations.

8.3 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information (with exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at:

We may need to verify your identity before processing your request. In some cases, we may be unable to fulfill your request due to legal obligations or legitimate business purposes.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information and improve the Service.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security, preferences)
• Analytics Cookies: Help us understand how visitors use the Service. We use Google Analytics, PostHog, and Microsoft Clarity for this purpose.
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to measure our advertising and deliver relevant advertisements, where your consent covers them (see Section 9.4)

9.2 Managing Cookies

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie consent banner (shown where consent is required)
• The "Cookie settings" link in the footer of every page
• Opt-out links provided by analytics providers

Note: Disabling certain cookies may affect the functionality of the Service.

9.3 Do Not Track and Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a decline and do not load analytics or advertising technologies unless you have explicitly accepted. We do not respond to the older "Do Not Track" feature, as there is no industry standard for handling those requests.

9.4 Advertising Pixels and Regional Consent

We use the Meta (Facebook) pixel and Google advertising features to measure how well our advertising performs and to attribute sign-ups and purchases to the ads that led to them. These technologies may set advertising cookies and share limited event data with Meta and Google, such as page views, checkout starts, completed purchases (including the purchase amount), and completed registrations. We never share the content of your CVs, interview transcripts, or reports with advertising partners.

How advertising consent works depends on your region:

• EEA, UK, and similar consent territories: Advertising cookies and pixels stay off until you explicitly accept cookies through our consent banner
• Everywhere else: Advertising measurement is enabled by default, and you can opt out at any time using the "Cookie settings" link in the footer of every page
• Global Privacy Control: A GPC signal is treated as a decline for advertising technologies unless you have explicitly accepted (see Section 9.3)

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us at legal@upleva.ai.

11. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you via email or through the Service at least 14 days before changes take effect
• We may ask for your consent to material changes where required by law

Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Related Policies

This Privacy Policy should be read in conjunction with:

• Terms of Service: Your rights and responsibilities when using Upleva
• Cancellation and Refund Policy: Data retention after subscription ends