Last Updated: January 30, 2026
WinOnUp (“we,” “us,” or “our”) operates the WinOnUp website and application (the “Service”). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Service.
By using WinOnUp, you agree to the collection and use of information in accordance with this policy.
First and last name
Email address
Encrypted password
Account preferences and settings
When you connect your Upwork account, we access data you authorize through the Upwork API, including:
Profile information (headline, bio, skills, rate, job success score)
Job postings you view or save
Proposal and contract metadata
Message room identifiers and related metadata
We only access data necessary to provide the Service on your behalf.
Search keywords and filters
Proposal generation activity
Login activity and usage streaks
Feature interaction and settings
All payments are processed by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription status for account management.
We may use cookies and similar technologies to:
Maintain secure sessions
Understand how users interact with the Service
Improve performance and usability
This may include tools such as Google Analytics or similar services.
We use your information to:
Provide and maintain the Service
Retrieve relevant Upwork data at your request
Generate AI-powered proposal suggestions using OpenAI
Track proposal metrics and performance
Process subscriptions and billing
Send transactional emails (e.g., password reset)
Improve and optimize the Service
We process your information to:
Fulfill our contractual obligations to provide the Service
Comply with legal requirements
Improve the Service
Provide features you request
By using WinOnUp, you consent to this processing.
Sensitive credentials, including Upwork access tokens, are encrypted using AES-256-GCM before storage. Tokens are never stored or displayed in plain text.
In compliance with Upwork API policies, we cache Upwork content (such as job descriptions and proposal metadata) for no longer than 24 hours. After this period, cached content is automatically purged while retaining minimal identifiers for analytics.
Account data is retained while your account is active
You may request deletion at any time
Upon account deletion, your data is permanently removed from our systems
We use trusted third-party providers to operate the Service:
Upwork API — to access your Upwork data with your authorization
OpenAI — to generate proposal suggestions
Stripe — to process payments
Email delivery providers for transactional messages
Analytics providers for usage insights
OpenAI processes job descriptions solely to generate responses and does not use this data to train its models.
Your data may be processed on servers located outside your country of residence by these providers.
We do not:
Sell your personal data
Share your Upwork data for advertising
Use your data for marketing profiling
We may share limited data:
With service providers necessary to operate the Service
If required by law or legal process
To protect our rights and users
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your account and data
Export your data
Opt out of non-essential communications
Requests can be made by contacting us.
WinOnUp is not intended for individuals under the age of 18. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or through the Service.
If you have questions about this Privacy Policy, contact:
