Privacy Policy

Last Updated March 9, 2026

This Privacy Policy explains how Uplify® AI Inc (“Uplify,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website, applications, APIs, and related services (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use.

Company: Uplify AI Inc

Address: 238 Osiander St, Unit C, Fort Collins, CO 80524

Privacy Inquiries: privacy@uplify.ai

General Support: hey@uplify.ai

Website: https://uplify.ai

1. Information We Collect

1.1 Information You Provide

Account registration details (name, email address, password)
Profile information (business name, website URL, social media handles)
Payment and billing information (processed securely by third-party payment processors)
Communications you send us via email or support channels
Survey responses, feedback, and contest entries

1.2 Information Collected Automatically

Log data: IP address, browser type and version, pages visited, time/date of visits, referring URL
Device identifiers and operating system information
Cookie identifiers and similar tracking technology data
Usage data: features accessed, clicks, session duration, search queries
Performance data: crash reports, errors, load times

1.3 Information From Third-Party Platforms

When you connect third-party accounts (Facebook, Instagram, TikTok, YouTube, Twitch, etc.) through OAuth or API integrations, we may receive:

Basic profile information (name, profile picture, username)
Public content and post metadata
Analytics and audience insights (follower counts, engagement rates, demographics)
Advertising account IDs and campaign performance data (only when you explicitly grant permission)

We access only the minimum data necessary for the feature you enable. You may revoke third-party access at any time through the relevant platform’s settings.

1.4 Meta / Facebook API Data

We use the Meta (Facebook) Platform APIs in compliance with Meta’s Platform Terms. Specifically:

We collect Meta user profile data, page insights, and ad account data only when you authorize us through Facebook Login (OAuth 2.0).
We do not request permissions beyond those necessary for the features you use.
Meta API data is used solely to provide you with the functionality you requested — we do not sell, re-license, or use it for advertising profiles.
Meta user data is stored only as long as needed and deleted upon account closure or permission revocation within 30 days.
We comply with Meta’s Platform Terms, Developer Policies, and Data Use Policy.

1.5 Google API Data

Our use and transfer of information from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access Google data only to provide features you explicitly enable, do not use it for advertising targeting, and do not allow humans to read your Google data except with your explicit permission or as required by law.

2. How We Use Your Information

Providing and improving Services: Creating and managing your account, processing campaigns, delivering analytics, responding to support requests, and developing new features.
Communications: Sending transactional messages (invoices, campaign updates), security alerts, and—with your consent—marketing emails in compliance with CAN-SPAM, CASL, and applicable laws.
Legal compliance and safety: Complying with laws, enforcing our Terms of Service, detecting and preventing fraudulent or illegal activity.

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link or contacting privacy@uplify.ai.

2.1 Legal Bases for Processing (GDPR)

For users in the EEA, UK, or Switzerland, our legal bases are:

Contract: Processing necessary to perform our Services under our Terms of Service.
Legitimate Interests: Analytics, security, fraud prevention, and platform improvement.
Consent: Marketing emails and optional data uses (withdrawable at any time).
Legal Obligation: Compliance with applicable laws.

3. Cookies and Tracking Technologies

We use cookies, pixel tags, web beacons, and similar technologies. Types we use:

Essential Cookies: Required for the website to function. Cannot be disabled.
Analytics Cookies: Help us understand usage patterns (e.g., Google Analytics, Mixpanel). Aggregated and anonymized where possible.
Functional Cookies: Remember your preferences and settings.
Marketing / Advertising Cookies: Used with your consent to measure campaign effectiveness (e.g., Meta Pixel).

When you first visit our site, a cookie consent banner allows you to accept all, reject non-essential, or customize preferences. You can change settings anytime via the cookie preference center in our website footer.

