Privacy Policy

1. Who We Are

Vacancy Mirror is operated by a self-employed individual acting as the data controller for the personal data described in this policy.

Vacancy Mirror is not affiliated with, endorsed by, sponsored by, or officially connected to Upwork Inc., Telegram, Google, or any other third-party platform.

2. Eligibility

You must be at least 18 years old (or the age of majority in your jurisdiction) to use Vacancy Mirror. By using the service you confirm that you meet this requirement. We do not knowingly process personal data of children — see section 10.

3. Data Sources & What We Collect

Vacancy Mirror's mentor draws on information about the freelance market that is publicly available online — the open Upwork freelancer community, Upwork's own published material, and other public freelance discussion — together with content you voluntarily share with the assistant, such as text you paste into the chat for analysis.

We never request passwords, session cookies, API keys, or browser credentials for any third-party freelance platform. We do not access your private accounts, dashboards, messages, proposals, contracts, or earnings on any platform. The service has no read or write access to any of your freelance-platform accounts whatsoever.

In addition to the public information the mentor learns from, we process the following personal data when you use the service:

We do not access private accounts, dashboards, messages, proposals, contracts, or payment information on third-party platforms. We do not store credit card numbers or CVV codes — all payment data is handled by Stripe.

4. How We Use Your Data

We use your data only to:

• ▸ Provide the chat, weekly reports, and personalised recommendations you ask for
• ▸ Operate, maintain, and improve the service
• ▸ Process payments and manage subscriptions
• ▸ Detect abuse, fraud, and security incidents
• ▸ Comply with legal obligations (tax records, lawful requests)

We do not sell, rent, or share your personal data with advertisers or unrelated third parties. We do not use your messages or preferences to train public AI models.

5. Data Sharing & Sub-Processors

We use a small number of third-party processors strictly to deliver the service. Each one receives only the data needed for its specific function:

• ▸Telegram — message transport. Telegram receives every message you send to the bot, on its own infrastructure.
• ▸Stripe — payment processing. Stripe receives card details directly (we never see them) and returns a customer ID and subscription status.
• ▸OpenAI — language model inference. Your prompt and the assistant's response transit OpenAI's API. OpenAI does not use API data to train its models per its current API data policy.
• ▸Google Tag Manager / Google Analytics — only after you give cookie consent. See the Cookie Policy.
• ▸Hosting (Vercel) — serves this website. The hosting provider sees standard web request metadata (IP address, user agent) for the duration of each request.

We may also disclose data when required by law (court order, regulatory request) or to protect our rights and the safety of users.

6. Your GDPR Rights

If you are located in the EU, EEA, UK, or another jurisdiction with comparable rights, you may:

• ▸ Access the personal data we hold about you
• ▸ Request correction of inaccurate or incomplete data
• ▸ Request deletion of your data (the right to be forgotten)
• ▸ Restrict or object to certain processing (in particular, processing based on legitimate interests)
• ▸ Receive your data in a portable format
• ▸ Withdraw consent at any time, where processing is based on consent (this does not affect prior processing)
• ▸ Lodge a complaint with your local data protection authority

To exercise any of these rights, email support@vacancy-mirror.com with your Telegram username. We aim to respond within 30 days.

7. International Transfers

Some of our processors (Stripe, OpenAI, Vercel, Google Analytics) operate from the United States or other jurisdictions outside the EU/EEA. Where applicable, transfers rely on the European Commission's Standard Contractual Clauses or other adequacy mechanisms published by these processors. You can review each processor's public privacy documentation for current transfer safeguards.

8. Security

We take reasonable technical and organisational measures to protect your information, including encrypted transport (TLS), restricted access to stored data, and isolation between services. However, no internet service can be guaranteed to be completely secure. You use the service at your own risk.

9. Data Retention

Specific retention periods are listed in section 3. As a general rule, we keep data only as long as needed to provide the service or to comply with legal obligations. You can request deletion of your data at any time via support@vacancy-mirror.com; we will delete or anonymise it within 30 days, except where retention is required by law (e.g. tax records).

10. Children's Privacy

Vacancy Mirror is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version is always available on this page. Material changes will be communicated via the bot or email at least 14 days before taking effect.

12. Contact

For privacy requests, data deletion, or general questions: support@vacancy-mirror.com

See also the Terms of Use and Cookie Policy.