Privacy Policy

Last updated: March 16, 2026

This privacy policy applies between you, the User of this Website, and Uppset, the owner and provider of this Website. Uppset takes the privacy of your information very seriously. This privacy policy applies to our use of any and all data collected by us or provided by you in relation to your use of the Website.

Please read this privacy policy carefully.

Definitions and Interpretation

In this privacy policy, the following definitions are used:

• “Data” — collectively all information that you submit to Uppset via the Website, including personal information and account data.
• “Cookies” — a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
• “User” or “you” — any third party that accesses the Website and is not employed by Uppset and acting in the course of their employment.
• “Website” — the website https://uppset.com/ and any sub-domains unless expressly excluded by their own terms and conditions.
• “We”, “us”, “our” | Uppset.

What Data We Collect

We may collect the following Data, which includes personal Data, from you:

1. Account Information — name, email address, and password when you create an account.
2. Payment Information — payment details are processed and stored by Stripe. We do not store your full credit card number, expiration date, or CVC on our servers. We may receive and store limited payment information from Stripe, such as the last four digits of your card number, card brand, and billing address.
3. Usage Data — information about how you use the Website, including pages visited, features used, and time spent on the Website.
4. Device and Technical Data — IP address, browser type and version, operating system, and device type.
5. Communication Data — any information you provide when contacting us via email or other channels.

How We Collect Data

We collect Data in the following ways:

• Data you provide directly — when you create an account, subscribe to Premium, or contact us.
• Data collected automatically — through Cookies, analytics tools, and server logs when you use the Website.

How We Use Your Data

We use your Data for the following purposes:

1. To provide and maintain the Website and our services, including processing your Premium subscription.
2. To manage your account and provide customer support.
3. To process payments through Stripe.
4. To send you administrative communications, such as changes to our terms, conditions, or policies.
5. To analyze usage of the Website to improve our services and user experience.
6. To comply with legal obligations and enforce our terms and conditions.

We will not use your Data for marketing purposes unless you have explicitly opted in to receive marketing communications.

Who We Share Data With

We may share your Data with the following third parties for the purposes described in this policy:

We may engage additional third-party service providers to operate, maintain, and improve the Website. These providers are contractually obligated to use your Data only as directed by us and in a manner consistent with this privacy policy, and are not permitted to use it for their own independent purposes.

We do not sell, rent, or trade your personal Data to any third parties.

We may also disclose your Data if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Uppset, our users, or others.

Data Security

We use reasonable administrative, technical, and physical security measures to protect your personal Data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Payment information is handled by Stripe, which is PCI-DSS compliant. We do not store sensitive payment data on our servers.

Account data and subscription records are stored with Supabase, which provides industry-standard encryption at rest and in transit. Access to your data is protected by Row Level Security policies that prevent unauthorized access.

Data Retention

We retain your personal Data only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

• Account Data — retained for as long as your account is active. If you delete your account, your personal Data will be deleted within 30 days, except where we are required to retain it for legal purposes.
• Payment Records — retained as required for tax and accounting purposes.
• Usage Data — retained in anonymized form for analytics purposes.

Your Privacy Rights

You have the following rights regarding your Data:

1. Access — you have the right to request a copy of the personal Data we hold about you.
2. Correction — you have the right to request that we correct any inaccurate or incomplete personal Data.
3. Deletion — you have the right to request that we delete your personal Data, subject to certain exceptions.
4. Portability — you have the right to request a copy of your Data in a commonly used, machine-readable format.
5. Objection — you have the right to object to our processing of your personal Data in certain circumstances.

To exercise any of these rights, please contact us at support@uppset.com.

We will respond to your request within 30 days.

California Residents (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. Note: we do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

European Users (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract — processing your account information and subscription data is necessary to provide the service you have signed up for.
• Legitimate interests — we process usage and device data to improve the Website and maintain its security.
• Consent — we process analytics data (e.g. Google Analytics) only where you have given consent via our cookie banner. You may withdraw consent at any time using the Cookie Settings link in the footer.
• Legal obligation — we may retain certain data (such as payment records) to comply with tax and accounting obligations.

Your GDPR Rights

In addition to the rights described in the “Your Privacy Rights” section above, EU/UK residents have the right to:

• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a complaint — you have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or your national DPA in the EU).
• Data deletion — you may request erasure of your personal data by contacting us at support@uppset.com. We will action deletion requests within 30 days, except where we are required by law to retain certain records.

To exercise any of these rights, contact us at support@uppset.com.

Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the website recognize your device and remember certain information about your visit.

Cookies We Use

Cookies Set by Third Parties

• Stripe — may set cookies for payment processing and fraud prevention.
• Supabase — sets cookies to manage your authentication session and keep you logged in.
• Google Analytics — sets cookies to distinguish users and measure Website usage. For more information, see Google's Privacy Policy.
• Other service providers — third-party tools we use to operate the Website may set their own cookies. Where required, these are covered by their respective privacy policies.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually.
• Block third-party cookies.
• Block cookies from specific sites.
• Block all cookies.
• Delete all cookies when you close your browser.

Please note that blocking or deleting cookies may affect the functionality of the Website. If you disable strictly necessary cookies, you may not be able to log in or use Premium features.

You can also opt out of analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Children's Privacy

The Website is not directed at individuals under the age of 18. We do not knowingly collect personal Data from children under 18. If we become aware that we have collected personal Data from a child under 18, we will take steps to delete that information.

International Data Transfers

If you are accessing the Website from outside the United States, please be aware that your Data may be transferred to, stored, and processed in the United States, where our servers are located. By using the Website, you consent to the transfer of your Data to the United States.

Changes to This Privacy Policy

Uppset reserves the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be posted on this page with an updated “Last updated” date. Your continued use of the Website after changes are posted constitutes your acceptance of the revised policy.

Contact Information

For any questions about this privacy policy, please contact us at: support@uppset.com