Privacy Policy

1. Who we are

Upgraded.today provides a package of digital analyst tools for businesses. This policy explains how we handle personal data when you visit our website and when your organisation uses the platform. Contact: Hello@Upgraded.Today.

2. Our two roles

Controller: for account data, billing data and website usage, we decide the purposes and means of processing.

Processor: for the content you put into initiatives — participant names, email addresses, reports, tasks, comments and uploaded material — your organisation is the controller and we process the data on your documented instructions, which are these terms and your use of the platform.

3. What we process

• • Account data: email address, username, company name, role and plan.
• • Billing data: billing name, address and VAT number.
• • Initiative content: initiative titles, descriptions, participant contact details, submitted reports and tasks, comments and generated analyses.
• • Technical data: log data, IP address, browser type, error reports and security events.
• • Communication: emails you send us and transactional emails we send you.

4. Purposes and legal bases

• • Delivering the platform and its tools — performance of a contract.
• • Authentication and account security — legitimate interest and legal obligation.
• • Invoicing and bookkeeping — legal obligation.
• • Service emails such as invitations, reminders and analysis notifications — performance of a contract or legitimate interest.
• • Product improvement, troubleshooting and abuse prevention — legitimate interest.
• • Optional analytics cookies — your consent.

5. AI processing

When you request an analysis, relevant initiative content is sent to our AI processing providers to generate the result. Content sent for analysis is not used to train public foundation models. You decide what content you place in the platform; avoid submitting personal data that is not necessary for the analysis.

6. Sub-processors

We use a limited number of providers to run the service: cloud hosting and database infrastructure, transactional email delivery, and AI model providers. All are bound by data processing agreements. We will inform customers of material changes to the sub-processor list on request.

7. Access and isolation

Initiatives are isolated per account at database level. Only the owner and the contributors and guests the owner invites can see an initiative. Our staff access customer content only when necessary to provide support, resolve an incident or comply with the law.

8. International transfers

Some providers may process data outside the EU/EEA. Where that happens we rely on the EU Standard Contractual Clauses or another valid transfer mechanism.

9. Retention

Initiative content is kept until you delete it or until your account is closed, after which it is deleted or anonymised within a reasonable period. Billing records are kept for as long as required by accounting law. Technical logs are kept for a limited period for security and troubleshooting.

10. Cookies

We use strictly necessary cookies and similar storage to keep you signed in, to secure the platform and to remember your cookie choice. These do not require consent. Optional analytics cookies, which help us understand how the tools are used, are only set if you accept them in the cookie banner. You can change your choice at any time by clearing your browser storage for this site, which makes the banner appear again.

11. Security

We apply row-level access control, encrypted transport, restricted administrative access, private file storage with signed access links, and regular security reviews. No system is entirely risk-free; we notify affected customers of personal data breaches without undue delay.

12. Your rights

Where we are the controller you may request access, correction, deletion, restriction, objection and data portability, and you may lodge a complaint with your supervisory authority. Where we act as processor, please direct such requests to the organisation that invited you; we will assist them in responding.

13. Changes

We update this policy as the platform develops. The date above shows the latest version, and material changes will be communicated before they take effect.