Privacy policy

01

Scope

This policy covers personal information that Upscrape controls for its own business purposes and personal data that customers submit for processing through the service. A signed agreement or Data Processing Agreement may provide additional terms and controls.

Customer applications built with Upscrape have their own privacy responsibilities. If you interact with a customer's application, contact that customer first about its privacy practices and requests.

02

Our role

Upscrape generally acts as a controller when we process website, account, billing, support, security, and business contact information for our own purposes.

When a business customer submits personal data in API or MCP requests and directs how it is processed, Upscrape generally acts as that customer's processor or service provider. The customer remains responsible for its instructions, lawful basis, notices, and use of results.

03

Information we collect

Depending on how you use Upscrape, we may collect:

• Account and identity information, such as name, email address, profile image, authentication provider identifiers, and sign-in activity.
• Commercial information, such as plan, purchased credits, transaction history, invoices, and billing references.
• Contact information, such as the details and message you provide through a contact form, support request, or other communication.
• Job application information, such as your name, email address, LinkedIn profile, links to your work and CV, and the note you send when you apply for a role.
• Technical and usage information, such as IP address, browser and device details, timestamps, pages viewed, feature use, request status, latency, errors, and security events.
• Credentials and connections, such as API keys, OAuth grants, or platform credentials that you choose to configure. We protect stored secrets using technical safeguards appropriate to their type.

We collect information from you, your organization, your browser or device, authentication and payment providers, and the systems you direct the service to access.

04

API, MCP, and service data

We process the queries, URLs, parameters, instructions, credentials, and other inputs you submit, together with returned records, results, metadata, and errors. We use this information to execute requests, deliver results, meter credits, troubleshoot failures, prevent abuse, and support the service.

We do not use customer request inputs or results for targeted advertising. We do not use them to train general-purpose artificial intelligence models unless we enter a separate written agreement that expressly permits that use.

Some capabilities require sending request information to the third-party platform you ask us to access or to an execution provider needed to complete that request. Where a capability uses additional specialized processing, its documentation or an applicable subprocessor disclosure may provide further details.

05

Public platform data

Upscrape can retrieve information made available on public websites and platforms. Public availability does not remove privacy, intellectual property, contractual, or other legal protections. Customers are responsible for choosing lawful requests and uses, including providing notices and honoring rights where required.

If you believe a result made available through Upscrape affects your rights, contact [email protected] with enough information for us to review the concern. We may ask you to verify your identity or identify the relevant source, customer, or result.

06

Cookies and analytics

We use essential cookies and similar technologies to provide sign-in, security, preferences and other features you request. These are necessary for the service.

Where the law requires consent, such as in the European Union, the European Economic Area, the United Kingdom and Switzerland, we use analytics providers only after you accept. Elsewhere, analytics runs by default and you can turn it off at any time. We use these providers to understand how visitors find and use our website, documentation and service, and to measure which pages and campaigns lead to sign-ups, usage and purchases. This can include device and browser information, pages visited, referring links and campaign tags, interactions with the site, session recordings of how pages are used (clicks and scrolling, with typed text masked), and account activity such as sign-up, first use and purchases, linked to a pseudonymous identifier. We do not send your name, email address, payment details, or the inputs and results of your API requests to analytics providers.

We also count visits ourselves, on our own servers and without cookies: nothing is stored on or read from your device. For each page view we record the page, the site that linked to it, your country, your device type, any campaign tags in the link, and a visitor code made from your IP address and browser. The code changes every day and cannot be linked to another day or to you, and we do not store your IP address. We use these counts only to see how our website and documentation are used, keep them for up to 25 months, and stop counting once you reject analytics.

You can accept or reject analytics cookies at any time through Cookie settings, with no effect on your access to the service. Your choice is kept for up to six months.

The cookies we set:

Rejecting analytics deletes the analytics cookies above. Our analytics providers may also set their own cookies on their own domains.

