Upwork Goldmine privacy

Privacy Policy

Last updated on Apr 18, 2026

This page explains what Goldmine collects, why it is needed, where it is processed, and how you can ask us to review or delete your data.

1. Short version

Goldmine does not ask for your Upwork password and does not store your payment instrument details. We collect the minimum account, billing-reference, extension-state, usage, and support data needed to run a paid browser extension with synced productivity features.

Your Pursuit Board and notes can contain job-related information you type or choose to save. Please do not place sensitive personal data, client secrets, passwords, payment details, or confidential material in notes, feedback, or feature suggestions.

We do not sell your personal data. We do not use your Upwork browsing activity for advertising or unrelated monetization.

2. Data we collect

Account and access data

Email address, authentication/session status, trial status, complimentary access status, subscription status, and account identifiers needed to keep your access working.

Consent evidence

When you accept our Terms and Privacy Policy, we keep proof such as user ID, email, timestamp, legal version, consent text/hash, page/source, user agent, locale/timezone, and a hashed IP address.

Billing references

Razorpay customer, subscription, payment, invoice, cancellation, and refund reference IDs. We do not store card, UPI, bank, or payment instrument details.

Extension settings

Your filter floors, excluded countries, guide preferences, weekly proposal target, and similar preferences.

Filtering and board data

Job titles, job links, search query text, visible client/job signals, Goldmine pass reasons, Pursuit Board stages, priority, notes, submitted markers, dropped markers, and timestamps.

Usage and feedback data

Filter runs, proposal markers, board opens, weekly goal changes, feedback votes, feature suggestions, error context, and aggregate activity counts.

Technical data

Basic request data such as IP address, user agent, timestamps, logs, and security events created by hosting, authentication, database, email, and payment providers.

3. Why we use this data

  • Sign you in and keep your Goldmine access active across sessions.
  • Record proof that you accepted the Terms, Privacy Policy, and essential service email notice.
  • Start trials, manage subscriptions, show billing history, process cancellations, and process eligible refunds.
  • Sync your Pursuit Board, notes, settings, history, and weekly goals across signed-in sessions.
  • Show run-specific summaries, aggregate history, and limited community/product activity.
  • Troubleshoot bugs, prevent abuse, secure the service, improve performance, and understand which features help users.
  • Send service emails such as OTP/login, trial activation, complimentary access, subscription, cancellation, refund, and critical product or security notices.

5. Upwork job information

Goldmine reads job and client information that is visible to you in your browser while you use Upwork. The extension uses that information to filter jobs, show Goldmine signals, restore context, and keep your Pursuit Board useful.

We do not ask for your Upwork login password. We do not claim ownership of Upwork content. You are responsible for using Goldmine in a way that respects Upwork's terms and any confidentiality duties you owe to clients.

6. Sensitive data and private information

Goldmine is not designed to collect sensitive personal data such as health information, biometric data, government identity numbers, financial account credentials, precise personal documents, or private client secrets. If you type that kind of information into notes, feedback, or suggestions, you are choosing to provide it even though we ask you not to. We may delete such content if we find it.

7. Notes, feedback, and feature suggestions

Notes and feature suggestions are meant for lightweight productivity. Examples include proposal angle, proof points, invite count, client last seen, or a reminder. Do not add private client documents, secret business information, health data, government IDs, passwords, or payment data.

If you submit feedback or a feature suggestion, we may review it to improve Goldmine, troubleshoot issues, prioritize features, and understand whether a run was useful.

8. Filtering and automated decisions

Goldmine uses rules and signals to highlight jobs that may deserve your attention. It does not make final decisions for you, submit proposals, spend connects, accept contracts, contact clients, or make decisions with legal or similarly significant effect. You remain responsible for reviewing every job and deciding what to do.

9. Who processes data for us

We do not sell your personal data. We use trusted service providers to operate Goldmine:

Supabase

Authentication, OTP login, database storage, and account/session management.

