Privacy Policy

This policy explains how upwin, an independent product operated by Ayoub Fedil, an individual developer based in Morocco, handles personal data in the upwin website, web application, and Chrome extension.

For privacy questions, contact support@upwin.app.

We collect account identity from Clerk, such as your user identifier, name, email address, sign-in state, and account timestamps. Clerk is used for authentication only.

Creem processes payment and billing details as Merchant of Record. upwin receives only the Creem customer id, subscription id, subscription status, plan, billing interval, and billing period dates needed to operate paid access. We do not receive or store card data.

When you choose to use product features, we collect the content needed for them: profile snapshots, imported document text and extracted freelancer context, goals and preferences, project snapshots, generated analyses, scores, suggestions, proposal drafts, screening answers, copied or dismissed states, and proposal outcomes you record.

We collect basic technical and security data needed to deliver requests, diagnose failures, and protect the service, such as timestamps, request identifiers, and server logs.

Most product data comes directly from you. The extension reads supported content from the current page only when you start a capture. Clerk supplies authentication data. Creem supplies the limited subscription and billing state listed above.

We do not buy personal data, crawl other freelancers, or collect data from Upwork internal APIs.

We use personal data to create and secure your account, provide profile and project analysis, generate editable drafts, preserve the history and settings you ask the product to keep, manage subscriptions, respond to support requests, prevent abuse, and meet legal obligations.

Where the GDPR applies, we rely on performance of our contract to provide requested features, legitimate interests in security and product reliability, consent where the law requires it, and legal obligations for records we must retain.

upwin sends the text needed for an analysis or draft to llmgateway.io. This can include profile snapshots, imported document text, freelancer context, project snapshots, and your instructions. llmgateway.io routes the request to an underlying AI model provider, whose model processes that content to return structured criteria, explanations, or draft text.

The exact model can vary by product capability and service configuration. upwin records model and provider information with supported analyses so results remain traceable. We do not send raw HTML to an AI model.

Clerk provides authentication only. Creem provides checkout, subscription management, payment processing, tax calculation, invoices, and refunds as Merchant of Record. Hosting, database, email, security, and error-monitoring providers may process limited data on our instructions when those services are configured.

We do not sell personal data. We may disclose data when required by law, to protect users or the service, or as part of a business transaction subject to appropriate confidentiality and notice.

We keep account and product data while your account is active and for as long as needed to provide history, meet legal obligations, resolve disputes, and secure the service. Different records may require different retention periods.

The shipped "Delete and start from scratch" control deletes your reusable freelancer context. It does not delete goals, profile snapshots, past analyses, or proposal history. Importing another document or replacing details overwrites that context and marks it unconfirmed until you review it again.

For access to or deletion of other account data, contact support@upwin.app. We may need to verify your identity and may retain records that law requires us to keep.

The website stores the upwin_locale preference so it can return you to your chosen language. Clerk uses session cookies and related browser storage to keep you signed in and protect authentication.

We do not use the Chrome extension to read your Upwork cookies.

The activeTab permission gives temporary access to the tab where you deliberately invoke the extension. A supported capture reads the already-rendered page once and converts it into typed text data before sending it to upwin.

Our service providers may process data in countries other than yours. Where data-protection law requires a transfer mechanism, we use contractual or other legally recognized safeguards supplied for that transfer.

We use technical and organizational measures intended to protect personal data, including authenticated access and user-scoped application records. No internet service can guarantee absolute security.

Report a suspected account or data incident to support@upwin.app.

Depending on where you live, you may have rights to be informed, access personal data, correct it, request deletion, restrict or object to processing, receive portable data, withdraw consent, and complain to a data-protection authority. You may also have rights concerning decisions made solely by automated means.

Send a request to support@upwin.app. We may ask for information needed to confirm your identity. GDPR requests are answered without undue delay and normally within one month, subject to lawful extensions or exceptions.

upwin is a professional tool and is not directed to children. Do not create an account if you cannot lawfully consent to this processing or enter the service contract where you live.

We will post policy changes here and update the date shown on this page. We will provide additional notice when required by law or when a change materially affects how we use personal data.

The privacy contact is support@upwin.app.