Privacy Policy

1. Who is the data controller

UPNord is the data controller for the personal data you provide while using the service. Contact: hello@upnord.eu.

2. What we collect

• Account data: email, name and sign-in details.
• Profile data: role, seniority, target city and salary expectations — only what you enter.
• Offer data: employer, role, salary, pension, location and other offer details you save or enter.
• Usage data: optional product analytics (route views and feature usage) only after you give analytics consent.
• Billing data: card data is handled by Stripe. We store the paid product, purchase status and payment references needed to provide access, support refunds and prevent payment fraud.

The anonymous Offer calculator runs in your browser and does not send your inputs to our servers unless you sign in to save them.

3. Why we process it (legal basis)

• Contract (Art. 6(1)(b) GDPR): to deliver the service you signed up for.
• Legitimate interests (Art. 6(1)(f)): security and fraud prevention.
• Legal obligation (Art. 6(1)(c)): tax and accounting records for one-time purchases.
• Consent (Art. 6(1)(a)): optional product analytics.

4. Sub-processors

We use these service providers to operate the current Offer Decision Report:

• Supabase: authentication and database services.
• Vercel: website hosting and application runtime.
• OpenAI: AI processing used to prepare the report you request.
• Stripe: payment processing and payment-fraud controls.
• Google: sign-in, only when you choose Google authentication.

Your offer data is processed only to prepare the preview or report you requested. It is not sold or reused for unrelated purposes.

5. International transfers

Some providers may process data outside the EEA. The transfer mechanism and safeguards depend on the provider and the processing location applicable to the service.

6. Retention

We retain account and report data while your account is active. When an account is deleted, data without a retention obligation is deleted. Financial transaction records that must be retained under applicable tax or accounting law are anonymised and kept only for the required period.

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to withdraw consent. Email hello@upnord.eu. You can also lodge a complaint with the competent data-protection authority.

8. Cookies

UPNord uses storage required for authentication and session management. Analytics identifiers, analytics session storage and analytics events are not created unless you explicitly allow analytics. Missing or invalid consent is treated as no consent.

9. Security

We use access controls, row-level database security and transport encryption to protect account data. No service is perfectly secure; report vulnerabilities to hello@upnord.eu.

10. Changes

Material changes to this policy will be notified in the service or by email before they take effect.