Privacy Policy

This Privacy Policy explains how Uplido collects, uses, stores, shares, protects, and deletes personal information and business data when you use our website, workspace, checkout, support channels, AI-assisted campaign tools, and connected advertising integrations.

Uplido may be used by customers in different countries. This policy is intended to provide broad transparency for global users, including users in India, the European Economic Area, the United Kingdom, California, and other regions with privacy laws. Your specific rights may vary by location.

We may collect information you provide directly, including name, email address, company name, role, login details, workspace settings, billing details, coupon details, support messages, product descriptions, offers, brand guidelines, prompts, campaign briefs, creative assets, landing page details, audience details, and any other information you submit to the service.

We collect information generated through your use of Uplido, including selected plans, trial status, subscription status, onboarding answers, campaign drafts, generated outputs, optimization notes, approval actions, connected account metadata, workspace activity, preferences, logs, error reports, and feature usage.

Campaign and workspace data may include business information, ad account identifiers, campaign names, asset names, performance metrics, targeting selections, creative metadata, and other advertising context needed to provide the service.

If you connect Meta or another third-party service, we may access data permitted by the scopes you approve and the platform allows. This may include account IDs, business IDs, page IDs, campaign structures, ad sets, ads, creatives, performance metrics, permissions, and status information.

We use connected account data to provide campaign planning, creation, management, optimization, reporting, troubleshooting, and account-specific recommendations. We do not sell connected ad account data.

You can revoke connected account permissions through the relevant third-party platform where supported. Revoking access may limit or disable Uplido features.

Payments are processed by third-party payment providers. We may receive and store billing status, plan, subscription ID, payment status, invoice metadata, transaction references, currency, country, coupon usage, tax-related metadata, and limited billing contact details.

We do not intentionally store full card numbers or full card security codes on our servers. Payment providers may process this information according to their own terms and privacy policies.

We may collect device and technical information such as IP address, approximate location, browser type, device type, operating system, referring URLs, page views, click activity, timestamps, session identifiers, cookies, local storage values, logs, crash reports, and security events.

We use this data to operate the service, localize pricing, detect abuse, improve performance, debug errors, secure accounts, prevent fraud, and understand product usage.

We may use cookies, local storage, pixels, scripts, and similar technologies for login sessions, preferences, analytics, security, fraud prevention, product performance, and marketing measurement. You can control some cookies through your browser settings, but disabling them may break parts of the service.

We use information to:

• provide, operate, secure, and improve Uplido;
• create AI-assisted campaign recommendations, copy, creatives, checklists, reports, and optimization notes;
• process trials, subscriptions, invoices, cancellations, and billing support;
• connect with Meta and other third-party services you authorize;
• localize pricing, currencies, and product experiences;
• respond to support, legal, privacy, and security requests;
• detect abuse, fraud, policy violations, security issues, and unauthorized access;
• measure website and product performance;
• send service messages, product updates, and marketing communications where permitted;
• comply with legal, accounting, tax, regulatory, and platform obligations.

To generate outputs, Uplido may process your prompts, campaign briefs, business information, creative assets, connected account context, performance data, and prior workspace activity through AI systems and related infrastructure.

AI providers and infrastructure providers may process data on our behalf to provide the service. We use reasonable measures to limit processing to what is needed for product functionality, security, support, and improvement. You should not submit highly sensitive personal information unless it is necessary for your lawful use of the service.

AI outputs may be inaccurate or incomplete. Our Terms of Service explain that you are responsible for reviewing outputs before use.

Where laws such as GDPR or UK GDPR require a legal basis, we rely on one or more of the following: performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of rights, security, and service integrity.

Examples of legitimate interests include operating and improving the service, securing accounts, preventing fraud, debugging, measuring product usage, communicating with customers, and protecting Uplido and users.

We may share information with service providers, processors, contractors, and partners who help us operate Uplido, including hosting, databases, authentication, payments, AI processing, email, analytics, storage, customer support, monitoring, security, and development tools.

We may also share information when needed to comply with law, respond to lawful requests, enforce our Terms, protect rights and safety, investigate abuse or fraud, complete a business transaction such as merger or acquisition, or with your direction or consent.

