Privacy Policy

Goldmine does not ask for your Upwork password and does not store your payment instrument details. We collect the minimum account, billing-reference, extension-state, usage, and support data needed to run a paid browser extension with synced productivity features.

Your Pursuit Board and notes can contain job-related information you type or choose to save. Please do not place sensitive personal data, client secrets, passwords, payment details, or confidential material in notes, feedback, or feature suggestions.

We do not sell your personal data. We do not use your Upwork browsing activity for advertising or unrelated monetization.

The optional ChatGPT/MCP connection is separate from the Chrome extension. If you do not connect and use it, Goldmine does not receive MCP tool requests from that AI host. A Goldmine subscription does not include, control, or increase the limits of your ChatGPT plan or another AI host.

• Sign you in and keep your Goldmine access active across sessions.
• Record proof that you accepted the Terms, Privacy Policy, and essential service email notice.
• Start trials, manage subscriptions, show billing history, process cancellations, and process eligible refunds.
• Sync your Pursuit Board, notes, settings, history, and weekly goals across signed-in sessions.
• Show run-specific summaries, aggregate history, and limited community/product activity.
• Troubleshoot bugs, prevent abuse, secure the service, improve performance, and understand which features help users.
• Operate, secure, and rate-limit optional ChatGPT and other MCP connections; return the requested Goldmine result to the AI host you chose.
• Send service emails such as OTP/login, trial activation, complimentary access, subscription, cancellation, refund, and critical product or security notices.

Depending on where you live, privacy laws may call us a data fiduciary, controller, business, or service provider. In simple terms, Imayan Digital LLP decides why Goldmine data is processed and our providers process it for us.

Goldmine reads job and client information that is visible to you in your browser while you use Upwork. When you check one supported card, the extension reads that card, opens its job-details view, and presents the decision in that details view. When you start a batch filter run, the extension may adjust the visible search-results view and open visible job details in sequence so it can apply the selected signals. It uses that information to show Goldmine decisions, restore context, and keep your Pursuit Board useful.

We do not ask for your Upwork login password. We do not claim ownership of Upwork content. You are responsible for using Goldmine in a way that respects Upwork's terms and any confidentiality duties you owe to clients.

Goldmine is not designed to collect sensitive personal data such as health information, biometric data, government identity numbers, financial account credentials, precise personal documents, or private client secrets. If you type that kind of information into notes, feedback, or suggestions, you are choosing to provide it even though we ask you not to. We may delete such content if we find it.

Notes and feature suggestions are meant for lightweight productivity. Examples include proposal angle, proof points, invite count, client last seen, or a reminder. Do not add private client documents, secret business information, health data, government IDs, passwords, or payment data.

If you submit feedback or a feature suggestion, we may review it to improve Goldmine, troubleshoot issues, prioritize features, and understand whether a run was useful.

If you voluntarily connect Goldmine in ChatGPT or another supported MCP client, that client may send us the instruction, relevant context it chooses to provide, connection information, and tool inputs needed to perform the requested Goldmine action. We return the tool result to that client so it can show you a response. This may include saved pursuit details, selected job information, review results, filters, or a proposal workspace when your request requires it.

Do not put passwords, payment details, government IDs, health information, private client documents, confidential material, or other content you are not authorised to disclose into an AI-host request. We do not use your Upwork job content, Pursuit Board, notes, or MCP transcript to train a general-purpose AI model. An AI host is independently operated: its retention, model-improvement, account, and privacy settings are governed by its own terms and privacy notice, not this Policy.

You can disconnect Goldmine from the host using that host's available app or account controls. This stops future host requests, but does not automatically erase Goldmine data already stored to provide the service or meet our legal, billing, security, and retention duties. Use the rights described below to request access, correction, or deletion of Goldmine-held data.

Goldmine uses rules and signals to highlight jobs that may deserve your attention. It does not make final decisions for you, submit proposals, spend connects, accept contracts, contact clients, or make decisions with legal or similarly significant effect. You remain responsible for reviewing every job and deciding what to do.

We do not sell your personal data. We use trusted service providers to operate Goldmine:

We may also disclose data if required by law, court order, payment dispute, fraud investigation, security incident response, or to protect our rights, users, or the service.

This can include sharing relevant transaction, subscription, invoice, refund, cancellation, support, and product-access records with Razorpay, banks, card networks, auditors, payment providers, or authorities when needed to process payments, handle refunds, respond to disputes or chargebacks, investigate fraud, or meet legal and payment-provider requirements.

When you use the optional ChatGPT/MCP connection, sending the requested tool result back to that host is necessary to provide the feature. We do not give an AI host unrestricted access to your Goldmine account. The request, Goldmine tool scopes, your connected account, and the host's available permission controls limit what the host can request or receive.

We do not sell personal data. We do not share personal data for cross-context behavioral advertising. We do not use Upwork browsing activity, job content, notes, or Pursuit Board data for ad targeting. If this changes, we will update this policy and provide any legally required choices before doing so.

We send service emails needed for account access and billing, such as OTP/login, trial activation, complimentary access, subscription confirmation, cancellation, refund, and important security or product notices. We do not use service emails as a place for unrelated marketing.

When you request an OTP login, the Terms and Privacy checkbox is unchecked by default and must be selected before the code is sent. After a successful login, we may store a consent event as evidence that you accepted the current legal version and service email notice.

