Privacy Policy

This Privacy Policy describes how Up2Data ("Up2Data," "we," "us," or "our") collects, uses, and shares information in connection with our website at https://up2data.ai, API at https://api.up2data.ai, documentation at https://docs.up2data.ai, and related services (collectively, the "Service").

Up2Data provides a B2B data API that retrieves and returns publicly available professional profile, company, job, and post data (including data from LinkedIn-like public sources) in response to customer API requests. This policy covers personal data we process about account holders and site visitors. It also explains how we handle data customers submit through the API.

1. Information we collect

Depending on how you use the Service, we may collect:

• Account information — email address, authentication credentials or tokens, and organization or workspace details you provide when you sign up or manage your account.
• Billing information — payment and invoice details processed by our payment processor (for example Stripe, when enabled). We do not store full payment card numbers on our servers; the processor handles card data according to its own policies.
• API usage and request metadata — API key identifiers, endpoints called, timestamps, credit consumption, IP addresses, user-agent strings, and similar technical logs needed to operate, bill, secure, and debug the Service.
• Customer-submitted request inputs — identifiers you send in API calls (for example LinkedIn profile or company URLs, search parameters, or other lookup keys) so we can fulfill your request.
• Support communications — emails and messages you send to us (including support@up2data.ai), and related metadata.

2. Public professional data vs. personal data

As part of the Service, we process publicly available professional profile and related business data to fulfill customer enrichment and search requests. That data may include names, job titles, employers, locations, and other information that individuals have made public on professional networking sites.

Separately, we process personal data about you as a customer or visitor—such as your account email, billing details, and usage logs—as described in this policy. If you are an individual whose publicly available professional information appears in API responses, email support@up2data.ai to exercise applicable rights.

3. How we use information

We use the information we collect to:

• Provide, operate, and improve the Service
• Authenticate users and manage API keys and credits
• Process payments and prevent fraud
• Monitor security, abuse, rate limits, and service reliability
• Communicate with you about the Service, including transactional and support messages
• Comply with legal obligations and enforce our terms

4. API customer data and retention

When you call our API, you may send LinkedIn or other professional URLs and parameters. We process those inputs to fulfill your request and may retain request logs (inputs, metadata, and related audit records) for billing, security, abuse prevention, and operational audit. Retention periods vary by log type and legal requirements; we do not keep customer request logs longer than reasonably necessary for these purposes.

You are responsible for ensuring you have a lawful basis to submit identifiers and to use returned data in your own products and workflows.

5. Third parties and infrastructure

We use trusted service providers to operate the Service. Depending on configuration, these may include:

• Authentication / database — Supabase (account auth and related data storage)
• Payments — Stripe or another payment processor when billing is live
• Hosting and edge infrastructure — providers such as Cloudflare, Vercel, and/or Fly.io for serving the website, API, and related workloads

These providers process data only as needed to deliver their services to us. We do not currently operate a separate third-party product analytics suite (for example PostHog or Google Analytics) on the marketing site; if that changes, we will update this policy.

6. Cookies and local storage

We use cookies and/or local storage as needed to maintain authenticated sessions, remember preferences, and keep the Service secure. These are primarily functional (for example session tokens after sign-in), not advertising cookies.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data we hold about you, and to object to or restrict certain processing. To make a request, email support@up2data.aiwith the subject line "Data Request."

8. Security

We take reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. International transfers

We may process and store information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Changes

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest version. Continued use of the Service after changes become effective constitutes acceptance of the updated policy where permitted by law.

11. Contact

Questions about this Privacy Policy or our data practices: support@up2data.ai.