1. Introduction
Upskill AI Inc. ("Upskill," "we," "us," or "our") operates the Upskill web application at tryupskill.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect information provided through your authentication method, which may include:
- Name and email address
- Profile photo (if provided via Google or GitHub sign-in)
- Authentication identifiers
2.2 User-Generated Content
We collect information you actively provide while using the Service, including:
- Skills you claim and track
- Quiz responses and learning progress
- Target job selections and preferences
- Interview practice sessions and transcripts
- Profile information and preferences you configure
2.3 Audio and Voice Data
When you use the interview practice feature, we may collect and process the following audio-related data:
- Voice recordings — Audio captured through your device's microphone during interview practice sessions
- Transcripts — Text generated from your voice recordings via speech-to-text processing provided by ElevenLabs. Your audio is transmitted to ElevenLabs' servers for this purpose
- AI-generated audio — Synthesized speech generated by our text-to-speech provider for the interviewer's voice
Voice recordings are processed in real time to generate transcripts and are not permanently stored on our servers after the session ends. Transcripts are retained as part of your interview practice history and are subject to the data retention policy described in Section 7 below. You may delete your interview history at any time through your account settings.
2.4 Automatically Collected Data
When you access the Service, we may automatically collect:
- IP address and approximate location
- Browser type and version
- Device information
- Pages visited and features used
- Date and time of access
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Personalize your learning experience and skill recommendations
- Process your interview practice sessions and generate feedback
- Parse job descriptions to match skills
- Communicate with you about the Service
- Monitor usage patterns and improve performance
- Detect and prevent fraud or abuse
3.1 AI and Model Training
We do not use your personal content — including interview transcripts, voice recordings, or profile data — to train artificial intelligence or machine learning models.
When we send your data to third-party AI providers (such as OpenAI, Anthropic, or ElevenLabs), it is transmitted solely for the purpose of providing the Service to you in real time (e.g., generating interview feedback or synthesizing speech). We use API configurations that opt out of data training where such options are available. Please refer to each provider's privacy policy for details on how they handle data received through their APIs:
4. Third-Party Services
We use the following third-party services to operate the Service. For each provider, we list the specific categories of data shared:
- Google Firebase — Authentication, database, and hosting infrastructure. Data shared: email address, authentication identifiers, user profile data, and all user-generated content stored in the database.
- Google Cloud Platform — Backend API hosting and infrastructure. Data shared: request data processed through our backend APIs, including interview session data and job descriptions.
- Vercel — Frontend hosting and deployment. Data shared: IP address, browser information, and standard web request data.
- OpenAI — Job description parsing and analysis. Data shared: job description text submitted by users. No personal identifiers are sent.
- Anthropic — Interview practice analysis and feedback. Data shared: interview transcripts and session context needed to generate feedback.
- ElevenLabs — Speech-to-text and text-to-speech for interview practice. Data shared: (1) user voice audio for speech-to-text transcription; (2) text of interviewer prompts for speech synthesis. No personal identifiers are sent.
We only share the minimum data necessary for each service to function. These services process your data in accordance with their own privacy policies. We do not sell your personal data to any third party.
5. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law. Where required, such notification will occur within 72 hours of our becoming aware of the breach. Notification may be provided via email, in-app notice, or posting on our website.
6. Cookies and Tracking
We use essential cookies and local storage to:
- Maintain your authentication session
- Remember your preferences (e.g., theme settings)
- Ensure the Service functions properly
We do not use third-party advertising or analytics cookies.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data from our database within 30 days, including all interview transcripts, profile information, and associated records, except where we are required to retain it by law.
8. Data Security
We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Request deletion of your personal data
- Portability — Request your data in a portable format
- Objection — Object to certain types of processing
To exercise any of these rights, please contact us at the email address below.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.
10.1 Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information:
- Identifiers — Name, email address, account ID, IP address
- Internet or network activity — Browsing history within the Service, pages visited, features used
- Audio information — Voice recordings during interview practice sessions (processed in real time, not permanently stored)
- Professional or employment-related information — Target job selections, skills, career preferences
- Inferences — Skill recommendations and interview feedback generated from your usage
10.2 Your California Rights
As a California resident, you have the right to:
- Know — Request disclosure of the personal information we have collected, used, disclosed, or sold about you
- Delete — Request deletion of your personal information
- Correct — Request correction of inaccurate personal information
- Opt-out of sale or sharing — We do not sell or share your personal information as defined under the CCPA/CPRA
- Non-discrimination — We will not discriminate against you for exercising any of these rights
To exercise these rights, contact us at contact@tryupskill.app. We will verify your identity before processing your request and respond within 45 days as required by law.
10.3 Do Not Sell or Share
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Data shared with third-party service providers (as listed in Section 4) is shared solely for the purpose of operating the Service and is governed by contracts that prohibit the service providers from using your data for their own purposes.
11. International Users and GDPR
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) or equivalent local laws provide you with additional rights and protections.
11.1 Data Controller
Upskill AI Inc. ("Upskill") is the data controller responsible for your personal data. For inquiries regarding your data, contact us at contact@tryupskill.app.
11.2 Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance — Processing necessary to provide the Service to you (e.g., account management, interview practice, skill tracking)
- Legitimate interests — Processing necessary for our legitimate business interests (e.g., improving the Service, fraud prevention), where those interests are not overridden by your rights
- Consent — Where you have given explicit consent (e.g., for voice recording during interview practice). You may withdraw consent at any time
- Legal obligation — Processing necessary to comply with applicable laws
11.3 International Data Transfers
Your personal data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. When we transfer your data internationally, we rely on appropriate safeguards including:
- Standard contractual clauses approved by the European Commission
- Data processing agreements with our service providers
- Ensuring that recipients maintain adequate data protection measures
11.4 Additional EEA/UK Rights
In addition to the rights listed in Section 9, EEA and UK residents have the right to:
- Restrict processing — Request that we limit how we use your data in certain circumstances
- Withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
- Lodge a complaint — File a complaint with your local data protection authority if you believe we have violated your rights
12. Children's Privacy
The Service is not intended for anyone under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy, you can contact us at: contact@tryupskill.app