We may record a consent event on repeat logins too, not only on first signup. This helps prove the latest acceptance if the legal text changes, if you sign in from another device, or if there is a future dispute. Consent records are used for compliance, security, audit, and dispute handling, and may be retained longer than ordinary product usage data where legally necessary.

Goldmine uses browser storage for fast local performance and may sync signed-in extension state to our backend so your board, settings, and history can survive refreshes and be available across signed-in sessions. Logging out clears account access from the extension, but synced backend records may remain until deleted under this policy.

We use HTTPS, token-based authentication, server-side validation, limited API payloads, database access controls, and provider security features. No system is perfectly secure. If you believe your account or data is at risk, contact us immediately.

Goldmine's use and transfer of information received through Chrome extension APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use extension data only to provide or improve the user-facing Goldmine features described in this policy, maintain security, and meet legal obligations. We do not use it for advertising, credit decisions, or unrelated profiling.

We do not routinely read synced job content, Pursuit Board entries, or private notes. Human access is limited to cases where you explicitly ask for support and consent to the access, where it is necessary to investigate abuse or a security incident, or where access is required by law. Feedback and feature suggestions you intentionally submit may be reviewed by us.

Unfinished proposal workspaces remain saved until you choose to archive or delete them, subject to account deletion and the other exceptions below. The standard allowance is 10 active workspaces, five recent revisions plus versions needed by an active prefill, and 512 KiB of content per workspace. A seven-day approval expiry blocks an old approval from being used for prefill; it does not remove your saved draft. Older revisions are removed as new ones are saved under the displayed allowance.

After you archive a proposal or confirm it was submitted, its content is scheduled for removal after 90 days. The date is shown when you take that action and in Saved proposals, with a reminder in the final seven days. Export or restore before that date to keep the content. Explicit permanent deletion removes the workspace and its associated command-content copies from our active database. It does not delete your ChatGPT conversation, an Upwork form or submitted proposal, or copies you exported. Those are controlled by you and their respective providers.

Completed, failed, cancelled and expired command payloads that are no longer needed by a retained proposal are reduced to minimal status receipts after 30 days. Detailed command receipts and product diagnostic events are retained for 90 days; compact activity totals may be retained longer. Active requests and their delivery-recovery window are excluded from scheduled cleanup. Cleanup runs on a schedule and may be delayed by outages; expiry is not a guarantee of deletion at an exact second. The browser progress panel stores only a short-lived, account-scoped status receipt, not a copy of your conversation or proposal text. It cannot observe an AI host's internal reasoning.

We keep account, billing-reference, access, refund, and compliance records as long as needed to operate Goldmine, resolve disputes, meet tax/accounting/legal duties, and prevent abuse. Extension state, board data, notes, and settings are kept while your account is active unless you ask us to delete them, subject to legal or fraud-prevention needs. Aggregated or de-identified analytics may be kept longer.

If you ask us to delete your account, we will remove or de-identify active product data that is no longer needed for Goldmine. Some records, such as payment references, refund records, consent evidence, security logs, support history, and records needed for tax, accounting, fraud prevention, or legal claims, may be retained for the period reasonably required by law or legitimate compliance needs. Backups and provider logs may clear on their normal retention cycles rather than instantly.

Payment, invoice, refund, cancellation, consent, support, security, and dispute records may be retained longer than active product data, including up to 10 years where needed for payment-network, Razorpay or banking partner, tax, accounting, regulatory, fraud-prevention, or legal reasons.

Goldmine is operated from India and uses cloud providers that may process data in India, the United States, or other countries where their infrastructure or subprocessors operate. By using Goldmine, you understand that your data may be processed outside your country.

Goldmine is for freelancers and business users. It is not intended for children or users who are not legally able to use paid software services in their jurisdiction. We do not knowingly collect data from children. If you believe a child used Goldmine, contact us so we can review and delete the account where appropriate.

You may ask us to access, correct, export, or delete account-related data by writing to upwork-goldmine@muyal.online. We may need to verify your email before acting. Some records may be retained where required for billing, tax, legal, security, fraud-prevention, or dispute reasons.

Depending on where you live, you may also have rights to withdraw consent, object to certain processing, restrict processing, request portability, know categories of data collected, opt out of sale or sharing where applicable, avoid discrimination for exercising privacy rights, or raise a grievance. Because we do not sell or share personal data for advertising, there is currently no sale/share opt-out to exercise.

You can also disconnect Goldmine from an optional ChatGPT or other MCP client through that client's controls. For information, deletion, or privacy choices concerning the AI host's own conversation data, use that host's privacy controls and support routes.

We are a small team, so privacy requests are handled carefully through the support email rather than instant automated deletion. We aim to acknowledge and respond within the timeframe required by applicable law. If a request is complex, repetitive, unclear, unusually broad, or arrives during an unusually high support volume, we may ask for clarification, verify identity, or use any lawful extension period while keeping you informed.

For privacy requests, correction/deletion requests, consent withdrawal requests, or grievances, write to upwork-goldmine@muyal.online. We will review the request and respond as required by applicable law. Please use the email address connected to your Goldmine account where possible, because that helps us verify the request safely. If you are in India, please contact us first so we have an opportunity to address your grievance.

We may update this Privacy Policy as Goldmine evolves. If a change is material, we will make a reasonable effort to notify users through the website, extension, or email.

For privacy requests or product support, contact upwork-goldmine@muyal.online.