Privacy Policy

Last updated 16 July 2026.

Upwind ("we", "us") is the data controller for the personal data described below. This policy explains what we collect, why, and what rights you have over it. Contact us any time at support@upwindcrew.com.

What we collect

• Your account email, used for login and account communication.
• Your career profile: bio, uploaded CV file, saved screening-question answers, and job search criteria (vessel size, position, location, visa status, salary, rotation preference) — all entered by you.
• The list of recruitment agencies you tell us you're registered with, and any screening questions you save for them.
• Staged applications: job details you've scanned or that our Yotspot watcher found, together with the AI-generated cover letter, screening answers, and match-fit score for each.
• If you use the browser extension on your own Yotspot account: a mirror of the profile statistics Yotspot already shows you (profile views, application views, document downloads, video intro views, shortlisted count).
• Usage counters (how many scans/letters you've used this month) and your plan tier.
• Billing information — handled entirely by Stripe. We never see or store your card details ourselves, only your subscription status and plan.
• A hashed access token for the browser extension (we can't recover the original token from what we store).

We deliberately do not collect passport numbers, visa document scans, or other government ID documents. Keep your profile to career/professional information only.

How we use it

To generate tailored cover letters, screening answers, and job-fit scores (via our AI provider, Anthropic); to match scanned jobs against your saved criteria and agencies; to run the optional Yotspot auto-scan through your browser extension; to manage your subscription and enforce plan usage limits; and to operate and improve the Service generally.

Who we share it with

We use a small number of sub-processors to run the Service. We do not sell your data to anyone.

• Supabase — our database, authentication, and file storage provider (your CV is stored in a private file, accessible only to you).
• Stripe — payment processing and subscription billing.
• Anthropic — processes your bio and job details to generate cover letters, screening answers, and match scores.
• Vercel — hosts the Upwind website and server functions.

The browser extension

The extension reads pages within your own already-logged-in browser session and sends extracted job/profile information to our servers using your personal access token. It never transmits your Yotspot password to us — we never see it. It only reads pages; it never fills in or submits anything on a third-party site without your own action.

Cookies

We use a small number of functional cookies to keep you logged in. We don't use advertising or cross-site tracking cookies.

How long we keep it

We keep your data for as long as your account is active. If you ask us to delete your account, we'll delete your personal data (profile, CV, staged applications, and related records) within 30 days, except where we're required to keep billing records for legal reasons.

Your rights

Under UK/EU data protection law you can ask us to: give you a copy of your data, correct it, delete it, or export it in a portable format. Email support@upwindcrew.com and we'll action your request within 30 days. There's no self-serve delete button yet — for now these requests are handled by us directly.

International transfers

Some of our sub-processors (including Anthropic and Vercel) may process data on servers outside the UK/EEA. Where that happens we rely on their standard contractual safeguards for international transfers.

Children

Upwind is intended for working professionals and isn't directed at anyone under 18.

Changes to this policy

We may update this policy from time to time; continued use of the Service means you accept the update.

Contact

Questions or requests about your data? Email support@upwindcrew.com.