Privacy policy

01

Scope

This policy covers personal information that Upscrape controls for its own business purposes and personal data that customers submit for processing through the service. A signed agreement or Data Processing Agreement may provide additional terms and controls.

Customer applications built with Upscrape have their own privacy responsibilities. If you interact with a customer's application, contact that customer first about its privacy practices and requests.

02

Our role

Upscrape generally acts as a controller when we process website, account, billing, support, security, and business contact information for our own purposes.

When a business customer submits personal data in API or MCP requests and directs how it is processed, Upscrape generally acts as that customer's processor or service provider. The customer remains responsible for its instructions, lawful basis, notices, and use of results.

03

Information we collect

Depending on how you use Upscrape, we may collect:

• Account and identity information, such as name, email address, profile image, authentication provider identifiers, and sign-in activity.
• Commercial information, such as plan, purchased credits, transaction history, invoices, and billing references.
• Contact information, such as the details and message you provide through a contact form, support request, or other communication.
• Technical and usage information, such as IP address, browser and device details, timestamps, pages viewed, feature use, request status, latency, errors, and security events.
• Credentials and connections, such as API keys, OAuth grants, or platform credentials that you choose to configure. We protect stored secrets using technical safeguards appropriate to their type.

We collect information from you, your organization, your browser or device, authentication and payment providers, and the systems you direct the service to access.

04

API, MCP, and service data

We process the queries, URLs, parameters, instructions, credentials, and other inputs you submit, together with returned records, results, metadata, and errors. We use this information to execute requests, deliver results, meter credits, troubleshoot failures, prevent abuse, and support the service.

We do not use customer request inputs or results for targeted advertising. We do not use them to train general-purpose artificial intelligence models unless we enter a separate written agreement that expressly permits that use.

Some capabilities require sending request information to the third-party platform you ask us to access or to an execution provider needed to complete that request. Where a capability uses additional specialized processing, its documentation or an applicable subprocessor disclosure may provide further details.

05

Public platform data

Upscrape can retrieve information made available on public websites and platforms. Public availability does not remove privacy, intellectual property, contractual, or other legal protections. Customers are responsible for choosing lawful requests and uses, including providing notices and honoring rights where required.

If you believe a result made available through Upscrape affects your rights, contact [email protected] with enough information for us to review the concern. We may ask you to verify your identity or identify the relevant source, customer, or result.

06

Cookies and optional analytics

We use essential cookies and similar storage to provide sign-in, security, session continuity, preferences, and other requested functionality. These technologies are necessary for the service and cannot be disabled through our analytics controls.

On public marketing pages, we offer optional Google Analytics. It runs only after you accept analytics cookies. We configure analytics not to receive page query strings, account credentials, payment card data, or API request inputs and results. We also disable Google Signals and advertising personalization in our analytics configuration.

You can accept or reject analytics with equal effect on access to the site and can change your choice through Cookie settings. Your analytics preference is stored for up to six months. Your browser settings may provide additional cookie controls.

07

How we use information

We use personal information to:

• provide, authenticate, operate, maintain, and support the service;
• execute requests and deliver results;
• manage accounts, credits, payments, and transactions;
• respond to questions, support requests, and legal notices;
• monitor reliability, diagnose errors, prevent fraud and abuse, and protect users and systems;
• understand and improve public marketing pages when analytics consent is given;
• communicate service, security, transaction, and policy information; and
• comply with law, enforce agreements, and establish or defend legal claims.

Our legal bases, where required, include performing a contract, pursuing legitimate interests in operating and securing the service, complying with legal obligations, and consent where we request it. You may withdraw consent at any time without affecting earlier processing.

We may create and use aggregated or de-identified information that cannot reasonably identify a person. We do not attempt to re-identify information that we maintain as de-identified.

08

How we disclose information

We may disclose information only as reasonably needed to:

• Service providers, including hosting, database, security, communications, authentication, analytics, payment, and execution providers that help us operate Upscrape.
• Third-party platforms, when you ask the service to access or interact with them.
• Your organization, including account administrators and authorized users.
• Professional advisers and authorities, where reasonably necessary to obtain advice, comply with law, respond to valid legal process, protect rights and safety, or prevent abuse.
• Transaction participants, in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality measures.

Providers currently used for relevant functions include Stripe for payments, Google for sign-in and consented analytics, Resend for email delivery, Cloudflare for network and security services, and hosting and database providers. Providers process information under their own terms and our agreements with them.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use customer service data for targeted advertising.

09

Payments

Stripe processes payment card information and related payment data. Upscrape receives transaction references, billing status, and limited billing details needed to apply credits, provide records, resolve billing issues, and prevent fraud. We do not store full payment card numbers or card security codes.

10

International transfers

Upscrape is based in the United States. We and our providers may process information in the United States and other countries where we or they operate. Those countries may have different data protection laws.

Where applicable law requires a transfer mechanism, we use appropriate safeguards required by that law. A Data Processing Agreement may describe customer-specific transfer terms.

11

Retention

API and MCP request inputs, results, and associated execution errors are normally retained for 30 days. Compact monitor run metadata may be retained for up to 90 days; monitor snapshots and detected-change data are normally retained for 30 days, unless a different period is required by a signed agreement, needed to resolve an active security or billing issue, or required by law. Deleting an account does not automatically shorten this service-data window.

We retain account information while an account is active and for a reasonable period afterward to complete closure, maintain security, resolve disputes, and enforce agreements. We retain billing and transaction records for periods required by tax, accounting, and other laws. Support, contact, analytics, and security records are kept only for as long as reasonably needed for the purposes described in this policy.

We may retain information longer when required by law, legal process, an active dispute, fraud prevention, or a security investigation. When retention is no longer required, we delete or de-identify the information according to our operational processes.

12

Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, protected credential storage, hashed secret values where appropriate, monitoring, and restricted operational access.

No system or transmission is completely secure. You are responsible for protecting your account, API keys, tokens, and connected-service credentials and for notifying us promptly of suspected unauthorized access.

13

Your rights and choices

Depending on your location and the law that applies, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or appeal a decision concerning your personal information.

To make a request, email [email protected]. Describe the request and the account or relationship involved. We may verify your identity and authority, and legal exceptions may apply. Authorized agents may submit requests where local law permits, subject to verification.

If Upscrape processes information only for a customer, we may direct your request to that customer or assist the customer in responding. You may also complain to your local data protection authority.

14

Regional disclosures

Residents of the European Economic Area, United Kingdom, and Switzerland may exercise the rights described above and contact their supervisory authority. Where we rely on legitimate interests, those interests include operating, securing, supporting, and improving the service and preventing fraud and abuse.

Residents of California and other United States states with applicable privacy laws may request access, correction, deletion, or a copy of covered information and may appeal certain decisions. We will not discriminate against you for exercising an applicable privacy right. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer an opt-out for those activities.

15

Children

Upscrape is a business service and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact [email protected].

16

Changes to this policy

We may update this policy as our service or legal obligations change. We will post the revised policy with a new effective date and may provide additional notice of material changes through the service or by email.