Privacy Policy
Effective Date: February 26, 2026 · Last Updated: February 26, 2026
This Privacy Policy explains how UBuildUscollects, uses, and protects your personal information when you use our website, platform, and related services (collectively, the “Services”). We do not sell your personal information — ever. If you do not agree with this policy, please do not use the Services.
1. Introduction
UBuildUs is a career platform that helps job seekers build, manage, and share professional profiles and resumes, and helps recruiters discover qualified candidates. In providing these Services we process personal information on your behalf and take that responsibility seriously.
This policy describes: (a) what personal information we collect and why; (b) how we use and protect it; (c) with whom we share it; and (d) your rights regarding that information. “Personal information” means any information that identifies or can reasonably be linked to an individual.
2. Who We Are
UBuildUs is a brand owned and operated by Simple People Holdings LLC-s, headquartered in the State of Indiana, United States. We operate under Indiana law, including the Indiana Consumer Data Protection Act (ICDPA), Ind. Code § 24-15, which became effective January 1, 2026. Where applicable, we also respect applicable federal privacy laws.
For questions about this policy, please see the Contact Us section below.
3. Information We Collect
3.1 Information You Provide Directly
- Account details: first name, last name, middle name, suffix, username, email address, and hashed password (we never store your password in plain text).
- Contact information: phone number, city/location, and country.
- Professional profile: job title, current employer, professional summary, profile overview, and career role.
- Resume & career history: work experience (employer, job title, dates, responsibilities), education (degree, institution, graduation year), skills, certifications, and other career details you include in your resume.
- Projects & references: project names, descriptions, URLs, technology tags, dates; professional reference names, titles, companies, email addresses, phone numbers, and relationship types you choose to add to your profile.
- Uploaded files: resume documents (PDF or DOCX) and profile avatar images you upload.
- Support communications: messages you send to us through our contact form or by email.
3.2 Information from Third-Party Authentication
If you choose to sign in through a third-party provider, we receive limited profile data from that provider:
- Google: name, email address, and Google account ID.
- GitHub:GitHub username and account ID. If you connect GitHub from your profile, we also fetch your public repositories, bio, and profile URL via GitHub’s public API.
- Apple: name and email address (if shared by Apple).
- LinkedIn:name, email address, and LinkedIn member ID, obtained via LinkedIn’s OpenID Connect service. We store your LinkedIn member ID and a link to your LinkedIn profile.
We do not receive or store third-party access tokens beyond what is necessary to complete authentication and initial profile data import.
3.3 Information Collected Automatically
- Session data: encrypted session tokens stored in HTTP-only cookies used to keep you signed in.
- Usage and log data: pages visited, features used, timestamps, and error logs. We record system events (e.g., AI service requests) for performance monitoring and debugging.
- Device and browser data: browser type, operating system, and IP address collected via standard server logs.
3.4 AI-Generated Data
When you upload a resume or interact with the AI assistant, we generate and store derived data including an AI-authored profile overview, resume improvement suggestions, and numerical vector embeddings of your profile. These embeddings are used internally to power candidate search and matching features and are never shared outside UBuildUs.
4. How We Use Your Information
We use personal information only for legitimate purposes directly related to operating and improving the Services:
- Providing the Services: creating and managing your account, authenticating your identity, rendering your profile, and enabling search and matching features.
- Processing your resume and documents: extracting text from uploaded files, generating AI-assisted profile summaries, and updating your profile through the AI assistant.
- Candidate search and matching: using vector embeddings of your profile to surface your profile to recruiters who use the platform and to show you relevant matches.
- Communications: sending transactional emails (e.g., account verification, password reset OTPs, service notices). We do not send unsolicited marketing emails without your consent.
- Security and fraud prevention: detecting abuse, unauthorized access, and policy violations.
- Service improvement: analyzing usage patterns in aggregate to improve features, fix bugs, and optimize performance.
- Legal compliance: fulfilling legal obligations or responding to lawful requests from authorities.
We do not use your personal information for targeted advertising, and we do not build advertising profiles based on your activity.
5. AI Processing
UBuildUs uses artificial intelligence features powered by Google Gemini (operated by Google LLC) to:
- Parse and extract structured information from uploaded resumes and documents.
