Privacy Policy

Uplio ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at uplio.com. If you have questions or concerns about this policy, contact us at support@uplio.com.

We collect the following information: Personal Information (provided via Google OAuth): • Full name • Email address • Profile photo (from Google) Resume Data (uploaded by you): • Resume file (PDF) stored in encrypted cloud storage • Extracted text and parsed data (name, email, skills, experience, education) • AI-generated quality scores and suggestions Payment Information: • Razorpay Order ID and Payment ID • Subscription status and expiry date • We do NOT store card numbers, UPI IDs, or banking credentials — these are handled entirely by Razorpay Usage Data: • Pages visited, features used, and timestamps • Browser type and device information (for technical support purposes)

We use the information we collect to: • Create and manage your account • Provide AI resume scoring, job matching, and career suggestions • Process payments and manage subscriptions • Send important service communications (no marketing without consent) • Improve platform performance and user experience • Comply with legal obligations under Indian law We do not use your data for advertising or sell it to any third party.

Resume Analysis: Your resume text is sent to Groq's API (powered by Meta's LLaMA model) for AI analysis. Groq's privacy policy applies to this processing. We do not use your data to train AI models. Job Listings: Job data is fetched from JSearch (RapidAPI) based on your skills and target role. Your personal data is not shared with job providers. Authentication: We use Google OAuth via Supabase for secure sign-in. Google's privacy policy applies to the OAuth process.

All data is stored on Supabase (PostgreSQL) with: • Row-Level Security (RLS) — you can only access your own data • End-to-end encryption in transit (HTTPS/TLS) • Encrypted storage for resume files • Secure, SOC 2 compliant infrastructure We implement industry-standard security measures. However, no method of internet transmission is 100% secure. In the event of a data breach, we will notify affected users within 72 hours as required by applicable regulations.

All payments are processed by Razorpay, a PCI-DSS compliant payment gateway regulated by the Reserve Bank of India. We never see or store your card details, UPI ID, or net banking credentials. We store only: • Razorpay Order ID • Razorpay Payment ID (for refund processing) • Subscription start date, expiry date, and credit balance For Razorpay's privacy practices, visit: https://razorpay.com/privacy/

We use only essential cookies required for authentication (Supabase session token). We do not use advertising cookies, third-party tracking pixels, or analytics tools that share data with advertisers. You can clear cookies through your browser settings, but doing so will log you out of the platform.

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances: • With service providers listed in Section 4 (Supabase, Groq, Razorpay, Google) solely to operate the platform • If required by Indian law, court order, or government authority • To protect the rights, safety, or property of Uplio, our users, or the public Any third-party service provider we work with is contractually required to keep your data confidential and secure.

We retain your data for as long as your account is active or as needed to provide services. Specifically: • Account and resume data: retained until you delete your account • Payment records: retained for 7 years as required by Indian financial regulations (GST compliance) • Usage logs: retained for 90 days Upon account deletion, all personal data is permanently deleted within 7 business days, except where retention is legally required.

Under applicable Indian law and in line with global privacy best practices, you have the right to: • Access: Request a copy of the data we hold about you • Correction: Request correction of inaccurate data • Deletion: Request deletion of your account and all associated data • Portability: Request your data in a machine-readable format • Objection: Object to certain types of processing To exercise any of these rights, email support@uplio.com. We will respond within 7 business days.

Uplio is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately at support@uplio.com and we will delete the information.

We may update this Privacy Policy from time to time. The updated date will be shown at the top of this page. We will notify users of significant changes via email. Continued use of the platform after changes constitutes acceptance of the revised policy.

For privacy-related queries, data requests, or to report a concern: Email: support@uplio.com Website: https://uplio.com Grievance Officer: Available via email at support@uplio.com Address: Bangalore, Karnataka, India We aim to respond to all privacy queries within 7 business days.