07

How we use information

We use personal information to:

• provide, authenticate, operate, maintain, and support the service;
• execute requests and deliver results;
• manage accounts, credits, payments, and transactions;
• respond to questions, support requests, and legal notices;
• consider you for a role you apply for and reply to your application;
• monitor reliability, diagnose errors, prevent fraud and abuse, and protect users and systems;
• understand how visitors find and use our website, documentation and service, and measure which pages and campaigns lead to sign-ups, usage and purchases, with your consent where the law requires it;
• communicate service, security, transaction, and policy information;
• send optional email: tips for getting started, credit and monitor alerts, and, only if you opt in, product updates. You can turn each of these off in Account settings or with the unsubscribe link in every such email; sign-in, billing and security emails are part of the service and are always sent; and
• comply with law, enforce agreements, and establish or defend legal claims.

Our legal bases, where required, include performing a contract, pursuing legitimate interests in operating and securing the service, complying with legal obligations, and consent where we request it. You may withdraw consent at any time without affecting earlier processing.

We may create and use aggregated or de-identified information that cannot reasonably identify a person. We do not attempt to re-identify information that we maintain as de-identified.

08

How we disclose information

We may disclose information only as reasonably needed to:

• Service providers, including hosting, database, security, communications, authentication, analytics, payment, and execution providers that help us operate Upscrape.
• Third-party platforms, when you ask the service to access or interact with them.
• Your organization, including account administrators and authorized users.
• Professional advisers and authorities, where reasonably necessary to obtain advice, comply with law, respond to valid legal process, protect rights and safety, or prevent abuse.
• Transaction participants, in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality measures.

Providers process information under their own terms and our agreements with them.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use customer service data for targeted advertising.

09

Payments

Our payment processor handles payment card information and related payment data. Upscrape receives transaction references, billing status, and limited billing details needed to apply credits, provide records, resolve billing issues, and prevent fraud. We do not store full payment card numbers or card security codes.

10

International transfers

Upscrape is based in the United States. We and our providers may process information in the United States and other countries where we or they operate. Those countries may have different data protection laws.

Where applicable law requires a transfer mechanism, we use appropriate safeguards required by that law. A Data Processing Agreement may describe customer-specific transfer terms.

11

Retention

API and MCP request inputs, results, and associated execution errors are normally retained for 30 days. Compact monitor run metadata may be retained for up to 90 days; monitor snapshots and detected-change data are normally retained for 30 days, unless a different period is required by a signed agreement, needed to resolve an active security or billing issue, or required by law. Deleting an account does not automatically shorten this service-data window. Encrypted database backups are kept for 30 days and are deleted when their write-once storage lock expires, at most 60 days after they are made; data deleted from the service remains in those backups until then and is used only to restore the service.

We retain account information while an account is active and for a reasonable period afterward to complete closure, maintain security, resolve disputes, and enforce agreements. We retain billing and transaction records for periods required by tax, accounting, and other laws. Support, contact, analytics, and security records are kept only for as long as reasonably needed for the purposes described in this policy.

Job applications are kept for 12 months after you apply and then deleted. You can ask us to delete yours sooner by emailing [email protected].

We may retain information longer when required by law, legal process, an active dispute, fraud prevention, or a security investigation. When retention is no longer required, we delete or de-identify the information according to our operational processes.

12

Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, protected credential storage, hashed secret values where appropriate, monitoring, and restricted operational access.

No system or transmission is completely secure. You are responsible for protecting your account, API keys, tokens, and connected-service credentials and for notifying us promptly of suspected unauthorized access.

13

Your rights and choices

Depending on your location and the law that applies, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or appeal a decision concerning your personal information.

To make a request, email [email protected]. If you have an Upscrape account, you can also submit an account deletion request from Account settings in the console. Describe the request and the account or relationship involved. We may verify your identity and authority, and legal exceptions may apply. Authorized agents may submit requests where local law permits, subject to verification.

If Upscrape processes information only for a customer, we may direct your request to that customer or assist the customer in responding. You may also complain to your local data protection authority.

14

Regional disclosures

Residents of the European Economic Area, United Kingdom, and Switzerland may exercise the rights described above and contact their supervisory authority. Where we rely on legitimate interests, those interests include operating, securing, supporting, and improving the service and preventing fraud and abuse.

Residents of California and other United States states with applicable privacy laws may request access, correction, deletion, or a copy of covered information and may appeal certain decisions. We will not discriminate against you for exercising an applicable privacy right. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer an opt-out for those activities.

15

Children

Upscrape is a business service and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact [email protected].

16

Changes to this policy

We may update this policy as our service or legal obligations change. We will post the revised policy with a new effective date and may provide additional notice of material changes through the service or by email.