4. How We Share Your Information

We do not sell your personal information. We may share data with:

Service Providers: Cloud infrastructure (AWS, Google Cloud), analytics, payment processors (Stripe), customer support tools (Intercom, Zendesk), and email providers — all under strict confidentiality obligations.
Platform and API Partners: Only as necessary to provide integrations you authorized.
Business Transfers: In the event of a merger, acquisition, or asset sale, with prior notice to you.
Legal Requirements: When required by law, court order, or to protect rights, property, or safety.
With Your Consent: For any other sharing, only with your explicit consent.

5. Data Retention

Account data: Retained for the life of your account plus 3 years after closure.
Transactional records: 7 years for accounting and tax compliance.
Marketing data: Until you withdraw consent, plus 3 years for compliance records.
Log and usage data: Up to 12 months; anonymized analytics may be retained longer.
Meta API data: Deleted within 30 days of account closure or permission revocation.
Support tickets: 3 years after resolution.

6. Data Deletion

6.1 Account Deletion

You may delete your Uplify account at any time via Settings > Account > Delete Account. Upon deletion:

Your profile and personal information will be removed from active systems within 30 days.
Data will be deleted or anonymized from backup systems within 90 days.
We retain only what is legally required (e.g., transaction records for tax purposes).

6.2 Facebook Data Deletion

In compliance with Meta Platform Terms, we provide a Facebook Data Deletion Callback. When you remove the Uplify app from your Facebook settings, we delete all Facebook-derived data within 30 days. Check deletion status at: https://uplify.ai/facebook/data-deletion

6.3 Submitting a Deletion Request

To request deletion of specific data without closing your account, email privacy@uplify.ai with subject line “Data Deletion Request.” We respond within 30 days.

7. Data Security

We implement industry-standard security measures including:

TLS/HTTPS encryption for all data in transit
AES-256 encryption for data at rest
Access controls and authentication requirements for all personnel
Regular security audits and vulnerability assessments
Breach detection and incident response procedures

In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.

8. Your Privacy Rights

8.1 Rights for All Users

Access the personal data we hold about you
Correct inaccurate or incomplete data
Delete your personal data (subject to legal retention requirements)
Opt out of marketing communications at any time
Request information about how your data is used and shared

8.2 EU / EEA / UK Users (GDPR)

Right of Access (Art. 15): Obtain a copy of your personal data.
Right to Rectification (Art. 16): Correct inaccurate data.
Right to Erasure (Art. 17): Request deletion (“right to be forgotten”).
Right to Restriction (Art. 18): Limit how we use your data.
Right to Data Portability (Art. 20): Receive data in a machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw at any time for consent-based processing.
Right to Complain: Lodge a complaint with your local Data Protection Authority.

8.3 California Residents (CCPA / CPRA)

California residents have the right to: Know what personal information we collect; Delete personal information; Correct inaccurate information; Opt out of sale/sharing (we do not sell personal information); Limit use of sensitive personal information; and Non-discrimination for exercising these rights.

To exercise California rights, contact privacy@uplify.ai with subject “California Privacy Request.” We respond within 45 days.

8.4 Other U.S. State Rights

Residents of Virginia (VCDPA), Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights including access, correction, deletion, portability, and opt-out of targeted advertising. Contact privacy@uplify.ai to exercise any state-granted privacy rights. We respond within 45 days.

9. International Data Transfers

Uplify AI Inc is based in the United States. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and the EU-U.S. Data Privacy Framework where applicable.

10. Children’s Privacy (COPPA)

Our Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, please contact privacy@uplify.ai and we will promptly delete it.

This policy complies with the Children’s Online Privacy Protection Act (COPPA) and applicable state laws regarding minors’ privacy.

11. Third-Party Websites and Services

Our Services may link to third-party websites and services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies. We are not responsible for third-party privacy practices.

