Privacy Policy

This policy explains how Upsoar (“we”, “us”) handles personal data when you use Upsoar, our website and our free tools. If you have questions, email privacy@upsoar.app.

What we collect

• Account details: your name, email address, password (stored only as a secure hash) or Google sign-in identifier.
• Workspace content: brand profiles, posts, drafts, media you upload, calendars, Mello conversations and client review notes.
• Connected social accounts: account names, handles, profile pictures and access tokens for networks you connect (Instagram, Facebook, Threads, X, LinkedIn, TikTok, Bluesky, YouTube). Tokens are encrypted at rest.
• Performance data: likes, comments, shares, views and similar metrics for posts published through Upsoar.
• Billing: plan, subscription status and invoices. Card and bank details are handled by our payment processors; we never see or store full card numbers.
• Technical data: IP address (stored only as a one-way hash for rate limiting the free tools), browser type, and error logs.

How we use it

• To provide the service: writing, scheduling and publishing posts you ask us to, and showing you analytics.
• To generate AI content: the text you submit and your brand profile are sent to our AI provider to produce results for you.
• To send account emails (password resets, invitations, publishing alerts) and, unless you opt out, a short series of tips. Every non-essential email has an unsubscribe link.
• To bill you, prevent abuse, keep the service secure and fix problems.

We rely on our contract with you, our legitimate interest in running and improving the service, and your consent where required (for example, for optional emails).

Who we share it with

We share data only with service providers that help run Upsoar, under contracts that limit their use of it:

• Anthropic (AI model provider) to generate content.
• Hosting and database providers to store and serve the app.
• Stripe and Razorpay to process payments.
• Resend to send email.
• Cloud storage providers to host media you upload so social networks can fetch it.
• The social networks you connect, to publish your posts and read their performance, as you instruct.

We do not sell personal data or use it for advertising. We may disclose data if required by law.

Google and YouTube data

If you connect YouTube, we use Google API Services only to upload videos you schedule and read their basic statistics. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube use is also subject to the YouTube Terms of Service and Google Privacy Policy. You can revoke access anytime at Google security settings.

How long we keep it

We keep your data while your account is active. When you delete your account or a workspace, we delete its content, connected accounts and tokens right away from our live systems; backups are overwritten within 30 days. Billing records are kept as long as tax law requires.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, California law or India's DPDP Act), you can access, correct, export or delete your data, object to or restrict certain uses, and withdraw consent. Most of this you can do yourself in Settings: download your data or delete your account in one click. For anything else, email us. You can also complain to your local data protection authority.

Security

Passwords are hashed, social tokens are encrypted, connections use HTTPS, and every workspace's data is kept separate. No system is perfectly secure, so please use a strong password and tell us about any concern.

Children

Upsoar is not intended for children under 16, and we don't knowingly collect their data.

Changes

If we change this policy in a meaningful way, we'll tell you by email or in the app before the change takes effect.

See also our Terms of Service and data deletion instructions.