Privacy Policy

1. Introduction

Upgrid (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Upgrid, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly:

• Account Information: Name, email address, password, company name
• Payment Information: Billing address, payment method details (processed securely by third-party payment processors)
• Website Information: Domain names, WordPress credentials, site configurations
• Content Data: Keywords, articles, content preferences, scheduling settings
• Communications: Messages, feedback, support requests

2.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Usage Data: Features used, pages viewed, actions taken, time spent
• Device Information: IP address, browser type, device type, operating system
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies
• Log Data: Server logs, error logs, security logs

2.3 Information from Third Parties

We may receive information from:

• Authentication Providers: OAuth providers like Google, GitHub
• Payment Processors: Stripe, PayPal, or other payment services
• SEO Data Providers: DataForSEO, search engines, analytics platforms
• WordPress Sites: Site metadata, post data, user information you authorize

3. How We Use Your Information

We use collected information for:

3.1 Service Provision

• Creating and managing your account
• Processing payments and maintaining billing records
• Providing SEO analysis and keyword research
• Generating and publishing AI content
• Connecting to and managing WordPress sites
• Scheduling and automating content publication

3.2 Service Improvement

• Analyzing usage patterns and trends
• Developing new features and functionality
• Improving AI content generation quality
• Enhancing user experience and interface
• Troubleshooting and fixing bugs

3.3 Communication

• Sending transactional emails (receipts, notifications)
• Providing customer support and responding to inquiries
• Sending important updates about the Service
• Marketing communications (with your consent, opt-out available)

3.4 Security and Compliance

• Preventing fraud and abuse
• Enforcing our Terms of Service
• Complying with legal obligations
• Protecting rights, property, and safety

4. How We Share Your Information

We do not sell your personal information. We may share information with:

4.1 Service Providers

Third-party vendors who perform services on our behalf:

• Hosting Providers: Vercel, AWS, or similar cloud infrastructure
• Payment Processors: Stripe, PayPal for payment processing
• AI Providers: OpenAI, Anthropic, Google for content generation
• Analytics Services: Google Analytics, PostHog for usage analytics
• Email Services: SendGrid, Resend for transactional emails
• SEO Data: DataForSEO for keyword and competitor research

4.2 Business Transfers

In connection with mergers, acquisitions, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government or regulatory requests
• Protection of our legal rights
• Prevention of fraud or illegal activity
• Protection of safety and security

4.4 With Your Consent

We may share information with third parties when you explicitly authorize us to do so.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for 90 days after deletion
• Content Data: Retained while you use the Service, deleted upon request or account closure
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 90 days for security and analytics
• Marketing Data: Retained until you unsubscribe or opt-out

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Role-based access, least privilege principle
• Authentication: Secure password hashing, optional two-factor authentication
• Infrastructure: Secure cloud hosting with regular security updates
• Monitoring: Continuous security monitoring and incident response
• Regular Audits: Periodic security assessments and penetration testing

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• Request a copy of your personal information
• Export your data in a structured, machine-readable format
• Download your content and settings

7.2 Correction and Update

• Update your account information
• Correct inaccurate data
• Modify your preferences

7.3 Deletion

• Request deletion of your account and data
• Remove specific content or information
• Right to be forgotten (where applicable)

7.4 Opt-Out and Restriction

• Unsubscribe from marketing emails
• Disable cookies (may affect functionality)
• Restrict certain data processing activities
• Object to automated decision-making

7.5 Exercising Your Rights

To exercise these rights, contact us at privacy@upgrid.com. We will respond within 30 days. You may also manage many settings directly in your account dashboard.

8. Cookies and Tracking Technologies

We use cookies and similar technologies:

8.1 Types of Cookies

• Essential Cookies: Required for Service functionality (login, security)
• Analytics Cookies: Help us understand usage patterns and improve the Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track conversions and measure campaign effectiveness (with consent)

8.2 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

We ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Adequacy decisions by regulatory authorities
• Certification frameworks (Privacy Shield successors)

10. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@upgrid.com or call our toll-free number (if applicable).

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing

We process your data based on:

• Contract: Processing necessary to provide the Service
• Consent: You have given explicit consent
• Legitimate Interests: Improving the Service, fraud prevention
• Legal Obligation: Compliance with laws and regulations

13. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending email notification for significant changes
• In-app notifications

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

We will respond to your inquiry within 30 days.

16. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at dpo@upgrid.com.