Privacy Policy

1. Information We Collect

We may collect information that you voluntarily provide to us, including:

• Name
• Email address
• Company name and role
• Contact information
• Information contained in messages, inquiries, applications, or task requests
• Other information you choose to provide when communicating with us

We may also automatically collect limited technical information when you use our website, including IP address, browser type, device information, operating system, referring URLs, pages visited, and similar usage information.

2. How We Use Information

We may use personal information to:

• Respond to inquiries and requests
• Communicate with prospective and existing clients
• Scope and provide our services
• Manage business relationships and contracts
• Operate, maintain, secure, and improve our website
• Prevent fraud, abuse, and unauthorized access
• Comply with applicable legal obligations
• Protect our rights and the rights of our clients and users

We do not use client confidential information to train public or third-party artificial intelligence models unless expressly authorized by the client in writing.

3. Client Information

When providing engineering services, Upvista may receive access to information controlled by our clients, including source code, repositories, credentials, technical documentation, databases, logs, and other information.

Where we process personal information on behalf of a client, we will process that information only as necessary to provide the contracted services and in accordance with the client's documented instructions and applicable contractual requirements.

The client's applicable agreement with Upvista may contain additional confidentiality, security, data-processing, retention, and deletion requirements.

4. Confidential Information

We treat information provided to us in connection with a client engagement as confidential where the information is identified as confidential or would reasonably be understood to be confidential given its nature and the circumstances of disclosure.

Our contractual agreements may impose additional or more specific confidentiality obligations.

5. Service Providers

We may use trusted third-party service providers to operate our business and provide our services, including providers for hosting, communications, analytics, scheduling, authentication, project management, development infrastructure, and security.

We require appropriate contractual and security protections where applicable.

6. International Transfers

Upvista may operate or use service providers located in countries other than the country in which you reside.

Where applicable law requires safeguards for international transfers of personal information, we will use appropriate legal mechanisms and contractual safeguards.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, to provide our services, maintain business and transaction records, resolve disputes, enforce agreements, and comply with legal obligations.

Client data may be subject to additional retention and deletion requirements under the applicable agreement.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Client engagements may be subject to additional security requirements established in an applicable agreement.

9. Your Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including rights to access, correction, deletion, restriction of processing, objection, portability, or withdrawal of consent.

Requests may be submitted using the contact information below.

10. Cookies and Analytics

Our website may use cookies or similar technologies for functionality, security, analytics, and performance.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

11. Children's Privacy

Our services are intended for businesses and professional users and are not directed toward children under the age required by applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date.