Privacy policy

What this covers

This policy explains what information UpStack CRM collects, how it is used and the choices you have. It applies to the website at upstackcrm.com and the app at app.upstackcrm.com.

Information we collect

• Account details you give us, such as your username, email address and password.
• Business data you put into the app, such as contacts, messages, files, courses and invoices.
• Billing information, which is handled by Stripe. We do not store full card numbers.
• Basic technical data, such as your browser type and the pages you request, used to run and secure the service.

Your contacts' data

The people in your workspace are your customers and leads. You decide what to collect and how to use it. We process that data on your behalf to provide the service and do not sell it.

How we use information

We use it to run the service, take payment for your plan, send account and security messages, fix problems and improve the product.

Who handles data for us

We use service providers to run the product, including Vercel for hosting, Supabase for the database and sign-in, and Stripe for plan billing. If you connect your own email, text, payment or AI accounts, your data also passes through those providers under their terms.

Cookies

We use cookies that keep you signed in and keep the app secure. We do not use them for advertising.

The demo

The demo creates a temporary account with made-up data. It is deleted when the visitor exits, signs out or after two hours. The demo is limited per visitor, and we keep a one-way hash of the visitor's address for that limit.

Keeping and deleting data

You can export your contacts and delete records from the app. When a workspace is closed, its data is removed from active systems.

Children

UpStack CRM is for businesses and is not meant for children.

Changes

We may update this policy and will change the date at the top when we do.