Privacy Policy

Welcome to Upvotics. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, protect, and handle information when you use our Chrome extension and services.

Our Privacy Commitment

1. Information We Collect

1.1 Account Information

When you create an account with Upvotics, we collect only the minimum information necessary to provide our services:

• Email address: Used solely for account authentication, service communications, and password recovery
• Authentication tokens: Encrypted and stored securely to maintain your session
• Subscription status: To manage your plan (Free Trial, Monthly, or Annual)

1.2 Reddit OAuth Authentication

To provide our analytics and enhancement features, we use Reddit's official OAuth 2.0 authentication system. During this process:

• We receive temporary access tokens from Reddit (with your explicit permission)
• These tokens are encrypted using AES-256-GCM encryption before storage
• Tokens are used exclusively to fetch data on your behalf when you actively use our extension
• We store your Reddit username and basic profile information (avatar, karma) only for display purposes within the extension
• Important: We do NOT store your Reddit posts, comments, browsing history, or any content data

1.3 Technical Information

To maintain security and provide a reliable service, we automatically collect minimal technical data:

• IP Address: Used only for security validation and fraud prevention (not stored permanently)
• Browser type and version: To ensure compatibility
• Device type: For optimizing user experience
• Session information: To maintain your login state securely

1.4 Usage Analytics

We collect anonymous, aggregated usage statistics to improve our service:

• Feature usage frequency (which tools you use most)
• Extension performance metrics
• Error reports and crash logs (anonymized)
• Note: All analytics are aggregated and cannot be tied back to individual users

2. What We Explicitly Do NOT Collect

3. How We Use Your Information

The limited information we collect is used exclusively for:

3.1 Service Delivery

• Authenticating your account and maintaining secure sessions
• Providing real-time Reddit analytics and insights within the extension
• Displaying your Reddit profile information in the extension sidebar
• Managing your subscription and billing

3.2 Service Improvement

• Analyzing aggregated usage patterns to improve features
• Identifying and fixing bugs or performance issues
• Developing new features based on user needs

3.3 Communication

• Sending critical service updates and security notifications
• Responding to your support requests
• Notifying you about subscription changes or renewals
• Sending optional marketing emails (you can opt-out anytime)

3.4 Legal Compliance

• Complying with applicable laws and regulations
• Responding to lawful requests from authorities
• Enforcing our Terms of Service

4. How We Protect Your Information

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers uses TLS 1.3 encryption
• Encryption at Rest: Reddit access tokens are encrypted using AES-256-GCM before database storage
• Secure Authentication: HTTP-only cookies with IP validation prevent session hijacking
• Database Security: PostgreSQL database with restricted access and regular security audits
• Regular Security Updates: We promptly apply security patches and monitor for vulnerabilities
• No Third-Party Analytics: We don't use third-party tracking tools like Google Analytics

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your information to third parties. Period.

We only share limited information in these specific circumstances:

5.1 Service Providers

We work with trusted third-party service providers who help us operate our business:

• Payment Processing: Dodo Payments (for subscription billing) - they handle payment data directly, we never see your card details
• Hosting: Secure cloud infrastructure providers for our database and servers
• Email Service: Transactional email providers for sending account notifications

All service providers are bound by strict confidentiality agreements and are only permitted to use your information to provide services to us.

5.2 Legal Requirements

We may disclose information if required by law, such as:

• Complying with valid legal processes (subpoenas, court orders)
• Protecting our rights, property, or safety
• Preventing fraud or illegal activities
• Protecting the safety of our users or the public

5.3 Business Transfers

If Upvotics is acquired or merged with another company, user information may be transferred. We will notify you via email before any such transfer and provide information about your choices.

6. Data Retention and Deletion

6.1 How Long We Keep Data

• Account data: Retained while your account is active
• Reddit tokens: Automatically expire and are refreshed as needed
• Session data: Expires after 30 days of inactivity
• Usage analytics: Aggregated data retained indefinitely (cannot identify individuals)

6.2 Account Deletion

You can delete your account at any time. When you delete your account:

• Your email and authentication tokens are permanently deleted within 30 days
• Your Reddit OAuth authorization is revoked immediately
• All personal data is removed from our active databases
• Some data may remain in encrypted backups for up to 90 days (for disaster recovery)
• Aggregated, anonymized analytics data may be retained (contains no personal information)

To delete your account, contact us at support@upvotics.com or use the account deletion option in your dashboard.

7. Reddit API and Data Usage

Upvotics uses the official Reddit API to provide analytics and insights. Here's exactly how we interact with Reddit:

7.1 API Access

• We request read-only access to your Reddit account (with your explicit permission)
• Access is granted through Reddit's OAuth 2.0 system
• You can revoke our access anytime through Reddit's app preferences

7.2 Real-Time Data Processing

• When you use Upvotics features, we fetch data from Reddit in real-time
• This data is processed in your browser and displayed immediately
• Important: Reddit content data is NOT stored on our servers
• We only cache minimal metadata temporarily (for performance) which expires within minutes

7.3 Compliance with Reddit's Terms

We fully comply with Reddit's API Terms of Use and Data API Terms. We do not:

• Use Reddit data for advertising or tracking purposes
• Share Reddit data with third parties
• Create derivative databases of Reddit content
• Violate Reddit user privacy in any way

8. Your Privacy Rights

You have the following rights regarding your information:

8.1 Access and Portability

You can request a copy of all personal data we hold about you at any time.

8.2 Correction

You can update or correct your account information through your dashboard.

8.3 Deletion

You can request deletion of your account and all associated data.

8.4 Opt-Out

You can opt-out of marketing emails at any time (service emails required for account operation).

8.5 Revoke Reddit Access

You can revoke Upvotics' access to your Reddit account through Reddit's app preferences or by logging out of Upvotics.

To exercise any of these rights, contact us at support@upvotics.com. We will respond within 30 days.

9. Cookies and Tracking

9.1 Essential Cookies

We use essential cookies required for the service to function:

• Session cookies: HTTP-only cookies to maintain your login state
• Theme preference: Stores your light/dark mode choice
• These cookies are necessary and cannot be disabled if you want to use Upvotics

9.2 What We Don't Use

• Third-party tracking cookies
• Advertising cookies
• Social media tracking pixels

10. Children's Privacy

Upvotics is not intended for use by individuals under the age of 13 (or 16 in the EU). We do not knowingly collect information from children. If we discover that we have inadvertently collected information from a child, we will delete it immediately. If you believe a child has provided us with personal information, please contact us at support@upvotics.com.

11. International Data Transfers

Upvotics is operated from India. If you are accessing our service from outside this jurisdiction:

• Your data may be transferred to and processed in our operational jurisdiction
• We implement appropriate safeguards to protect your data during international transfers
• By using Upvotics, you consent to the transfer of your information as described in this Privacy Policy

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will notify you via email if you have an active account
• For significant changes, we may display a prominent notice in the extension
• Continued use of Upvotics after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your data based on:

• Contract: To provide the services you've subscribed to
• Consent: For optional features and marketing communications
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with applicable laws

13.2 Additional GDPR Rights

• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

14. CCPA Compliance (For California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at support@upvotics.com. We will verify your identity before processing requests.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

16. Free Trial and Subscription Data

During your 7-day free trial:

• We collect and process the same minimal data as described in this policy
• Your payment information is collected but not charged until after the trial period
• You can cancel anytime during the trial with no charges
• All data handling practices remain the same regardless of subscription status