- Generate profile overviews and resume improvement suggestions.
- Power the real-time profile assistant chatbot.
- Generate vector embeddings of profile content used for search and matching.
When AI features are used, relevant portions of your resume or profile text are transmitted to Google’s Gemini API for processing. This processing is subject to Google’s Privacy Policy. We use the API under terms that restrict Google from using your data to train its general models.
AI-generated outputs (summaries, suggestions, overviews) may be inaccurate. You are responsible for reviewing and verifying any AI-generated content before relying on it.
6. Third-Party Services & Sub-Processors
We use the following service providers to operate the platform. Each processes only the data necessary for their specific function:
| Provider | Purpose | Data Shared |
|---|---|---|
| MongoDB Atlas (MongoDB, Inc.) | Database hosting | All profile and account data stored in the platform |
| Cloudinary (Cloudinary Ltd.) | File & image storage | Resume files (PDF/DOCX) and profile avatar images |
| Google Gemini (Google LLC) | AI analysis & embeddings | Resume and profile text for AI processing |
| Resend (Resend, Inc.) | Transactional email delivery | Email address and message content for OTPs and service notices |
| Google OAuth (Google LLC) | Optional sign-in | Name, email, Google account ID (if you choose Google sign-in) |
| GitHub (GitHub, Inc.) | Optional sign-in & profile import | Username and public profile/repo data (if you connect GitHub) |
| Apple Sign In (Apple Inc.) | Optional sign-in | Name and email (if you choose Apple sign-in) |
| LinkedIn (LinkedIn Corporation) | Optional profile connection | Name, email, LinkedIn member ID (if you connect LinkedIn) |
We require each service provider to protect personal information consistent with this policy and applicable law. We do not authorize them to use your data for their own marketing or to sell it.
9. Security & Data Retention
We implement reasonable administrative, technical, and organizational safeguards to protect your personal information, including:
- Passwords hashed using the scrypt key-derivation function with a random salt — never stored in plain text.
- Sensitive settings (such as API keys) encrypted at rest using AES-256-GCM.
- Session tokens transmitted over HTTPS only, stored in HTTP-only cookies.
- Database access restricted to application-level credentials with least-privilege principles.
- Files stored on Cloudinary with access-controlled URLs.
No method of transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately.
Retention: We retain your personal information for as long as your account is active or as needed to provide the Services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or to resolve outstanding disputes.
10. Your Rights Under Indiana Law
Under the Indiana Consumer Data Protection Act (ICDPA), Ind. Code § 24-15, Indiana residents have the following rights with respect to their personal data:
Right to Access & Confirm
You may confirm whether we process your personal data and request a copy of the personal data we hold about you.
Right to Correct
You may request that we correct inaccurate personal data we hold about you. Many fields can be updated directly from your profile settings.
Right to Delete
You may request that we delete personal data we hold about you. You may also delete your account at any time from your account settings.
Right to Data Portability
You may request a copy of your personal data in a portable, commonly used, and machine-readable format.
Right to Opt Out of Sale & Targeted Advertising
You have the right to opt out of the sale of your personal data and its use for targeted advertising or profiling in furtherance of significant decisions. As stated throughout this policy, UBuildUs does not sell personal data and does not engage in targeted advertising — this right is therefore satisfied by default.
To exercise any of these rights, please submit a request via our contact page or email us directly (see Section 13). We will respond within 45 days of receiving a verifiable request, as required by the ICDPA. We may extend this period by an additional 45 days when reasonably necessary, with notice. We may need to verify your identity before processing your request.
If you disagree with our response, you may appeal by contacting us. If your appeal is denied, you may contact the Indiana Attorney General’s office to submit a complaint.
11. Children’s Privacy
The Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it promptly. If you are between 13 and 18 years of age, you should only use the Services with the consent of a parent or guardian.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or by a notice within the Services before the changes take effect. Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:
UBuildUs — a brand of Simple People Holdings LLC-s
Indiana, United States
Contact form: ubuildus.com/contact
We take privacy inquiries seriously and will respond as promptly as possible.