Privacy Policy

1. Who this applies to

This policy covers the Upnotify website, API, and Chrome extension. By using Upnotify you agree to this policy.

2. Data we collect

• Account information: Google account email and name when you sign in with Google.
• Authentication data: a session cookie (un_session) used to keep you signed in.
• Watch preferences: search URLs, keywords, and filters you configure so we can find matching jobs.
• Job metadata: title, link, snippet, and budget for jobs that match your watches, so we can notify you and avoid duplicate alerts.
• Billing: if you subscribe to Pro, Stripe processes payments. We store Stripe customer/subscription IDs and plan status; we do not store full card numbers.
• Extension data (on your device): cached sign-in status, watch list, and IDs of jobs already notified, stored in Chrome storage.

3. How we use data

We use this data only to operate Upnotify's single purpose:

• Authenticate you and keep you signed in
• Poll Upwork's official GraphQL API for jobs matching your watches
• Show desktop notifications and Pro email alerts
• Provide subscription billing and plan limits
• Maintain security, prevent abuse, and improve reliability

We never ask for your Upwork password. The Chrome extension does not scrape Upwork or other websites; it only talks to Upnotify.

4. Google access

Sign-in uses Google OAuth for your email and basic profile so we can create your Upnotify account. We do not request Gmail, Drive, or Calendar access. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Sharing

We do not sell your personal data. We share data only with processors needed to run the service, for example:

• Google (sign-in)
• Stripe (subscription payments)
• Resend (Pro email alerts, if enabled)
• Hosting/database providers that store application data

We may disclose information if required by law or to protect the security of the service or our users.

6. Retention

We retain account, watch, and job-alert data while your account is active and as needed to provide the service. You may request deletion of your account data by contacting us (see Support).

7. Security

We use HTTPS and httpOnly session cookies. No method of transmission or storage is 100% secure; please protect access to your Google account.

8. Your choices

• Sign out from the Upnotify dashboard
• Revoke Upnotify access in your Google Account permissions
• Uninstall the Chrome extension
• Contact us to request export or deletion of your data

9. Children

Upnotify is not directed to children under 13, and we do not knowingly collect data from them.

10. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of Upnotify after updates means you accept the revised policy.

11. Contact

Questions about privacy: see our Support page, Terms of Service, or email support@upnotify.io.