Privacy Policy

Uprated Inc. (“Uprated,” “we,” “us,” or “our”) operates the uprated.ai platform and Mission Control services. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, platform, and services.

By using uprated.ai, you agree to the practices described in this policy. If you don't agree, please don't use our services.

1. Information We Collect

Information You Provide

• Account information. When you create an account, we collect your name, email address, and any profile information you provide. Account authentication is handled through Google OAuth.
• Payment information. When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number, CVV, or bank account details. Stripe provides us with limited payment data (last four digits, card type, billing address) for record-keeping.
• Agent workspace data. Content you create, upload, or generate within your agent workspace — including conversations, files, documents, and agent memory data. This is your data and is stored in your isolated workspace.
• Communications. If you email us, submit a support request, or communicate with us through any channel, we collect the content of those communications.

Information Collected Automatically

• Usage data. We collect information about how you interact with our platform — pages visited, features used, actions taken, timestamps, and session duration.
• Device and browser information. Browser type, operating system, device type, screen resolution, and language preferences.
• IP address. Collected for security, fraud prevention, and general analytics.
• Cookies and similar technologies. See Section 5 below.

Information from Third Parties

• Google OAuth. Authentication data, session tokens, and account status.
• Stripe. Subscription status, payment history, and billing events.
• Google Analytics. Aggregated website usage statistics (see Section 5).

2. How We Use Your Information

We use your information to:

• Provide and operate the platform. Create your account, provision agent workspaces, process conversations, manage agent memory, and deliver the services you've subscribed to.
• Process payments. Manage subscriptions, process charges, handle refunds, and send billing-related communications.
• Improve the platform. Analyze usage patterns to identify bugs, improve features, and develop new capabilities. We do not use your agent workspace content (conversations, files, memory data) to train AI models.
• Communicate with you. Send transactional emails (account verification, password resets, billing receipts), service announcements, and — with your consent — product updates and marketing communications.
• Ensure security. Detect and prevent fraud, abuse, and unauthorized access. Monitor for security incidents.
• Comply with legal obligations. Respond to legal requests, enforce our terms, and protect our rights.

3. How We Store and Protect Your Data

Workspace Isolation

Each agent workspace runs in an isolated environment. Your conversations, files, agent memory, and workspace data are logically or physically separated from other customers' data, depending on your plan tier:

• Standard ($99/mo): Logical isolation — namespaced data stores, encrypted at rest.
• Pro ($299/mo): Dedicated workspace with enhanced isolation.
• Enterprise ($999/mo): Dedicated infrastructure pods with physical isolation.

Encryption

• Data at rest is encrypted using industry-standard encryption (AES-256 or equivalent).
• Data in transit is encrypted using TLS 1.2 or higher.

Infrastructure

Our platform runs on Google Cloud Platform (GCP) infrastructure. Data is stored in the United States.

Access Controls

Access to customer data is restricted to authorized personnel on a need-to-know basis. We maintain access logs and conduct periodic access reviews.

4. Data Retention

• Account data. Retained for the duration of your account and for up to 30 days after account deletion to allow for recovery.
• Agent workspace data. Retained for the duration of your subscription. Upon cancellation or account deletion, workspace data (including agent memory) is scheduled for deletion within 30 days.
• Payment records. Retained as required by applicable tax and financial regulations (typically 7 years).
• Usage analytics. Aggregated, anonymized usage data may be retained indefinitely for product improvement purposes.
• Communications. Support correspondence is retained for up to 3 years for quality and reference purposes.

You may request earlier deletion of your data by contacting privacy@uprated.ai.

5. Cookies and Tracking

Cookies We Use

Your Cookie Choices

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain platform features.

6. Third-Party Services

We use the following third-party services that may process your data:

We require all third-party service providers to maintain appropriate security measures and to process your data only as necessary to provide their services to us.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request correction of inaccurate or incomplete personal data.
• Deletion. Request deletion of your personal data, subject to legal retention requirements.
• Export. Request a machine-readable export of your data.
• Opt out of marketing. Unsubscribe from marketing communications at any time via the link in any marketing email.
• Object to processing. Object to certain types of data processing where we rely on legitimate interest.

To exercise any of these rights, contact us at privacy@uprated.ai. We will respond within 30 days.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are located in the European Economic Area, our legal bases for processing include: performance of our contract with you, your consent, our legitimate interests, and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at privacy@uprated.ai and we will promptly delete it.

9. Data Transfers

Your data is stored and processed in the United States. If you are accessing our services from outside the United States, your data will be transferred to the United States. By using our services, you consent to this transfer. We take appropriate measures to ensure your data receives adequate protection in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on our platform. The “Last Updated” date at the top of this policy indicates when the most recent changes were made.

Your continued use of our services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Uprated Inc.
Email: privacy@uprated.ai
Website: https://uprated.ai