Privacy Policy

• Your name, email, and profile photo (from Google or email sign-in).
• An encrypted copy of your Upwork OAuth tokens (AES-256-GCM).
• Your saved searches and the parameters you configure.
• A snapshot of every job we considered for you and every proposal we drafted, kept indefinitely for audit purposes. We also record when you report a proposal as sent and, separately, when we confirm that against your Upwork account.
• Notification channel targets you add (a Telegram chat id, a Slack webhook URL, or an email address). Withdrawn channels are no longer used for delivery, but their saved destination remains with your account unless you delete the account.
• Stripe customer ID and subscription status. We never see your card.

• Your Google or Upwork passwords.
• Payment-card details (handled entirely by Stripe).
• The contents of your private Upwork messages.

Strictly to operate the Service: poll Upwork's official, read-only API on your behalf, draft proposals via the Anthropic Claude API, confirm proposals you report as sent against your Upwork account, and deliver notifications to the channels you configure. Upwork's public API has no mutation for submitting a proposal, applying to a job, or spending Connects; we never submit anything on your behalf, at any point. We do not sell or share your data with third parties for advertising or analytics beyond what's required to deliver these functions.

• Stripe: billing.
• Anthropic: proposal drafting (Claude API).
• Upwork: job feed, profile, and reconciling proposals you sent.
• Google: sign-in (OAuth only).
• Slack / your email provider: only for channels you enable. Telegram is currently withdrawn and receives no new data.

Email rajib@inicreatechnologies.com to request data export or full account deletion. We delete account data within 30 days of a deletion request.

All Upwork access and refresh tokens are encrypted at rest with application-level AES-256-GCM. The encryption key is stored separately from the database.