TechLift Privacy Policy

Last updated: April 4, 2026 — Effective immediately.

TechLift is operated by StanHattie LLC. We are committed to protecting your privacy. Workers' data is never sold. You control your profile visibility. This policy explains what we collect, how we use it, and your rights.

1. What We Collect

  • Account information: Name, email address, and password hash when you register.
  • Profile data: Job title, skills, work history, rates, availability, and any links you provide (GitHub, LinkedIn, portfolio).
  • Usage data: Pages visited, API requests, and session tokens stored in an HttpOnly cookie.
  • Communication data: Messages you send through the platform or to our support team.
  • Payment data: Subscription status and Stripe customer ID. We do not store full card numbers - Stripe handles payment processing.
  • GitHub data (optional): Public repository metadata if you connect your GitHub username for skills assessment.

2. How We Use It

  • To create and maintain your account.
  • To generate your AI skills assessment and composite score.
  • To match workers with relevant projects and businesses.
  • To send transactional emails (verification, matches, notifications). You can opt out of non-essential emails at any time.
  • To improve our matching algorithms and product features.
  • To comply with legal obligations.

3. Data Sharing

We do not sell your data. We share data only in these limited circumstances:

  • With businesses you match with: Your public profile fields (name, headline, skills, score, rates, availability) are shown to businesses you are matched with. Your email is never shared without your consent.
  • Service providers: Resend (transactional email), Stripe (payments), Railway (hosting). Each is bound by a data processing agreement.
  • AI processing: Profile text may be sent to Anthropic's Claude API to generate skills assessments and narratives. No personal identifiers are included beyond what you explicitly provide in your profile.
  • Legal requirements: We may disclose data if required by law or to protect the rights and safety of TechLift and its users.

4. Your Rights

  • Access: You can view all profile data from your dashboard at any time.
  • Correction: Edit your profile to correct any inaccurate information.
  • Visibility control: You control whether your profile appears in public search results via your availability setting.
  • Deletion: Email us to request account deletion. We will remove your personal data within 30 days, except where retention is required by law.
  • Portability: Request a copy of your data by emailing us.
  • Opt out of emails: Use the unsubscribe link in any email or contact us directly.

5. Cookies & Sessions

We use a single session cookie (techlift_session) to keep you logged in. It is HttpOnly, Secure in production, and expires after 30 days. We do not use third-party tracking cookies or advertising cookies.

6. Data Security

Passwords are stored as salted hashes (PBKDF2-SHA256). Session tokens are cryptographically random (48 bytes). All production traffic is encrypted via HTTPS. We follow reasonable security practices but no system is 100% secure - if you discover a vulnerability, please email us immediately.

7. Contact

For privacy questions, data requests, or to report a concern:
Email: hello@techlifthq.com
Physical address: StanHattie LLC, Waukee, IA 50263
Phone: (833) 278-5002