User Profiles & Account Management APIs

​

Overview

​

Base URL

https://talentg.vercel.app/api

​

Authentication

Authorization: Bearer <supabase_jwt_token>
Content-Type: application/json

​

Profile Management

​

Get User Profile

​

Update Profile

​

Update Profile Picture

​

Account Settings

​

Update Preferences

​

Change Password

​

Account Verification

​

Send Email Verification

​

Verify Email

​

Account Management

​

Delete Account

​

Export Account Data

​

Check Export Status

​

Admin Operations

​

Admin Update Profile

​

Privacy & Data Protection

​

Data Retention

• Active accounts: Data retained indefinitely
• Deleted accounts: Data retained for 30 days, then anonymized
• Suspended accounts: Data retained for 90 days before deletion
• Exported data: Available for download for 7 days

​

Data Processing

• GDPR: General Data Protection Regulation (EU)
• CCPA: California Consumer Privacy Act (US)
• PDP Bill: Personal Data Protection Bill (India)

​

User Rights

• Access: View all their personal data
• Rectification: Correct inaccurate data
• Erasure: Request data deletion (“right to be forgotten”)
• Portability: Export data in machine-readable format
• Restriction: Limit data processing
• Objection: Object to data processing for marketing

​

Error Handling

​

Common Error Codes

​

Error Response Format

{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Invalid profile data",
    "details": {
      "field": "phone_number",
      "message": "Phone number format is invalid"
    }
  }
}

​

Rate Limiting

• Profile reads: 100 requests per hour per user
• Profile updates: 20 requests per hour per user
• Password changes: 3 requests per hour per user
• Email verification: 5 requests per hour per user
• Data exports: 1 request per day per user

​

SDK Examples

const updateProfile = async (profileData) => {
  const token = await getSupabaseToken();

  const response = await fetch('/api/user-profile/user_123', {
    method: 'PUT',
    headers: {
      'Authorization': `Bearer ${token}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify(profileData)
  });

  return response.json();
};

// Usage
const result = await updateProfile({
  full_name: "John Doe Jr.",
  profession: "Senior Software Engineer",
  company: "Tech Corp India"
});

​

Security Best Practices

​

Password Requirements

• Minimum 8 characters
• At least one uppercase letter
• At least one lowercase letter
• At least one number
• At least one special character

​

Session Management

• Automatic logout after 30 minutes of inactivity
• Single session per user (new login invalidates old sessions)
• Secure token storage and transmission

​

Data Encryption

• All sensitive data encrypted at rest
• TLS 1.3 for data in transit
• Secure password hashing with bcrypt
• Token encryption with industry standards