Upptik Notice for California Consumers


California Consumer Privacy Act (CCPA / CPRA) Disclosure

Effective Date: June 3, 2026  |  Last Revised: June 3, 2026

This Notice for California Consumers (“Notice”) describes the rights of California residents under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the “CCPA”). A summary of comparable rights for residents of Connecticut and other states appears in Section 7.

Upptik provides its full data practices for all users in its Privacy Policy. This Notice is provided to meet state privacy disclosure requirements and supplements that Privacy Policy.


1. Sale and Sharing of Personal Information

Upptik does not sell personal information.

Upptik also does not share personal information for purposes of cross-context behavioral advertising or targeted advertising, as those terms are defined under applicable law.

Personal information is disclosed only at a Member’s direction or as necessary to provide the Services. Examples include when a Member chooses to:

  • Share a Resumix using a shareable link

  • Make a Resumix visible to companies on the Services

  • Apply for a job using an Upptik resume application feature

  • Communicate with another Member through the platform

Because Upptik does not sell or share personal information, there is no separate “Do Not Sell or Share My Personal Information” opt-out mechanism beyond the controls Members have to manage Resumix visibility and sharing. If this ever changes, we will update this Notice and provide the required opt-out method before any such activity begins.

Sensitive personal information. Upptik does not sell or share sensitive personal information, including identity verification data, and does not use sensitive personal information to infer characteristics about you or for advertising.


2. Your Rights

California residents have the following rights, subject to certain legal exceptions. We describe how to exercise them in Section 2.9.


2.1 Right to Know

You may request information about the personal information we collected about you, including the categories of personal information collected, the sources of that information, the business or commercial purposes for collecting or disclosing it, and the categories of third parties to whom it was disclosed.


2.2 Right to Access and Portability

You may request a copy of the personal information we maintain about you, and, where applicable, in a portable, machine-readable format.


2.3 Right to Correct

You may request correction of inaccurate personal information. Many data elements can be edited directly through your Upptik account.


2.4 Right to Delete

You may request deletion of your personal information by closing your account or submitting a request, subject to legal exceptions (for example, security, fraud prevention, or compliance obligations).


2.5 Right to Limit Use of Sensitive Personal Information

The sensitive personal information we may collect includes: account login credentials and security data; for users who must verify their identity (such as employer administrators and team members), a government-issued identification document and number and a photograph (selfie), which may be processed as biometric information solely to confirm that it matches the identification document; the contents of messages you send through the Services; and any optional profile information you choose to provide.

We use sensitive personal information only for purposes permitted by law, such as providing the Services you request, verifying identity, protecting the safety of minors, operating messaging, maintaining security, preventing fraud, and meeting legal obligations. We do not use it to infer characteristics about you and we do not use it for advertising. While the law does not require a separate limitation control where use is limited to these purposes, you may still ask us to limit our use of your sensitive personal information, or ask any question about it, by contacting us as described in Section 2.9.


2.6 Right to Opt Out of Sale, Sharing, and Targeted Advertising

As stated in Section 1, Upptik does not sell or share personal information and does not use it for cross-context behavioral or targeted advertising, so there is nothing to opt out of at this time. We will provide an opt-out method if our practices change.


2.7 Non-Discrimination

Upptik will not discriminate against you for exercising your privacy rights. We do not offer financial incentives in exchange for your personal information.


2.8 Minors

The Services are not intended for individuals under age 14. Upptik does not sell or share personal information at all, and does not knowingly sell or share the personal information of consumers under age 16. For known minors, we do not process personal information for targeted advertising or sell it, and we apply additional protections consistent with applicable law.


2.9 How to Submit a Request

You may submit a request to know, access, correct, delete, or to limit the use of sensitive personal information, by emailing info@upptik.com, or by using the account tools described in our Privacy Policy (for example, the in-account delete option). We will acknowledge your request and respond within the time required by law, generally within 45 days, and may extend that period where permitted by providing notice. We will take reasonable steps to verify your identity before acting on a request, and we will not charge a fee unless your request is excessive or repetitive as allowed by law. You may use an authorized agent to submit a request on your behalf; we may require proof of the agent’s authorization and may still verify your identity directly.


2.10 Right to Appeal

If we decline to act on your request, you may appeal by replying to our decision or by contacting us at info@upptik.com with the word “Appeal” in your message. We will respond to your appeal within the time required by applicable law and will explain the reasons for our decision.


3. Categories of Personal Information We Collect and Sources

The table below summarizes the categories of personal information we may collect and the sources of that information, as defined under applicable law.