We do not sell personal information in the traditional sense. We do not sell connected ad account data.

Uplido, our providers, and your connected third-party services may process information in countries other than your own. Data protection laws in those countries may differ from the laws where you live.

Where required, we use reasonable safeguards for cross-border transfers, such as contractual protections, provider due diligence, and other lawful transfer mechanisms. By using Uplido, you understand that international processing may be necessary to provide the service.

We retain personal information and business data for as long as needed to provide Uplido, maintain your account, support reactivation, comply with legal and accounting obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and improve the service.

If you cancel, we may retain data for a limited period for support, legal, accounting, backup, audit, and fraud-prevention purposes. Some data may remain in backups or logs for a reasonable period before deletion. We may retain anonymized, aggregated, or de-identified data where permitted by law.

We use reasonable technical, organizational, and administrative measures designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure. No system is completely secure. We cannot guarantee absolute security of data transmitted over the internet, stored in third-party systems, or processed by connected services.

You are responsible for securing your email, devices, browsers, passwords, OTPs, connected accounts, Meta permissions, payment accounts, and workspace access.

Depending on your location, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal information. You may also have the right to complain to a data protection authority.

To exercise rights, contact support@uplido.com. We may need to verify your identity and account ownership before responding. Some requests may be limited by legal, security, fraud-prevention, accounting, platform, or technical requirements.

For users in India, we aim to handle personal data in line with applicable Indian privacy law, including principles reflected in the Digital Personal Data Protection Act where applicable. You may contact us to request access, correction, deletion, grievance support, or consent withdrawal where available under applicable law.

Withdrawing consent or requesting deletion may limit or prevent our ability to provide Uplido.

If you are in the EEA or UK, you may have rights under GDPR or UK GDPR, including access, correction, deletion, portability, restriction, objection, and withdrawal of consent. You may also have the right to lodge a complaint with your local supervisory authority.

When we process business customer data on behalf of a customer, the customer may be the controller and Uplido may act as processor or service provider for that data, depending on context.

If you are a resident of California or another US state with privacy rights, you may have rights to know, access, correct, delete, obtain a copy of personal information, opt out of certain sharing or targeted advertising, and avoid discrimination for exercising rights, subject to applicable law and exceptions.

We do not knowingly sell personal information in the traditional sense. If future practices change, we will update this policy and provide required choices.

Uplido is intended for business users and is not directed to children. You must not use Uplido if you are below the age required to enter a binding contract in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child provided information, contact us so we can review and delete it where appropriate.

We may send service emails, product updates, onboarding messages, billing notices, security notices, and marketing communications where permitted. You can unsubscribe from marketing emails using the link in the email or by contacting us. We may still send transactional, security, billing, or account-related messages.

If you invite teammates, clients, contractors, or agency users into a workspace, they may see account data, prompts, campaign drafts, outputs, files, settings, and connected account context based on their access. You are responsible for managing permissions and sharing only what you are authorized to share.

Do not submit unnecessary sensitive personal information, such as government IDs, precise health details, biometric data, financial account credentials, passwords, private keys, full card details, or personal information about children. If your advertising use case requires regulated or sensitive information, you are responsible for having a lawful basis and appropriate safeguards.

Uplido may use automated systems to generate recommendations, classify inputs, detect errors, detect abuse, or suggest actions. Uplido does not intend to make legally significant decisions about individuals without human involvement. Advertising platforms may make automated decisions under their own policies and systems, which we do not control.

Our website and product may link to or integrate with third-party services. Their privacy practices are governed by their own policies. We are not responsible for third-party websites, platforms, payment providers, AI providers, ad platforms, analytics tools, or browser extensions.

If Uplido is involved in a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar transaction, information may be transferred or disclosed as part of that transaction, subject to appropriate confidentiality or legal protections where applicable.

We may update this Privacy Policy from time to time. If changes are material, we may notify you through the website, product, email, or other reasonable means. Continued use after the effective date means the updated policy applies.

For privacy questions, requests, or complaints, contact support@uplido.com. Include the email address connected to your Uplido account and enough detail for us to understand your request. Do not send passwords, API keys, payment secrets, or other sensitive credentials by email.