Privacy
Last updated October 15, 2026
ufolio stores what you put into it so you can build profiles, resumes, letters, and applications. We don't sell your data or show ads. Anything you publish is public until you unpublish it. You can delete your account and its content at any time from Edit Profile.
Who we are
ufolio is operated by ufolio ("we"). Questions about this policy: support@ufolio.ai.
What we collect
- Account details: your name, email address, and a hashed password.
- What you add: profile text, work history, skills, projects, photos and images you upload, resume text you paste or upload, job postings you save, application notes, contacts you record, evidence statements, and the resumes and letters you create.
- Billing: if you subscribe, Stripe processes your payment. We receive your plan, billing status, and a customer reference. We never see or store your full card number.
- Security and abuse prevention: the IP address and browser type used to sign up and to request AI features, login attempts, and counts of requests. We use these to stop automated sign-ups, password guessing, and AI cost abuse.
- Visits to public profiles: when someone views a published profile or card, we record the visit (IP address, browser type, time, the referring site, whether it came from one of the owner's shared application links, approximate time on the page, and which sections were viewed) so the profile owner can see that their profile was read. Messages sent through a profile's contact form, with the sender's email address, are stored for the profile owner.
How we use it
- To run the service: store your work, publish what you choose to publish, generate documents you ask for, and send account and billing emails.
- To keep the service safe and affordable: rate limits, bot checks, fraud and abuse prevention.
- To fix problems: error logs and aggregate usage counts. We don't build advertising profiles and we don't sell personal information.
AI features
When you use an AI feature, the relevant parts of your profile, resume text, and the job posting are sent to our AI provider, Anthropic, to produce the result. Under our agreement with Anthropic, this content is not used to train their models. AI output can be wrong; review everything before you send it to anyone.
Who else processes data for us
- Anthropic: AI text generation, only when you use an AI feature.
- Stripe: payments and subscription billing.
- Cloudflare Turnstile: bot check on the sign-up form.
- Google Fonts: web fonts; your browser requests them from Google, which receives your IP address.
- YouTube and Vimeo: if a profile owner adds a video, it plays from YouTube (privacy-enhanced mode) or Vimeo, which receive the viewer's IP address when the video loads.
- Our email provider and our hosting provider: to deliver email and run the servers that store your data.
These providers process data on our behalf and only for these purposes.
What is public
Your profile is private until you publish it. A published profile, its digital card, and any application brief you choose to share can be seen by anyone with the link, and published profiles may appear in search engines. Shared application briefs expire after 90 days and can be revoked at any time. Private notes, gaps, and contacts in an application are never included in a shared brief.
Cookies and local storage
We use a session cookie to keep you signed in and a security cookie to protect forms. Some pages remember small display preferences in your browser. We don't use advertising or third-party analytics cookies.
How long we keep data
- Your content is kept until you delete it or delete your account.
- When you delete your account, we remove your profile, applications, documents, and uploaded files. For AI usage records we keep the cost amount and a one-way network identifier for abuse prevention, but remove your IP address and browser details.
- Stripe keeps payment records as required by financial regulations.
- Backups are kept for a limited period and then overwritten.
Your choices and rights
- Edit or delete anything you've added, unpublish your profile, or revoke a shared link at any time.
- Delete your account from Edit Profile. This cancels any subscription first.
- Ask us for a copy of your data or ask a question about it at support@ufolio.ai. Depending on where you live, you may have additional rights to access, correct, or delete your information; we honor those requests.
Children
ufolio is not intended for anyone under 16, and we don't knowingly collect their information.
Changes
If we change this policy in a way that matters, we'll update the date above and tell account holders by email before the change takes effect.