Category Examples Sources
Identifiers Name, email address, phone number, IP address, account identifiers Provided by the Member; generated through use of the Services
Characteristics of Protected Classifications Age, gender (if voluntarily provided) Provided by the Member; inferences based on profile information
Commercial Information Services purchased or considered; subscription and billing information Provided by the Member; interactions with the Services; payment processor
Internet or Network Activity Interactions with pages, features, or content Member use of the Services
Geolocation Data Approximate location only Device or network information
Professional or Educational Information Resume content, education, work history Provided by the Member; information shared by other Members
Audio, Electronic, or Visual Information Mentorship session recordings and transcripts (where enabled) Generated through participation in the Services
Sensitive Personal Information Account login credentials and security data; a government-issued identification document and number and a photograph (selfie), which may be processed as biometric information to verify identity for certain roles; the contents of messages sent through the Services; optional profile data you choose to provide Provided by the Member; our third-party identity verification provider; generated through use of the Services


Retention

We retain personal information only for as long as reasonably necessary for the purpose it was collected or to comply with legal obligations. We apply the following general criteria by category:

  • Account, profile, and professional or educational information: retained while your account is open and for a limited period after closure, as described in our Privacy Policy.

  • Identity verification data (government-issued ID and selfie): retained only for the limited period needed to confirm identity, resolve any disputes, and meet legal obligations, and deleted thereafter.

  • Employer and student application communications: retained for at least the period required by applicable law (for example, employment recordkeeping rules), even after a message thread is archived.

  • Mentorship session recordings and transcripts, and safety-related logs: retained for limited periods under our retention practices and routinely deleted, unless preservation is reasonably necessary for safety, compliance, or legal purposes.


4. Categories of Personal Information Disclosed

Upptik may disclose the categories of personal information listed above to:

  • Other Members, when you choose to share content or communicate

  • Service providers who support platform operations, including our payment processor and our identity verification provider

  • Authorized institutional partners only where permitted by law and based on user direction or consent

  • Government or regulatory authorities when required by law

Upptik does not disclose sensitive personal information for advertising purposes. Identity verification data is disclosed only to our identity verification provider for the purpose of confirming identity, and is not used for any other purpose.


5. Business Purposes for Collection and Disclosure

Personal information may be collected and disclosed for the following business purposes:


5.1 Providing and Operating the Services

Including account creation, mentorship features, Resumix functionality, messaging, and user communications.


5.2 Security and Integrity

Detecting, preventing, and investigating security incidents, fraud, or policy violations.


5.3 Identity Verification and Safety of Minors

Confirming the identity of certain users, such as employer administrators and team members, before they can interact with students, including students under 18.


5.4 Service Improvements

Debugging, improving functionality, and conducting internal research.


5.5 Legal and Compliance Obligations

Responding to lawful requests, enforcing our terms, retaining records where required by law, and protecting rights and safety.


5.6 Member-Directed Sharing

Disclosures made at a Member’s direction, such as sharing a Resumix or applying for a job.


6. Institutional and Business Use

Upptik allows organizations such as schools, colleges, employers, and nonprofits (“Institutional Users”) to create public-facing Business Pages.

  • Institutional Users do not receive access to individual Members’ personal information unless explicitly authorized by the Member or through a separate agreement compliant with applicable law.

  • Schools do not provide student data to Upptik. Students create their own accounts and control the information they share. Where a school sets feature permissions, those permissions apply only to students who join through that school, not to users who register independently, including college students and applicants who sign up on their own.

  • Residents’ rights under applicable state privacy law apply regardless of interactions with Institutional Users.

To participate in community features, Institutional Users must act through individual Members who are subject to Upptik’s Terms of Service and Privacy Policy.


7. Residents of Connecticut and Other States

Residents of Connecticut and certain other states have privacy rights similar to those described above, including the right to access, correct, delete, and obtain a portable copy of their personal data, the right to opt out of the sale of personal data and of targeted advertising and certain profiling, and, for sensitive data, protections on its use. Because Upptik does not sell personal data or use it for targeted advertising, those opt-out rights are satisfied by our practices as described in this Notice.

Connecticut residents, and residents of other states that provide this right, may appeal a decision on a privacy request as described in Section 2.10. If your appeal is denied, you may contact your state Attorney General.

Federal protections. Upptik’s practices are also designed to be consistent with applicable federal laws, including the Children’s Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). The Services are intended for users age 14 and older, and Upptik does not collect education records from schools or process them on a school’s behalf unless governed by a separate written agreement. See our Privacy Policy for details.


Contact

To exercise your rights, submit an appeal, or ask questions about this Notice, contact us at info@upptik.com. You may also use the account tools described in our Privacy Policy.