Privacy Notice — UpStar Tech Pte. Ltd.
Effective: 26 June 2026 | Last updated: 26 June 2026
UpStar Tech Pte. Ltd. (UEN 202545869M), registered at 160 Robinson Road #24-09, SBF Center, Singapore 068914 ("UpStar", "we") operates upstars.ai. This notice explains what personal data we collect, why, and your rights under the Singapore Personal Data Protection Act 2012 (PDPA) and the EU General Data Protection Regulation (GDPR) where applicable.
Data we collect
- Account: email, full name, role (candidate/employer/admin), authentication tokens.
- Candidate profile: target role, skills, experience records, education, certifications, references, comp expectations, resume content, optional avatar, optional government ID for identity verification.
- Employer profile: organisation, role, contact details.
- Usage: page views, feature interactions, IP address, browser type, session telemetry.
Why we collect it
- Operate the Skill Wallet platform and match candidates to roles.
- Verify candidate identity and qualifications (where opted in).
- Send transactional communications (verification invites, weekly digests, account updates).
- Improve product quality and detect abuse.
- Comply with legal obligations in Singapore and other jurisdictions.
Third-party processors
We rely on a small set of vetted service providers to operate UpStar. Each is contractually bound to process data only as needed to deliver its service, under appropriate confidentiality and data-protection terms. The categories of processors we use are:
- Cloud hosting & database — secure storage of account, profile, and scoring data
- AI inference providers — resume parsing, role-fit evaluation, and Copilot queries (no personally identifying data is sent to AI providers; see Data minimisation below)
- Email delivery — transactional emails
- Identity verification — government ID and selfie checks, only when a candidate opts in
- Scheduling — interview booking
- Product analytics — usage telemetry
- Error monitoring — diagnostics with personal-data scrubbing
- Customer relationship management (CRM) — employer enquiries
- Social sign-in — optional single sign-on
- Job-listing ingestion — importing publicly available job postings
- Content delivery network (CDN) — secure, reliable site delivery
A current list of our named sub-processors is available to customers and data subjects on request at career@upstars.ai.
Data minimisation
Personally identifying details (email, full name, phone number, government ID) are never sent to AI inference providers. Our Copilot service extracts search filters from your queries and runs them against an anonymised candidate index.
Your rights
Under PDPA (and GDPR where applicable) you may: access your data, correct it, withdraw consent, request deletion, and complain to the Singapore PDPC. Email career@upstars.ai for any request.
Retention
Active accounts: retained while the account is active. Inactive candidate accounts: 24 months from last sign-in, then anonymised. Verification documents: 90 days after verification completes, then deleted from our identity-verification provider.
Changes
We will publish updates here and notify active users by email for material changes.
Contact
career@upstars.ai — UpStar Tech Pte. Ltd., 160 Robinson Road #24-09, SBF Center, Singapore 068914.