Privacy Policy

Welcome to Upvotics. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, protect, and handle information when you use our Chrome extension and services.

Our Privacy Commitment

1. Information We Collect

1.1 Account Information

When you create an account with Upvotics, we collect only the minimum information necessary to provide our services:

• Email address: Used solely for account authentication, service communications, and password recovery
• Authentication tokens: Encrypted and stored securely to maintain your session
• Subscription status: To manage your plan (Free Trial, Monthly, or Annual)

1.2 Competitor Website Tracking

To provide our competitor tracking features, we monitor publicly available pages on competitor websites. During this process:

• We access only publicly available information from competitor websites
• We take snapshots of competitor pages (homepage, pricing, blog, product pages, changelog)
• We compare current snapshots with previous versions to detect changes
• We store competitor website URLs and page snapshots securely
• Important: We do NOT access private areas, login-protected content, or any non-public information

1.3 Technical Information

To maintain security and provide a reliable service, we automatically collect minimal technical data:

• IP Address: Used only for security validation and fraud prevention (not stored permanently)
• Browser type and version: To ensure compatibility
• Device type: For optimizing user experience
• Session information: To maintain your login state securely

1.4 Usage Analytics

We collect anonymous, aggregated usage statistics to improve our service:

• Feature usage frequency (which tools you use most)
• Extension performance metrics
• Error reports and crash logs (anonymized)
• Note: All analytics are aggregated and cannot be tied back to individual users

2. What We Explicitly Do NOT Collect

3. How We Use Your Information

The limited information we collect is used exclusively for:

3.1 Service Delivery

• Authenticating your account and maintaining secure sessions
• Monitoring competitor websites automatically
• Detecting and analyzing changes on competitor pages
• Sending notifications about competitor changes
• Managing your subscription and billing

3.2 Service Improvement

• Analyzing aggregated usage patterns to improve features
• Identifying and fixing bugs or performance issues
• Developing new features based on user needs

3.3 Communication

• Sending critical service updates and security notifications
• Responding to your support requests
• Notifying you about subscription changes or renewals
• Sending optional marketing emails (you can opt-out anytime)

3.4 Legal Compliance

• Complying with applicable laws and regulations
• Responding to lawful requests from authorities
• Enforcing our Terms of Service

4. How We Protect Your Information

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers uses TLS 1.3 encryption
• Encryption at Rest: Competitor tracking data and snapshots are encrypted using AES-256-GCM before database storage
• Secure Authentication: HTTP-only cookies with IP validation prevent session hijacking
• Database Security: PostgreSQL database with restricted access and regular security audits
• Regular Security Updates: We promptly apply security patches and monitor for vulnerabilities
• No Third-Party Analytics: We don't use third-party tracking tools like Google Analytics

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your information to third parties. Period.

We only share limited information in these specific circumstances:

5.1 Service Providers

We work with trusted third-party service providers who help us operate our business:

• Payment Processing: Dodo Payments (for subscription billing) - they handle payment data directly, we never see your card details
• Hosting: Secure cloud infrastructure providers for our database and servers
• Email Service: Transactional email providers for sending account notifications

All service providers are bound by strict confidentiality agreements and are only permitted to use your information to provide services to us.

5.2 Legal Requirements

We may disclose information if required by law, such as:

• Complying with valid legal processes (subpoenas, court orders)
• Protecting our rights, property, or safety
• Preventing fraud or illegal activities
• Protecting the safety of our users or the public

5.3 Business Transfers

If Upvotics is acquired or merged with another company, user information may be transferred. We will notify you via email before any such transfer and provide information about your choices.

6. Data Retention and Deletion

6.1 How Long We Keep Data

• Account data: Retained while your account is active
• Competitor snapshots: Retained according to your subscription plan and data retention policy
• Session data: Expires after 30 days of inactivity
• Usage analytics: Aggregated data retained indefinitely (cannot identify individuals)

6.2 Account Deletion

You can delete your account at any time. When you delete your account:

• Your email and authentication tokens are permanently deleted within 30 days
• Your competitor tracking data is deleted according to our retention policy
• All personal data is removed from our active databases
• Some data may remain in encrypted backups for up to 90 days (for disaster recovery)
• Aggregated, anonymized analytics data may be retained (contains no personal information)

To delete your account, contact us at support@upvotics.com or use the account deletion option in your dashboard.

7. Competitor Website Tracking and Data Usage

Upvotics monitors competitor websites to detect changes. Here's exactly how we track competitors:

7.1 Website Access

• We only access publicly available pages on competitor websites
• We respect robots.txt and other website access restrictions
• You explicitly add competitors to track through your dashboard
• You can remove competitors from tracking anytime

7.2 Change Detection Process

• We visit competitor websites daily to take snapshots of tracked pages
• We compare current snapshots with previous versions to detect changes
• Important: We only store snapshots and change data, not full website content
• We use AI to analyze changes and provide explanations

7.3 Compliance with Website Terms

We fully comply with website terms of service and access policies. We do not:

• Access private or login-protected areas
• Violate robots.txt or other access restrictions
• Use competitor data for advertising or tracking purposes
• Share competitor tracking data with third parties

8. Your Privacy Rights

You have the following rights regarding your information:

8.1 Access and Portability

You can request a copy of all personal data we hold about you at any time.

8.2 Correction

You can update or correct your account information through your dashboard.

8.3 Deletion

You can request deletion of your account and all associated data.

8.4 Opt-Out

You can opt-out of marketing emails at any time (service emails required for account operation).

8.5 Remove Competitor Tracking

You can remove competitors from tracking anytime through your dashboard settings. Historical change data will be retained according to our data retention policy.

To exercise any of these rights, contact us at support@upvotics.com. We will respond within 30 days.

9. Cookies and Tracking

9.1 Essential Cookies

We use essential cookies required for the service to function:

• Session cookies: HTTP-only cookies to maintain your login state
• Theme preference: Stores your light/dark mode choice
• These cookies are necessary and cannot be disabled if you want to use Upvotics

9.2 What We Don't Use

• Third-party tracking cookies
• Advertising cookies
• Social media tracking pixels

10. Children's Privacy

Upvotics is not intended for use by individuals under the age of 13 (or 16 in the EU). We do not knowingly collect information from children. If we discover that we have inadvertently collected information from a child, we will delete it immediately. If you believe a child has provided us with personal information, please contact us at support@upvotics.com.

11. International Data Transfers

Upvotics is operated from India. If you are accessing our service from outside this jurisdiction:

• Your data may be transferred to and processed in our operational jurisdiction
• We implement appropriate safeguards to protect your data during international transfers
• By using Upvotics, you consent to the transfer of your information as described in this Privacy Policy

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will notify you via email if you have an active account
• For significant changes, we may display a prominent notice in the extension
• Continued use of Upvotics after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your data based on:

• Contract: To provide the services you've subscribed to
• Consent: For optional features and marketing communications
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws

13.2 Additional GDPR Rights

• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

14. CCPA Compliance (For California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at support@upvotics.com. We will verify your identity before processing requests.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

16. Free Trial and Subscription Data

During your 7-day free trial:

• We collect and process the same minimal data as described in this policy
• Your payment information is collected but not charged until after the trial period
• You can cancel anytime during the trial with no charges
• All data handling practices remain the same regardless of subscription status