Privacy Policy

1. Who We Are

Profilio ("Profilio", "we", "us", "our") is an AI-powered LinkedIn growth platform operated by Profilio. Our website is located at profilio.app and our application is at web.profilio.app. For privacy-related questions, contact us at hello@profilio.app.

2. Data We Collect

We collect information in the following categories:

Account data — When you create an account we collect your email address and, if you sign in with Google, your name and profile picture. This is processed by Firebase Authentication (Google LLC).

Resume & career data — If you upload a resume, we store the file in Firebase Storage and extract structured data (job history, skills, education, career goals) into your profile. This data powers personalised content generation and is visible only to you.

User-generated content — Posts you generate, comments you create, roadmaps, interview prep notes, and other AI outputs are stored in Firestore under your account. This content belongs to you.

Usage data — We collect standard analytics data (pages visited, features used, session duration) through Google Analytics 4 to understand how Profilio is used and improve the product. This is anonymised and aggregated.

Payment data — If you subscribe to a paid plan, payments are processed by Stripe, Inc. Profilio does not store credit card numbers or full payment details. Stripe's privacy policy applies to payment processing.

Course search queries — When you view your Growth Roadmap, search queries are sent to the Brave Search API to find relevant course recommendations. These queries contain the course or certification topic only, not your personal information.

3. How We Use Your Data

• To create and maintain your account
• To generate personalised LinkedIn content, career roadmaps, and interview prep based on your resume and goals
• To process your subscription and send transactional emails (receipts, credit alerts) via Resend
• To improve Profilio's features using aggregated, anonymised analytics
• To respond to support requests you send us

We do not use your resume, content, or career data to train AI models — ours or anyone else's.

4. Data Sharing & Third Parties

Profilio shares data only with the service providers required to operate the platform:

• Google Firebase — Authentication, database (Firestore), and file storage. Data is stored on Google Cloud infrastructure. Firebase Privacy
• Stripe — Payment processing for Pro and Ultimate subscriptions. Stripe Privacy
• Resend — Transactional email delivery (receipts, notifications). Resend Privacy
• Brave Search API — Course search queries for Growth Roadmap recommendations. Only the search topic string is sent.
• Google Analytics 4 — Anonymised usage analytics.

We do not sell, rent, or share your personal data with advertisers or data brokers. Ever.

5. AI Processing

AI features in Profilio (post generation, roadmap creation, interview prep) are powered by a self-hosted AI model. Your resume data and prompts are processed to generate responses for you. This processing happens within our infrastructure and is not sent to third-party AI providers such as OpenAI or Anthropic.

6. Cookies & Tracking

Profilio uses the following cookies and local storage:

• Authentication session — Firebase Auth stores a session token in your browser to keep you logged in. This is essential for the app to function.
• Analytics — Google Analytics 4 uses cookies to measure aggregated usage. You can opt out via browser settings or the GA Opt-Out Extension.

We do not use advertising cookies or third-party tracking pixels on the marketing site or in the app.

7. Data Retention

Your data is retained for as long as your account is active. If you delete your account, we permanently delete your profile, resume file, generated content, and personal data within 30 days. Aggregated analytics data that cannot identify you may be retained indefinitely.

8. Your Rights

Depending on where you live, you may have rights under GDPR, CCPA, or similar laws. These include:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your data for analytics purposes

To exercise any of these rights, email us at hello@profilio.app. We will respond within 30 days.

9. Data Security

Profilio uses industry-standard security practices: HTTPS encryption on all traffic, Firebase security rules restricting data access to authenticated users, and Stripe's PCI-compliant payment processing. While no system is perfectly secure, we take reasonable measures to protect your data from unauthorised access.

10. Children's Privacy

Profilio is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will notify you via email or an in-app notice. Your continued use of Profilio after changes take effect constitutes acceptance of the updated policy.

12. Contact

For privacy questions, data requests, or concerns, contact us at hello@profilio.app. We aim to respond to all inquiries within 5 business days.

Also see our Terms of Service.