Legal
Privacy Policy
Short version: Yang's Upwork Toolkit is local-first. Your Upwork profile, job history, and proposal drafts live in your browser, not on our servers. We do not collect your name, email, Upwork account, or any data that identifies you personally.
1. What we do not collect
- Your Upwork username, account ID, or login credentials
- Your real name or email address
- Your payment card details (handled by Creem, our payment processor)
- The text of jobs you view, except in the narrow case described in section 4
2. The only identifier we use
When you install the extension, it generates an anonymous
install_id (a random UUID) and stores it in your browser. We
use this ID to:
- Check whether you are on the Free or Pro plan
- Enforce per-install rate limits on AI-assisted reviews
The install_id is not linked to your real identity. Two
installations on different devices are two different IDs to us.
3. What stays on your device
The following is stored in your browser's local extension storage and is never sent to our servers:
- Your profile snapshot: title, overview, skills, proof assets, strong/weak stack lists
- Your screening rules (auto-reject thresholds, banned skills, etc.)
- Your recent review history (up to the last 8 jobs)
- Proposal drafts you generate
- UI preferences (language, expanded sections, etc.)
Uninstalling the extension removes all of this data.
4. What gets sent to our Worker
Our backend (a small Cloudflare Worker at
agent-foundry-subscriptions.tkpdx01.workers.dev) receives
only:
- Your
install_id - Subscription metadata returned by Creem (plan, status, expiry)
- An HMAC signature on AI-review requests to prevent replay attacks
No job content, profile content, or proposal drafts go to the Worker.
5. What gets sent to the AI provider (Pro plan only)
AI-assisted review is off by default. It runs only when you:
- Are on the Pro plan
- Have explicitly enabled AI assist in the extension settings
- Click the review button on a specific job
When all three are true, we send the following to our AI provider (an OpenAI-compatible endpoint):
- The current job's title, URL, trimmed description, budget, type, skills, and visible payment / proposal / hire facts
- A summary of your profile: title, trimmed overview, skills, stack lists, proof assets, call tolerance
- The local review result we already computed: decision, scores, reasons, red flags, missing evidence, proposal angle
We do not send: your local review history, your proposal drafts, browser exports, or raw Upwork page data.
6. Third parties
We share data with the following third parties:
- Creem — payment processing for Pro subscriptions. Creem receives the data needed to bill you (your card details and email). See Creem's privacy policy.
- Our AI provider — only when you actively use Pro AI review, and only the fields listed in section 5.
- Cloudflare — hosts the Worker and this site. Standard infrastructure logs apply.
We do not sell or share data with advertisers, analytics platforms, or data brokers.
7. Your choices
- Stop using the extension: uninstall it; all local data is removed.
- Delete subscription records: email [email protected] with your
install_idand we will delete it from our Worker within 7 business days. - Opt out of AI assist: disable the toggle in the extension settings. The toolkit still works fully on local-only review.
8. Children
Yang's Upwork Toolkit is not directed at children under 16 and we do not knowingly collect data from them.
9. Changes
We will post material changes to this page and update the "Last updated" date. Continued use of the extension after changes are posted constitutes acceptance.
10. Contact
Questions or requests: [email protected]