Privacy Policy

Effective 18 September 2026

QuickLift Academy (quicklift.academy) is operated by Ortomate Ltd (NZBN 9429052636967), a company registered in New Zealand. This policy explains what personal information we collect, why we collect it, how we store it, and the choices you have. We keep it short because our data practices are simple.

Optional personal homepage

Before creating an account, you can add a LinkedIn profile PDF or enter a few details to personalise the homepage. The PDF is read in your browser. You can review and edit the extracted text before continuing. When you choose “Personalise with AI”, the confirmed details and profile text shown in that form are sent to QuickLift and OpenAI to write your personal page. The PDF file itself stays on your device. We do not save this pre-signup profile text or the generated page in our database or deliberately include them in application logs.

Choosing “Keep my profile & continue” saves the profile text, selected direction and your starting notes in this browser so they can follow you through signup. This draft expires after 24 hours. Expired drafts are ignored and removed when you next open the homepage or continuation page; browser storage can remain on the device until then. You can clear a saved draft on the homepage. After you sign in or confirm your email in the same browser, we save the profile and notes in your private account and remove the local draft. The account’s normal AI profile processing then applies. This does not automatically create an account or subscribe you to emails.

We use a one-day essential preview cookie and short-lived request counters to limit abuse and AI costs. The counters contain keyed, daily hashes of a session identifier and network address, not profile text or raw IP addresses. They expire after two days and are removed on a subsequent preview request. Our hosting provider may also process standard request information as part of operating the service.

Optional career conversations and notes

You can save a starting direction and an optional role description in your private account before a conversation. We carry that role into your pathway. The call form shows the exact starting notes shared with Nosie; long role descriptions are excerpted and you can edit or remove the excerpt. These drafts are included when you delete your learning data.

After signup, you can write career notes or request a five-minute call from Nosie, an AI voice assistant also operated by Ortomate Ltd. The call is optional and currently available to adults in New Zealand, Australia and the United States. We share your chosen name, phone number, country, time zone and only the starting notes shown in the call form. We do not send your PDF or full account history.

Nosie uses ElevenLabs and telephony providers to conduct and transcribe the conversation. The call begins with an AI and transcription disclosure and asks for permission to continue. There may be up to three attempts between 9am and 8pm in the time zone you select. You can stop future QuickLift calls through the conversation page. A call already connecting may still reach you.

QuickLift saves a record of your consent and receives draft fields about your experience, preferences, direction and practical needs. It does not save the full transcript or call audio. You review and can correct the draft before saving notes to your private account. Saved notes can inform later pathways and courses, including processing by OpenAI. Wishes about future work are kept distinct from examples of experience.

QuickLift retains your saved notes until you edit, clear or delete them. The Nosie integration requires a 30-day interview-content retention setting. Provider copies can remain for up to 90 days. Contact details, starting context, consent and opt-out records are separate from interview-content retention. Deleting QuickLift data stops future calls and removes our copy of career notes; it does not automatically erase Nosie’s separate records. For removal of interview content or other records held by Nosie, contact hello@nosie.app. Minimal opt-out records may need to remain to honour your request. See Nosie’s privacy policy.

1. What we collect

  • Account data. Your email address and password, managed through Supabase authentication. Passwords are stored hashed; we never see them in plain text.
  • Profile documents. The LinkedIn export or CV PDFs you upload to your account, text you paste there, and the work history and capabilities we extract from them. These are personal career data and we treat them as such — see storage and sharing below.
  • Role descriptions. The target role descriptions, goals, additional experience and practical constraints you provide for analysis.
  • Product data. The gap analyses, Quick Lift lessons, quiz results, practice submissions, reflections, and certificates generated for your account.
  • Payments. Stripe processes all card payments. QuickLift Academy never stores your card number — we receive only a payment confirmation, the amount, and the email associated with the purchase.
  • Emails. We send transactional email only — account confirmations, receipts, and service notices. We do not add you to marketing lists.

2. AI processing

QuickLift Academy's analyses are generated using OpenAI's API. This includes the optional personal homepage and processing a profile you carry into your account. When you request a gap analysis or Quick Lift, the text extracted from your profile documents and the role description you pasted, together with the goals, experience and constraints you provide, are sent to OpenAI to generate the analysis, learning plan, and quiz content. We send only what is needed to produce your result, and we do not use your data to train our own models.

Personal homepage requests use OpenAI’s API with response storage disabled. This does not mean that all provider retention is disabled; provider abuse monitoring and other applicable retention rules may still apply. See OpenAI’s API data controls.

We also verify that the learning resources linked in your Quick Lift actually resolve. This involves our servers fetching those third-party URLs; no personal information about you is included in those requests.

3. How we store your data

Your data is encrypted in transit (TLS) and at rest. Account data, extracted work history, role descriptions, and generated content live in a Supabase PostgreSQL database. Uploaded PDFs are kept in a private Supabase storage bucket that is not publicly accessible.

4. Who we share data with

We share data only with the service providers needed to run QuickLift Academy:

  • Stripe — payment processing
  • Supabase — database, authentication, and file storage
  • Vercel — website hosting
  • OpenAI — AI generation of personal homepages, profile summaries, analyses and learning plans
  • Amazon SES — delivery of transactional emails
  • Nosie, ElevenLabs and telephony providers — optional consented career conversations

We do not sell your personal information and we do not share it with advertisers.

5. Certificates and public sharing

Certificates are private by default. A certificate becomes publicly viewable only if you choose to share it. You can withdraw that choice at any time. A public certificate includes your name, course title, issue date and learning summary. It does not publish your profile or practice submissions. Copies you share elsewhere, including LinkedIn, must be removed there separately.

6. Cookies

We use no tracking or advertising cookies. Supabase sets an authentication cookie so you can stay signed in. The optional AI homepage uses the essential preview cookie described above. Browser storage is used for your starting profile only when you choose to carry it into signup.

7. Your rights and your controls

Under the New Zealand Privacy Act 2020 you have the right to access and correct the personal information we hold about you. We respond to requests within 20 working days.

You do not need to ask us for deletion: you can delete your uploaded documents, generated content, or your entire account directly from your account settings. The product confirms whether deletion succeeded. Cancel a renewing subscription before deleting your account.

8. Data retention

We keep your data for as long as your account exists so your analyses and certificates remain available to you. When you delete an item or your account, the associated QuickLift data is removed. Separate Nosie and voice-provider retention is explained above. Payment records are retained as required for tax and accounting purposes.

9. Children

QuickLift Academy is a professional tool and is not directed at people under 16. We do not knowingly collect information from children.

10. International transfers

Ortomate Ltd is a New Zealand company, but your data is processed on servers outside New Zealand, primarily in the United States, by the providers listed above.

11. Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes to how we handle your data will be flagged in the product or by email.

12. Contact and complaints

Questions or concerns: email hello@quicklift.academy. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner (Te Mana Mātāpono Matatapu) in New Zealand.