Privacy Policy

eCom Proof LLC ("we", "us", "our", "Company") operating as GoFutureFit is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SkillSync platform ("Service").

Company Information:

• Legal Name: eCom Proof LLC
• Address: Sharjah Media City, Sharjah, United Arab Emirates
• Contact Email: info@gofuturefit.com

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2.1 Information You Provide:

• Account Information: Name, email address, password, phone number, location, and role (employee, advisor, etc.)
• Profile Information: Current job title, years of experience, bio, LinkedIn URL, portfolio URL
• CV/Resume Data: Uploaded CVs, resumes, work experience, skills, education, certifications, achievements, and other professional information
• Job Descriptions: Job descriptions you submit for FitScore analysis
• WinLog Entries: Weekly achievements and career milestones you log
• Payment Information: Billing address, payment method (processed securely through Stripe - we do not store full credit card numbers)
• Communications: Messages, feedback, and support requests you send to us

2.2 Automatically Collected Information:

• Usage Data: Pages visited, features used, time spent, click patterns, and navigation paths
• Device Information: IP address, browser type, operating system, device type, screen resolution
• Session Data: Login times, session duration, logout times, device identifiers
• Analytics Data: Feature usage, API calls, storage usage, error logs
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience (see Section 8)

2.3 Third-Party Information: If you sign in with Google or other OAuth providers, we may receive your name, email, and profile picture from those services.

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve the Service, including FitScore calculations, JobLang AI optimization, CV building, and other features
• Account Management: To create and manage your account, authenticate you, and provide customer support
• AI Processing: To process your CVs and job descriptions through AI systems for analysis and optimization
• Payment Processing: To process subscription payments, manage billing, and handle refunds
• Communication: To send you service-related notifications, updates, and respond to your inquiries
• Analytics and Improvement: To analyze usage patterns, improve our algorithms, and enhance the Service
• Security: To detect, prevent, and address security issues, fraud, and abuse
• Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights
• Marketing (with consent): To send promotional emails about new features, tips, and special offers (you can opt-out at any time)

AI Processing Note: Your CVs and job descriptions may be processed by third-party AI services (such as OpenAI) to provide analysis and optimization features. This processing is necessary to provide the Service.

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers: We share information with trusted third-party service providers who help us operate the Service, including:

• Cloud Storage: Supabase (for database and file storage)
• Payment Processing: Stripe (for subscription and payment processing)
• AI Services: OpenAI and other AI providers (for CV analysis and optimization)
• Email Services: Email service providers (for transactional and marketing emails)
• Analytics: Analytics providers (for usage analysis and improvement)

4.2 Advisor Relationships: If you are referred by a career advisor or use an advisor's white-label portal, we may share limited information (name, email, subscription status) with that advisor to facilitate the relationship.

4.3 Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.

4.4 Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.5 Aggregated Data: We may share anonymized, aggregated data that cannot identify you for research, analytics, or business purposes.

We implement industry-standard security measures to protect your information:

• Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted.
• Access Controls: Access to your data is restricted to authorized personnel who need it to provide the Service.
• Secure Storage: Data is stored in secure, access-controlled databases and storage systems.
• Authentication: Strong password requirements and secure authentication mechanisms.
• Regular Audits: We conduct regular security audits and assessments.

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the Service at your own risk.

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Active Accounts: We retain your data while your account is active and for up to 3 years after account closure to comply with legal obligations and allow account recovery.
• CV/Resume Data: Retained until you delete your account or request deletion of specific CVs. Deleted CVs are permanently removed within 30 days of deletion request.
• Payment Records: Retained as required by law (7 years for tax and accounting purposes in most jurisdictions).
• Usage Analytics: Retained in anonymized, aggregated form for up to 2 years for platform improvement and analytics.
• Support Communications: Retained for up to 2 years to provide customer support and resolve disputes.
• Session Data: Retained for up to 90 days for security and fraud prevention.

You may request deletion of your data at any time by contacting us or using account deletion features. We will delete your data within 30 days of your request, except where retention is required by law.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Opt-Out: Opt-out of marketing communications and certain data processing

GDPR (EU Users): If you are in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). To exercise these rights:

• Contact us at info@gofuturefit.com
• We will respond within 30 days (may be extended to 60 days for complex requests)
• We may request verification of your identity before processing requests
• You have the right to lodge a complaint with your local data protection authority

CCPA (California Users): If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information (subject to exceptions)
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise your CCPA rights, contact us at info@gofuturefit.com. We will respond within 45 days.

We use cookies and similar tracking technologies to:

• Maintain your session and authenticate you
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and features

Types of Cookies:

• Essential Cookies: Required for the Service to function (cannot be disabled)
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

For detailed information about our cookie usage, including types of cookies, their purposes, and how to manage them, please see our Cookie Policy.

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

By using the Service, you consent to the transfer of your information to countries including but not limited to the United States, where our servers and service providers are located. We take appropriate safeguards to ensure your information receives adequate protection in accordance with this Privacy Policy.

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies:

• Stripe: Stripe Privacy Policy
• Supabase: Supabase Privacy Policy
• OpenAI: OpenAI Privacy Policy
• Google (OAuth): Google Privacy Policy

Your use of third-party services is subject to their terms and privacy policies.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Service. The "Last Updated" date at the top indicates when this policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

13.1 No Liability for Data Breaches or Privacy Violations: IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOST PROFIT, LOST REVENUE, LOSS OF DATA, LOSS OF PRIVACY, IDENTITY THEFT, FINANCIAL LOSS, OR OTHER DAMAGES ARISING FROM ANY DATA BREACH, UNAUTHORIZED ACCESS, PRIVACY VIOLATION, OR FAILURE TO PROTECT YOUR INFORMATION, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

13.2 Maximum Liability Cap: NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER ARISING FROM OR RELATED TO THIS PRIVACY POLICY, DATA BREACHES, PRIVACY VIOLATIONS, OR DATA HANDLING PRACTICES, AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO US IN THE 12 MONTHS PRECEDING THE CLAIM.

13.3 State Law Exceptions: CERTAIN US STATE LAWS AND INTERNATIONAL LAWS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES OR THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE ABOVE DISCLAIMERS OR LIMITATIONS MAY NOT APPLY TO YOU, AND YOU MAY HAVE ADDITIONAL RIGHTS.

13.4 Security Disclaimer: While we implement industry-standard security measures to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information. You acknowledge that you provide your information at your own risk.

13.5 Third-Party Services: We are not responsible for the privacy practices, data breaches, or security failures of third-party services (such as Stripe, Supabase, OpenAI, or Google) that we use to provide the Service. Your use of third-party services is subject to their respective privacy policies and terms of service.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@gofuturefit.com
• Address: Sharjah Media City, Sharjah, United Arab Emirates
• Company: eCom Proof LLC

GDPR (EU Users): If you are in the European Union and have questions about our GDPR compliance or wish to exercise your GDPR rights, please contact us at info@gofuturefit.com. We will respond within 30 days (may be extended to 60 days for complex requests). You also have the right to lodge a complaint with your local data protection authority.

CCPA (California Users): If you are a California resident and have questions about our CCPA compliance or wish to exercise your CCPA rights, please contact us at info@gofuturefit.com. We will respond within 45 days.