Privacy Policy — AI Proposal Writer for Upwork

Last updated: May 2, 2026

Overview

AI Proposal Writer for Upwork ("the Extension") is a Chrome browser extension that helps freelancers draft Upwork proposals using Claude AI. This policy explains what data we collect, how we use it, and your rights.

Data We Collect

Account Data

When you create an account you provide:

• Email address
• Password (stored as a bcrypt hash — we never store your plain-text password)

Alternatively, if you sign in with Google, we receive your email address and Google account ID from Google's OAuth service. We do not receive your Google password.

Profile Data

To personalize proposals you may optionally provide:

• Professional title and bio
• Skills list
• Past project descriptions
• Hourly rate and availability

This data is stored on our servers and used solely to generate proposals relevant to your background.

Job Data

When you generate a proposal, the following is sent to our servers:

• Job title
• Job description text
• Budget and experience level (as shown on the job listing)

The full job description is processed to generate your proposal and is not retained afterwards. We retain a truncated job-title snippet (first 100 characters of the title) so you can find the proposal again in your in-app history.

Generated Proposals

Each proposal you generate is stored on our servers along with the metadata above so you can view and re-use it later from the History view in Settings. This includes:

• The full proposal text we generated
• Tone, length, and AI model used
• Token counts (for cost tracking)
• Optional fit-score result
• Timestamp

You can delete individual proposals from the History view, or have all proposals removed by deleting your account.

Usage Data

We store minimal logs for billing and abuse prevention:

• Number of proposals generated (for plan quota enforcement)
• Plan-change history (signup, upgrades, scheduled cancellations, refunds, downgrades) — used to render your subscription timeline in Settings
• Aggregate token counts per request (for cost tracking)

Billing Data

If you subscribe to a paid plan we store references to your billing record at our payment processor (Polar):

• Your Polar customer ID and active subscription ID
• Your current plan tier (FREE / PRO)
• Your billing-period start and end dates
• Whether your subscription is scheduled to cancel at period end

We do not store your full payment-card number, CVV, or billing address — those are handled directly by Polar. Recent charges shown in the extension are fetched live from Polar on each request, not cached on our servers.

Diagnostic Data (only when you submit feedback)

When you submit feedback through the in-app prompt ("Not really" → typed message), the following diagnostic data is included alongside your message to help us reproduce issues:

• Your browser's user-agent string (truncated to 200 characters)
• Your current plan (FREE or PRO)
• The number of proposals you've generated this month

This is sent only when you actively submit feedback and is used solely for product improvement. It is never sold, shared with third parties, or used for advertising.

We do not collect:

• Browsing history
• Upwork account credentials
• Full job descriptions after the proposal is generated
• Payment-card numbers, CVV, or billing addresses
• Any data from pages outside of Upwork job listings

How We Use Data

Third-Party Services

Job descriptions are transmitted to Anthropic's API to generate proposals. Anthropic's data handling is governed by their usage policy.

Data Retention

• Account data: retained until you delete your account
• Profile data: retained until you delete your account or clear your profile
• Generated proposals: retained until you delete the individual proposal from History or delete your account
• Usage logs (proposal counts, token counts): retained for 90 days
• Plan-change history: retained until you delete your account
• Job descriptions: not retained after the response is returned (only a 100-character title snippet is kept)
• Recent charges: never stored on our servers — fetched live from Polar each time you open the billing screen

Your Rights

You may at any time:

• Access your stored profile data via the extension settings
• Delete your account and all associated data by emailing us
• Export your templates from the Templates tab

Security

• Passwords are hashed with bcrypt
• API tokens use short-lived JWTs (15 minutes) with rotating refresh tokens
• All data is transmitted over HTTPS
• Database access is restricted to our backend servers

Changes

We will update this policy as the service evolves. Continued use of the Extension after changes are posted constitutes acceptance.

Contact

Questions or deletion requests: support@approidtech.com

Privacy· Terms· Refunds· Changelog· Contact· Feedback

© AI Proposal Writer for Upwork — support@approidtech.com