12. Third-Party Integrations and API Data Handling

12.1 General Integration Principles

Regardless of which integration you enable:

Minimum Necessary Data: We request only the permissions required for the specific feature.
No Password Storage: We never store your password for any third-party service.
Explicit Authorization: You authorize permissions directly on the third-party platform.
No Unauthorized Secondary Use: Integration data is never used for advertising targeting or sold.
Revocation: Disconnect any integration via Settings > Connected Accounts. Data deleted within 30 days.
Third-Party Terms Apply: You remain subject to each connected service’s own terms.

12.2 Social Media Platforms

Meta (Facebook & Instagram): Profile info, page analytics, audience demographics, post metrics, ad account performance (when authorized via Facebook Login/OAuth 2.0). Data deletion via uplify.ai/facebook/data-deletion.
Google (YouTube & Analytics): Channel analytics, subscriber counts, video performance, Google Analytics site data (via Google OAuth 2.0). Subject to Google API Services User Data Policy.
TikTok: Profile info, video performance metrics, follower analytics (via TikTok Login Kit OAuth 2.0).
Twitter / X: Profile info, tweet engagement metrics, follower counts, audience analytics (via X OAuth 2.0).
LinkedIn: Professional profile, company page analytics, engagement data (via LinkedIn OAuth 2.0).
Pinterest: Profile info, board analytics, pin performance metrics (via Pinterest OAuth 2.0).
Reddit: Public profile info, subreddit analytics, post/comment metrics (via Reddit OAuth 2.0).
Snapchat: Profile info, story performance metrics, engagement analytics (via Snap Kit OAuth 2.0).
Twitch: Channel info, stream analytics, subscriber counts, viewer data (via Twitch OAuth 2.0).

12.3 Payment Processors

We do not store full payment card numbers or bank account numbers. All sensitive payment data is processed by PCI-DSS compliant payment processors:

Stripe: Processes payment card details, billing address, and transaction history. We retain only Stripe customer ID, last 4 card digits, card type, and transaction amounts/dates.
PayPal: Processes PayPal account email and transaction amounts. We retain only transaction IDs and amounts.
Square: Processes payment card and transaction data. We retain only transaction IDs and amounts.

12.4 E-Commerce Platforms

Shopify: Store name, product catalog metadata, order attribution data (linked to campaigns), and aggregated revenue metrics. We do not access individual customer PII without explicit authorization.
WooCommerce / WordPress: Product catalog data, order attribution metrics, and revenue analytics (via WooCommerce REST API).
Squarespace: Product information, campaign-linked order data, and revenue analytics.
Wix: Store product data, campaign-attributed order metrics, and analytics.
BigCommerce: Product catalog, order data, and revenue analytics.
Magento / Adobe Commerce: Campaign-attributed order data and product catalog metadata.

12.5 CRM and Marketing Platforms

HubSpot: Contact records (for contacts you explicitly sync), deal/pipeline data related to campaigns, and marketing email analytics.
Salesforce: Contact and lead records you authorize for campaign purposes, opportunity data, and custom objects you configure.
Zoho CRM: Authorized contact records, deal stages, and campaign-related activity data.
Pipedrive: Deal and contact data you authorize for campaign pipeline management.
Monday.com: Board and item data you authorize for campaign project management.
ActiveCampaign: Contact lists, automation triggers, and campaign email performance metrics.
Mailchimp: Audience/list data and campaign email performance metrics.
Klaviyo: Segmented audience data, email/SMS campaign metrics, and revenue attribution.
ConvertKit / Kit: Subscriber lists, tag/segment data, and broadcast performance metrics.

12.6 Accounting and Financial Software

QuickBooks (Intuit): Invoice data, payment records, and vendor/customer records you authorize for billing reconciliation (via OAuth 2.0). We do not access payroll, bank feeds, or full chart of accounts.
Xero: Invoice and payment records for campaign billing reconciliation (via OAuth 2.0).
FreshBooks: Invoice and client billing records you authorize for reconciliation.

