Privacy Policy

1. Data we collect

• Account data: email address, password (stored as a secure hash by our auth provider — we never see it), and your chosen username.
• Profile content you provide: name, occupation, tagline, location, optional age, social links, and the items you add (experience, education, projects, skills, courses, achievements, custom sections) including any images you upload (profile photo, cover, certificates, screenshots).
• Technical data: authentication cookies needed to keep you signed in, and standard server logs (IP address, browser type, timestamps) kept by our hosting providers for security and debugging.
• Device tokens (Android app, when available): a push-notification token if you enable reminders in the mobile app.

We do not use advertising trackers and we do not sell personal data.

2. How we use your data

• To operate your account and render your portfolio and resume.
• To generate PDF exports you request.
• To send service emails (account confirmation, password reset) and — if enabled — occasional profile-update reminders. You can turn reminders off in Settings.
• To secure the Service, prevent abuse, and fix problems.

3. What is public

If your profile is set to public, your portfolio page (profilecraft.in/u/your-username) — including your name, photo and the items you chose to show — is visible to anyone with the link and may be indexed by search engines. Setting your profile to private in Settings hides it immediately. Uploaded images are served from public URLs so your portfolio can display them; if you delete an image or your account, it is removed.

4. Where your data lives

Your data is processed by a small set of infrastructure providers acting on our behalf:

• Supabase (database, authentication, file storage) — hosted on AWS.
• Vercel (website hosting and serverless functions).
• Resend (transactional email delivery).
• Google Firebase (push notifications for the Android app, when you opt in).

Each provider processes data only as needed to provide their service to us, under their own security and privacy commitments.

5. Cookies

We use only the cookies required to keep you signed in (authentication session cookies). We do not use third-party advertising or cross-site tracking cookies.

6. Your rights and controls

• Access & edit: everything you've added is visible and editable in your Dashboard.
• Visibility: toggle your profile public/private, and control per-item visibility, anytime.
• Export: download your resume as PDF; your portfolio is your data rendered live.
• Delete: Settings → Danger zone permanently deletes your account, profile, items and images. This is immediate and irreversible.
• For any other request (e.g. a copy of your data), email us and we will respond within 30 days.

7. Data retention

We keep your data for as long as your account exists. When you delete your account, your data is removed from the production database immediately; residual copies in encrypted backups expire on the backup rotation schedule of our providers (typically within 30 days).

8. Children

ProfileCraft is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.

9. Changes to this policy

We will post any changes here and update the "Last updated" date. For material changes we will make reasonable efforts to notify you by email or an in-app notice.

10. Contact

Privacy questions or requests: hello@profilecraft.in · IndicStudio, Kolkata, India.