Privacy Policy

Account information. When you create an account, we collect your name, email address, and password (stored as a secure hash). If you complete a company profile, we also store your company name, industry, fundraising stage, and website.

Billing information. Payments are processed by Stripe. We store your subscription plan, billing interval, and subscription status. We do not store credit card numbers - those stay with Stripe.

Content you create. Documents you upload, canvases you build, pipeline contacts you add, updates you write, and business plan content you create are stored and associated with your account.

Usage data. We collect basic analytics on how you use the platform - which features you access, how often, and general engagement signals. This helps us improve the product. We do not sell this data.

Document access logs. When an investor opens a share link you have generated, we record the access event, time spent, and pages viewed. This data belongs to you and is surfaced in your analytics dashboard.

We use your information to provide and improve the UpgradIQ platform. Specifically:

• To operate your workspace, data room, and investor pipeline
• To process payments and manage your subscription
• To send transactional emails - account setup, billing receipts, activation links
• To show you analytics on your own data room and investor activity
• To improve the product based on how it is used
• To respond to support requests and account issues

We do not use your content to train AI models. We do not sell your data to third parties. We do not send marketing emails without explicit opt-in.

We share data with the following third-party services as part of operating the platform:

• Stripe - payment processing and subscription management
• Supabase - database and authentication infrastructure
• Cloudflare - CDN and network security
• Amazon SES - transactional email delivery
• Vercel - hosting and deployment

We do not share your data with any other third parties except where required by law.

All documents you upload are stored in encrypted object storage. Access to your files is controlled exclusively through time-limited signed URLs generated by our servers. We never expose direct links to your storage bucket. Share links you generate expire automatically at the time you set.

Revoking access to a share link immediately prevents further access - the signed URL becomes invalid and any active sessions are terminated.

Your data is retained for as long as your account is active. If you cancel your account:

• Your account data is retained for 30 days in case you want to reactivate
• After 30 days, your personal data and uploaded files are permanently deleted
• Billing records are retained as required by financial regulations
• Anonymised, aggregated usage data may be retained for analytics purposes

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information in your profile
• Request deletion of your account and data
• Export your data in a portable format
• Withdraw consent for any optional data processing

To exercise any of these rights, email us at privacy@upgradiq.com. We will respond within 30 days.

We use essential cookies to keep you logged in and maintain your session. We do not use advertising cookies or third-party tracking cookies. Analytics are collected server-side without relying on cookie-based tracking.

We will notify you by email if we make material changes to this policy. The updated date at the top of this page reflects when it was last revised. Continued use of the platform after a change constitutes acceptance of the updated policy.

Questions about your privacy or this policy? Reach us at:
privacy@upgradiq.com · +1 (478) 280-5050