Razorpay

Payments, subscriptions, invoices, refunds, mandates, fraud checks, and payment records.

Resend

Transactional lifecycle emails from our configured domain.

Vercel

Website, API hosting, request handling, and deployment infrastructure.

Google Chrome

Browser extension runtime, extension storage, and Chrome Web Store distribution.

We may also disclose data if required by law, court order, payment dispute, fraud investigation, security incident response, or to protect our rights, users, or the service.

10. Sale, sharing, and advertising

We do not sell personal data. We do not share personal data for cross-context behavioral advertising. We do not use Upwork browsing activity, job content, notes, or Pursuit Board data for ad targeting. If this changes, we will update this policy and provide any legally required choices before doing so.

11. Emails

We send service emails needed for account access and billing, such as OTP/login, trial activation, complimentary access, subscription confirmation, cancellation, refund, and important security or product notices. We do not use service emails as a place for unrelated marketing.

13. Browser storage and synced data

Goldmine uses browser storage for fast local performance and may sync signed-in extension state to our backend so your board, settings, and history can survive refreshes and be available across signed-in sessions. Logging out clears account access from the extension, but synced backend records may remain until deleted under this policy.

14. Security

We use HTTPS, token-based authentication, server-side validation, limited API payloads, database access controls, and provider security features. No system is perfectly secure. If you believe your account or data is at risk, contact us immediately.

15. Retention

We keep account, billing-reference, access, refund, and compliance records as long as needed to operate Goldmine, resolve disputes, meet tax/accounting/legal duties, and prevent abuse. Extension state, board data, notes, and settings are kept while your account is active unless you ask us to delete them, subject to legal or fraud-prevention needs. Aggregated or de-identified analytics may be kept longer.

If you ask us to delete your account, we will remove or de-identify active product data that is no longer needed for Goldmine. Some records, such as payment references, refund records, consent evidence, security logs, support history, and records needed for tax, accounting, fraud prevention, or legal claims, may be retained for the period reasonably required by law or legitimate compliance needs. Backups and provider logs may clear on their normal retention cycles rather than instantly.

16. International processing

Goldmine is operated from India and uses cloud providers that may process data in India, the United States, or other countries where their infrastructure or subprocessors operate. By using Goldmine, you understand that your data may be processed outside your country.

17. Children

Goldmine is for freelancers and business users. It is not intended for children or users who are not legally able to use paid software services in their jurisdiction. We do not knowingly collect data from children. If you believe a child used Goldmine, contact us so we can review and delete the account where appropriate.

18. Your choices and rights

You may ask us to access, correct, export, or delete account-related data by writing to upwork-goldmine@muyal.online. We may need to verify your email before acting. Some records may be retained where required for billing, tax, legal, security, fraud-prevention, or dispute reasons.

Depending on where you live, you may also have rights to withdraw consent, object to certain processing, restrict processing, request portability, know categories of data collected, opt out of sale or sharing where applicable, avoid discrimination for exercising privacy rights, or raise a grievance. Because we do not sell or share personal data for advertising, there is currently no sale/share opt-out to exercise.

We are a small team, so privacy requests are handled carefully through the support email rather than instant automated deletion. We aim to acknowledge and respond within the timeframe required by applicable law. If a request is complex, repetitive, unclear, unusually broad, or arrives during an unusually high support volume, we may ask for clarification, verify identity, or use any lawful extension period while keeping you informed.

19. Grievance contact

For privacy requests, correction/deletion requests, consent withdrawal requests, or grievances, write to upwork-goldmine@muyal.online. We will review the request and respond as required by applicable law. Please use the email address connected to your Goldmine account where possible, because that helps us verify the request safely. If you are in India, please contact us first so we have an opportunity to address your grievance.

20. Changes to this policy

We may update this Privacy Policy as Goldmine evolves. If a change is material, we will make a reasonable effort to notify users through the website, extension, or email.

21. Contact

For privacy requests or product support, contact upwork-goldmine@muyal.online.