12.7 Analytics and Tracking

Google Analytics: Website traffic and user behavior in aggregate (IP anonymization enabled). Opt out via Google Analytics Opt-out Add-on.
Mixpanel: Product analytics including feature usage, click events, and session data tied to your Uplify user ID.
Amplitude: Behavioral analytics and user journey analysis (data is pseudonymized).
Hotjar / Microsoft Clarity: Session recordings and heatmaps to understand platform interactions. Input fields are masked by default.

12.8 Customer Support and Communication

Intercom: In-app messaging and support chat. Conversation content is stored by Intercom.
Zendesk: Support ticket management. Ticket content including personal data is stored by Zendesk.
Slack: Workspace notifications and alerts (business customers only). Only authorized channels and permissions.
Zoom / Microsoft Teams / Google Meet: Scheduling and meeting link data for partnership calls and creator onboarding.

12.9 Cloud Storage and Productivity

Google Drive / Workspace: Files you explicitly share for campaign briefs, contracts, or creative assets.
Dropbox: Files you share for campaign asset delivery.
Microsoft OneDrive / SharePoint: Files you explicitly share.
Notion: Pages you authorize for campaign planning and documentation.
Airtable: Bases you authorize for campaign data management.

12.10 Project Management Tools

If you connect project management tools (Asana, Trello, Jira, ClickUp, Basecamp, Wrike), we access only boards, tasks, and workspace data you authorize for campaign workflow management. We do not access personal data of your team members beyond what is needed for the integration.

12.11 Website and Content Platforms

WordPress.com / WordPress.org: Post analytics, traffic metrics, and plugin-enabled data for content performance tracking. We do not access your WordPress database or subscriber PII without authorization.
Squarespace / Wix (Content Analytics): Website traffic and content engagement analytics to measure campaign-driven web traffic.
Webflow: Site analytics and form submission data for campaign landing page performance.

12.12 Future Integrations

As we add new integrations, we will update this Privacy Policy. For material changes, we will provide prominent notice and obtain your consent where required. For any integration not listed, our principles in Section 12.1 apply. Questions? Email privacy@uplify.ai.

13. Email Communications and CAN-SPAM Compliance

Uplify AI Inc complies with the CAN-SPAM Act, CASL, and other applicable email laws. Our commercial emails will:

Clearly identify Uplify AI Inc as the sender
Include our valid mailing address: 238 Osiander St, Unit C, Fort Collins, CO 80524
Include a clear mechanism to opt out of future marketing emails
Honor opt-out requests within 10 business days

To unsubscribe, click “Unsubscribe” in any marketing email or contact privacy@uplify.ai.

14. California “Shine the Light” Disclosure

Under California Civil Code Section 1798.83, Uplify AI Inc does not share personal information with third parties for their direct marketing purposes without your consent. Contact privacy@uplify.ai for more information.

15. Nevada Privacy Rights

Uplify AI Inc does not sell personal information as defined under Nevada law. Contact privacy@uplify.ai with questions.

16. How to Lodge a Complaint

EU/EEA Users: Contact your local Data Protection Authority (edpb.europa.eu).
UK Users: Contact the ICO at ico.org.uk or 0303 123 1113.
Swiss Users: Contact the FDPIC at edoeb.admin.ch.
U.S. Residents: Contact your state’s Attorney General office.

We encourage you to contact us first at privacy@uplify.ai so we can address your concern directly.

17. Changes to This Privacy Policy

We may update this Policy periodically. For material changes, we will update the “Last Updated” date, provide notice on our website, and notify registered users by email. Your continued use of our Services after updates constitutes acceptance.

18. Contact Us

Privacy Team Email: privacy@uplify.ai

General Support: hey@uplify.ai

Mailing Address: Uplify AI Inc, Attn: Privacy, 238 Osiander St, Unit C, Fort Collins, CO 80524, USA

Website: https://uplify.ai/privacy

We will respond to all privacy inquiries within 30 days, or within the timeframe required by applicable law if shorter.