Privacy Policy

1. Who we are

Upnex is an AI marketing and business growth platform for small and medium businesses, available at https://upnex.app. For privacy questions, contact privacy@upnex.app.

2. Information we collect

Account and profile

• Name, email, password (hashed), and authentication data (including Google sign-in if you choose it)
• Workspace and business details you provide (name, industry, locations, brand profile, contact links)
• Billing and subscription status (processed via Razorpay in India and Stripe elsewhere, where enabled)

Product data you create or connect

• Content, calendars, leads, reviews, campaigns, and AI-generated drafts and insights
• Data from connected services you authorize (for example Meta/Instagram/Facebook/WhatsApp, Google Business Profile owner access, Maps listing URLs, commerce tools), limited to what those platforms return under your consent

Technical and usage data

• Device, browser, IP address, approximate location derived from IP, and log data
• Pages visited, feature usage, and performance diagnostics
• Cookies and similar technologies (see our Cookie Policy)

3. How we use information

• Provide, secure, and improve the Upnex service
• Authenticate users and manage workspaces, roles, and subscriptions
• Generate AI strategy, content, analysis, and recommendations based on your inputs
• Sync and display data from integrations you connect
• Send service emails (security, billing, product notices); marketing emails only where allowed
• Detect abuse, prevent fraud, and comply with law

4. AI processing

Upnex uses AI models (including third-party providers such as OpenAI or similar, where configured) to process business and content inputs you submit so we can deliver features like content generation, review analysis, and strategy. Do not submit data you are not allowed to process. We do not sell your content as a product to other customers.

5. Legal bases (where applicable)

Depending on your location, we process data to perform our contract with you, based on legitimate interests (securing and improving the service), with your consent (for example optional cookies or certain integrations), and where required by law. In India we also aim to align with the Digital Personal Data Protection Act, 2023 and applicable IT rules.

6. Sharing

We may share information with:

• Infrastructure, email, analytics, AI, and payment processors that help us run Upnex
• Integration platforms you choose to connect (under their policies and your OAuth grants)
• Professional advisers or authorities when legally required
• A successor in a merger, acquisition, or asset sale (with notice where required)

We do not sell personal information for money.

7. International transfers

Servers and vendors may process data outside your country (including the United States or other regions). We use providers we believe take reasonable security measures and, where required, appropriate transfer safeguards.

8. Retention

We keep account and product data while your account is active and for a reasonable period afterward for backups, disputes, and legal obligations. You may request deletion subject to those needs.

9. Security

We use industry-standard measures such as encrypted transport (HTTPS), access controls, and encrypted storage of certain secrets (for example OAuth tokens). No method of transmission or storage is 100% secure.

10. Your choices and rights

• Access or update account information in the product
• Disconnect integrations and revoke OAuth access via the provider and Upnex
• Export or delete workspace data from Settings → Data & Privacy (authenticated API: POST /api/settings/export-data, POST /api/settings/delete-account) — soft delete with a retention window before hard delete
• Or email privacy@upnex.app — Meta / Facebook app users can also follow User Data Deletion
• Manage cookies via our consent banner and browser settings

Regional frameworks we align with

• GDPR / UK GDPR (EU & UK) — access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is consent-based
• CCPA / CPRA (California) — know, delete, and correct personal information; we do not sell personal information for money
• PIPEDA & Quebec Law 25 (Canada) — transparency, consent, and access/correction rights for personal information
• Australian Privacy Principles — collection, use, disclosure, and access consistent with the Privacy Act 1988
• New Zealand Privacy Act 2020 — access and correction of personal information
• UAE Personal Data Protection Law — processing with appropriate legal bases and security measures
• India DPDP Act, 2023 — purpose limitation, consent where required, and erasure/correction rights for digital personal data

We will respond to verified rights requests within a reasonable time required by applicable law.

11. Children

Upnex is directed at businesses and adults. We do not knowingly collect personal data from children under 16 (or the higher age required in your region).

12. Changes

We may update this policy. We will post the new version on this page and update the date above. Material changes may be communicated by email or in-product notice.

13. Related documents

• Terms of Service
• Cookie Policy
• User Data Deletion