privacy.md

1. Data Collection We collect information required to operate Upzo:

• Account Information: Email address, encrypted authentication credentials, and tax identification numbers (where provided for business or professional use).

• Service Data: Target URLs and keywords you provide for monitoring.

• Usage Data: IP addresses, browser information, and device metadata for security and diagnostic purposes.

• Marketing and Advertising Data: Information about site interactions via Google Analytics and advertising platforms.

• 2. Cookies and Tracking We use cookies for the following purposes:

• Essential: Required for authentication and payment processing.

• Analytics & Marketing: To analyze site traffic and manage advertising. You may opt out of personalized ads via My Ad Center.

• GPC: We honor Global Privacy Control (GPC) signals.

• 3. Third-Party Data Processing We share data with third-party service providers to facilitate our services. These include:

• Infrastructure: Cloud hosting, database management, and authentication services.

• Operations: Payment processing, analytics, and technical log monitoring.

• Communications: Email delivery, SMS alerts, and customer support tools.

A specific list of these entities is maintained in our Subprocessors List.

4. Data Retention We retain your information only as long as necessary to provide our services or comply with legal obligations:

• Account Data: Retained for the duration of your active account. Upon account termination, this data is deactivated and subsequently deleted following a standard grace period, except where retention is required by law (such as for tax and accounting records).

• Monitor Configuration: Data defining your Monitors is retained while the Monitor is active. If a Monitor is deactivated or removed, the configuration record may be retained for historical and system integrity purposes.

• Monitor Results: Historical logs and results generated by your Monitors are retained for a limited period to provide you with reporting and analytics, after which they are purged or anonymized.

• Usage Data: Technical logs are retained for a limited period to ensure security and site performance, after which they are deleted or anonymized.

• 5. Data Security We implement industry-standard technical and organizational measures to protect your data:

• Encryption: All data is encrypted in transit via TLS and at rest using AES-256.

• Access Control: Access to production environments is restricted to authorized personnel using multifactor authentication.

• Monitoring: We perform continuous security monitoring of our infrastructure.

• 6. User Rights You have certain choices regarding the information you provide to Upzo:

• Access and Correction: You may review and update your account information at any time through your account settings.

• Account Termination: You may close your account at any time through your account settings or by contacting [email protected]. Upon termination, your account will be deactivated and your data will be handled in accordance with our retention policy.

• 7. Policy Updates We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

  8. Contact Information If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

  Last Updated: March 6, 2026