Privacy Policy

1. Information We Collect

When you create an account we collect your email address and any profile information you choose to provide (name, bio, work experience, skills, projects, education). If you upload a document, we extract text from it to populate your portfolio profile. We do not store the original PDF file beyond the extraction process.

IP addresses. We automatically collect your IP address in the following situations:

• Portfolio visitors — when you visit a public portfolio page we record your IP address and browser user-agent to count unique views and detect abuse.
• AI chat — your IP address is used to enforce per-user rate limits that prevent abuse of the chat feature. It is stored transiently as part of the rate-limit counter and is not linked to your identity.
• Contact form — when you submit a contact message your IP address is stored alongside your message to help identify spam and abuse.

2. How We Use Your Information

Your profile data is used solely to power the AI chat agent on your public portfolio page. We use your email address to send account-related communications (verification, billing receipts, critical security notices). We do not sell your data to third parties.

3. Data Storage, Retention, and Security

All data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure. Connections are encrypted in transit via TLS. Row-level security policies ensure each user can only access their own data. We recommend using a strong, unique password for your account.

Rate-limit counters that contain IP data reset within minutes to hours depending on the limit window. Profile and account data is retained for as long as your account is active and deleted within 30 days of account deletion.

4. Third-Party Services

We use the following third-party services to operate the platform: Supabase (authentication and database), Vercel (hosting), and AI inference providers for chat functionality. Each provider has its own privacy policy and data processing terms. Visitor messages sent through your portfolio chat are processed by our AI provider to generate responses and are not stored permanently.

5. Cookies

We use strictly necessary cookies to maintain your authenticated session. We do not use advertising or tracking cookies. See our Cookie Policy for details.

6. Your Rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account at any time. Account deletion removes all profile data, knowledge base entries, and analytics records associated with your account within 30 days.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

8. Contact

Questions about this policy? Contact us through the platform.