Privacy

Privacy Policy

Version 1.0 · Effective 2026-01-01

DRAFT. Pending legal review. This text is a placeholder skeleton. Counsel-reviewed language will replace it before general availability. Do not treat this document as a final legal notice.

1. Who we are

GridLink Partners LLC ("GridLink", "we", "us") operates a platform that helps skilled tradespeople find training and employment. This policy explains what we collect from tradespeople who use the app, why, and what rights you have over that data.

2. What we collect

  • Account: email, date of birth (for the 18+ gate), sign-in provider (Google / email link), authentication tokens.
  • Profile: name, phone, city, state, ZIP, trade, skills, experience, license status/number, credentials, work preferences, resume (if you upload one), free-form notes.
  • Trade Path: the personalized training and pay information generated from your profile.
  • Consent history: what you agreed to and when, tied to the policy version in effect.
  • Operational logs: onboarding events, request metadata, error reports.

3. Why we collect it

  • To build and show you a Trade Path tailored to your situation.
  • To connect you with training programs and employers only when you turn on partner sharing.
  • To operate the service (sign-in, security, abuse prevention, support).
  • To comply with law and enforce our Terms.

4. How it's stored

Data is stored in our managed database and file storage, both access-restricted at the row level so a user can only read and write their own records. Uploaded resume files live in a private bucket keyed to your user ID. We use encryption in transit (HTTPS) and at rest via our infrastructure providers.

5. Third parties & subprocessors

We use the following processors to run the service. Each handles only the data listed and cannot use it for their own purposes.

ProviderPurposeData
SupabaseDatabase, authentication, and file storageAccount, profile, credentials, resume file
LovableApplication hosting and deliveryRequest logs, cached assets
Cloudflare TurnstileBot/abuse protection on sign-inIP address and challenge token (short-lived)
Google Gemini (AI Gateway)Resume summarization when you opt inText extracted from the resume you upload
Email delivery providerSign-in links and account noticesEmail address, message contents

We do not sell your personal information. We only share it with training programs and employers ("partners") when you have explicitly enabled partner sharing in your account.

6. Your rights

  • See and export: download a JSON copy of your profile, credentials, Trade Path, and consent history from Manage Privacy & Sharing.
  • Edit or correct: update any field from your profile at any time.
  • Turn off sharing: switch partner sharing off. We call this "Do Not Sell or Share My Personal Information".
  • Delete: permanently delete your account and related data (see section 8).

7. Retention

We keep your account data as long as your account is active. If you delete your account, we remove your profile, resume file, credentials, Trade Path, and consent records. We retain a minimal audit record (an event ID and timestamp with no personal data) so we can prove the deletion happened.

8. Deletion

Delete your account from Manage Privacy & Sharing. Deletion is immediate and hard: your profile row, tradesperson profile, skills, credentials, Trade Path, resume file, and onboarding events are removed, and your authentication user is deleted so you can no longer sign in.

9. Contact

Questions or requests: privacy@gridlink.example. We will replace this address with a real one at launch.

This policy is versioned. When we change it materially, we update the version number and ask you to agree again the next time you sign in.