Uplateral is headquartered in the United States and serves companies and individuals worldwide. This policy covers how we collect, use, and protect your information.

01. What We Collect

What you give us directly
When you create an account or use our Services, you may share your name, email address, payment and billing details, account credentials, and any messages you send us.

What we collect automatically
When you use our Services, we collect your IP address, browser type, device information, pages visited, session duration, navigation paths, and referring URLs. We collect this through cookies and Google Analytics.

02. How We Use It

We use your information to deliver and improve our Services, process transactions and send confirmations and invoices, keep you informed about security and support, send marketing communications where permitted by law (you can opt out at any time), understand how the product is being used so we can make it better, detect and prevent fraud or abuse, and meet legal obligations wherever we operate.

03. Legal Bases for Processing

For users in the EEA, UK, and regions with equivalent data protection laws, we process your information under one of the following legal bases.

Contract
Processing necessary to deliver the Services you requested.

Legitimate interests
Analytics, fraud prevention, and product improvement, weighed against your rights.

Consent
Where you have explicitly agreed, such as for marketing. You can withdraw consent at any time without affecting anything that was processed before that withdrawal.

Legal obligation
Where required by applicable law.

04. Who We Share It With

We do not sell your personal information.

Service providers
We share data with Stripe for payment processing and Google Analytics for usage analytics. Both are contractually required to use your data only as we direct. You can review their policies at stripe.com/privacy and policies.google.com/privacy.

Legal and safety
We may disclose information when required by law, valid legal process, or to protect the safety of our users or the public.

Business transfers
If Uplateral is involved in a merger, acquisition, or asset sale, your information may be part of that transition. We will notify you before it happens.

International transfers
Your data may be processed in the United States or in other countries where our service providers operate. For transfers from the EEA or UK, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

05. Cookies

We use cookies and similar tracking technologies to understand how people use Uplateral and to keep certain features working correctly. You can manage or turn off cookies through your browser settings. Where required by law, we ask for your consent before setting anything beyond what is strictly necessary. Turning off certain cookies may affect how our Services function.

To opt out of Google Analytics, use Google's opt out browser add on at tools.google.com/dlpage/gaoptout.

06. Data Retention

We keep your information for as long as your account is active or as needed to deliver our Services. We also hold onto data where required by law, to resolve disputes, or to enforce agreements. When we no longer need it, we delete or anonymize it.

07. Your Rights

All users
You can request a copy of the information we hold about you, ask us to correct anything that is inaccurate or incomplete, request deletion of your personal information, and opt out of marketing communications at any time by using the unsubscribe link in any email or reaching out through our contact page.

EEA and UK users (GDPR and UK GDPR)
You also have the right to data portability, the right to restrict how we process your information, the right to object to processing based on legitimate interests, and the right to file a complaint with your local data protection authority.

California residents (CCPA)
You have the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

We respond to all rights requests within the timeframe required by applicable law and no later than 30 days.

08. Children

Our Services are not built for children under 13, or a higher age where local law requires it. We do not knowingly collect personal information from anyone below the applicable threshold. If you believe we have, contact us and we will delete it promptly.

09. Third Party Links

Our Services may point to third party websites. We are not responsible for what those sites do with your information. Check their policies before handing anything over.

10. Changes to This Policy

This policy will evolve as our Services grow and as laws change. We will flag material updates with a new effective date and, where appropriate, an email notification. Continued use of our Services after changes are posted means you accept what is updated.

11. Contact

Questions, concerns, or a rights request? Reach us directly through our contact page at uplateral.com/contact.

Uplateral is headquartered in the United States. EEA and UK users may also escalate to their local data protection authority if they feel their rights have not been adequately addressed.