UpProfiler is a free tool that scores how convincingly a LinkedIn profile and its recent posts tell the same story. This policy explains what data the tool processes when you use it, how that data is handled, and the rights you have over it.

We aim for plain language. If anything below is unclear, email us at info@vertial.com and we'll explain — or fix the wording.

1. Who runs UpProfiler

UpProfiler is operated from Sydney, Australia, in partnership with Jasmin Alić (Bosnia & Herzegovina). Australian privacy law (the Privacy Act 1988 and the Australian Privacy Principles) is our home framework, and we also honour the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) for users in those jurisdictions.

2. What we collect

2.1 Information you give us directly

• LinkedIn profile URL. You paste a public LinkedIn profile URL into the scoring tool. We use that URL to fetch public profile data and to compute the conviction score.
• Email address. If you submit your email to unlock the deeper report or to sign in via magic link, we store that email.

2.2 Information we fetch on your behalf

When you submit a LinkedIn URL, we request publicly available data about that profile through the Harvest API. This typically includes: name, profile photo, headline, location, follower count, work history, top skills, and recent public posts. We do not access private or restricted LinkedIn data.

2.3 Information generated by the service

• Your conviction score and the AI-generated analysis (themes, gaps, summary).
• Score history. Each score is recorded so signed-in users can see their score timeline.
• Session and authentication data. Session cookies, magic-link verification tokens, sign-in timestamps.

2.4 Technical information

Our hosting provider (Vercel) logs basic request metadata for security and abuse prevention: IP address, user agent, request path, and timestamps. We do not run any analytics or advertising trackers.

3. How we use this data

• To compute and deliver your score. Fetching the LinkedIn data, running the AI analysis, returning the result.
• To send the welcome and monthly re-score emails you've opted in to.
• To let you log in and see your score history.
• To protect the service from abuse, fraud, and excessive usage.
• To improve the product — in aggregate, never by reading individual records.

We do not sell your data, share it with advertisers, or use it to train AI models on your behalf.

4. Lawful basis (for EU/UK users under GDPR)

• Consent — when you submit your email or paste a LinkedIn URL, you are actively choosing to use the tool. You can withdraw consent at any time.
• Legitimate interest — running the service securely, preventing abuse, and improving the product.
• Contractual necessity — sending you the score and the monthly re-score emails you signed up for.

5. Third parties that process data on our behalf

We use the following sub-processors. Each is bound by their own privacy commitments and we only share the minimum data required:

• Harvest API (LinkedIn data retrieval) — receives the LinkedIn URL you submitted. docs.harvest-api.com
• OpenRouter / DeepSeek (AI analysis) — receives the profile and posts text we want analysed. The model we use (DeepSeek V4 Flash) is run with zero data retention through OpenRouter. openrouter.ai
• Resend (email delivery) — receives your email address and the email content. resend.com
• Railway (database hosting) — stores subscriber records and score history. railway.com
• Vercel (web hosting and serverless functions). vercel.com

6. Data on third-party profiles

You can paste anyone's public LinkedIn URL into the tool. When you do, we process that person's public profile data on your behalf — the same data LinkedIn shows publicly. If you are the subject of a score you didn't initiate and want it deleted, email us at info@vertial.com and we'll erase the records associated with that URL within 30 days.

7. How long we keep your data

• Subscriber email + LinkedIn URL: kept until you unsubscribe or request deletion.
• Score history: kept for signed-in users as long as your account is active. Anonymous scores are kept for 12 months then purged.
• Magic-link verification tokens: 5 minutes (then auto-expire).
• Session cookies: up to 30 days, or until you sign out.
• Vercel request logs: Vercel's standard retention (typically 24 hours to 30 days depending on plan).

8. Your rights

Whatever jurisdiction you're in, you can request to:

• Access the personal data we hold about you.
• Correct anything that's wrong.
• Delete your account, your subscriber record, or your score history.
• Export your data in a machine-readable format.
• Unsubscribe from monthly re-score emails with one click.
• Object to specific uses of your data.

Email info@vertial.com with any of these requests. We aim to respond within 14 days; we're legally required to respond within 30 days (GDPR) or 45 days (CCPA).

If you're not satisfied, you can complain to your local data protection authority — in Australia that's the OAIC (Office of the Australian Information Commissioner), in the EU your national DPA, and in California the Attorney General's office.

9. Cookies and local storage

We use only what's necessary to make the tool work. Details are in our Cookie Policy.

10. International data transfers

Our infrastructure providers (Vercel, Railway, Resend, OpenRouter) operate globally. Your data may be processed in countries outside your own — including the United States. Where required by law, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

11. Security

We use industry-standard practices: TLS in transit, encryption at rest with our infrastructure providers, principle-of-least-access for internal database queries, and short-lived authentication tokens. No system is 100% secure; if we discover a breach affecting your data, we will notify you and the relevant authorities as required by law.

12. Children's privacy

UpProfiler is intended for adults using LinkedIn for professional purposes. We do not knowingly collect data from anyone under 16. If you believe a minor has submitted data, email us and we'll delete it.

13. Changes to this policy

We may update this policy as the product evolves. We'll change the "Last updated" date at the top, and for material changes (e.g. new categories of data, new sub-processors) we'll email signed-in users in advance.

14. Contact

Email info@vertial.com for anything privacy-related. A human reads every message.