Who is responsible for your data
Upogee is operated from Spain. The service operator is the data controller for personal data processed to provide Upogee. The operator's complete legal identity, tax identification and business contact details will be published on the website before paid checkout is activated. Privacy and account requests can be sent to support@upogee.com.
What we collect
Depending on how you use Upogee, we process account and authentication data, profile and workspace settings, portfolio and transaction information you choose to enter or import, support communications, technical and security logs, and product or website analytics. If paid subscriptions are activated, billing records and subscription status are also processed, while card data is handled by the payment provider or Merchant of Record rather than stored directly by Upogee.
Why we use information
We process data to create and secure accounts, provide portfolio tracking and analytics, synchronize and validate user-supplied records, provide support, prevent abuse, diagnose errors, improve reliability, measure product usage and comply with legal obligations. We do not sell personal data and do not use portfolio data to sell advertising.
Legal bases
Where the GDPR applies, processing needed to provide an account and the requested product is based on performance of the service contract or steps requested before entering it. Security, fraud prevention, reliability and limited product improvement may rely on legitimate interests where those interests are not overridden by your rights. Optional Google Analytics is based on consent. Processing required by tax, accounting or other law is based on the applicable legal obligation.
Local-first product behavior
Upogee uses a local-first architecture for speed and continuity. Parts of your portfolio experience may be stored or cached in your browser so the dashboard can load efficiently on repeat visits. Browser storage used for required product state is separate from optional analytics consent and can be removed by signing out, deleting the account where applicable, or clearing site storage, although doing so may reduce functionality or require data to be synchronized again.
Service providers
Upogee uses specialist providers for hosting and delivery, authentication and database services, security and error monitoring, transactional email, analytics and, once paid subscriptions are enabled, payment processing or Merchant of Record services. Current infrastructure includes services such as Vercel, Supabase, Cloudflare, Sentry, Resend and optional Google Analytics. Providers receive only the data reasonably necessary for their role and are subject to the contractual and security arrangements applicable to that service.
Analytics and cookies
Vercel Web Analytics is used for privacy-friendly aggregate measurement. Google Analytics, when configured, is optional and does not load until you accept analytics cookies. You may reject it without losing access to Upogee and can change that choice through Cookie settings. More detail is available in the Cookie Policy.
International transfers
Some service providers may process data outside Spain or the European Economic Area. Where GDPR transfer restrictions apply, Upogee relies on the transfer mechanism and safeguards made available by the relevant provider, such as an adequacy decision, Standard Contractual Clauses or another lawful mechanism.
How long we keep data
Account and portfolio data is generally retained while your account remains active and for a limited period afterwards where needed for recovery, security, dispute resolution or legal obligations. Support, billing, tax and security records may be kept for the periods required by applicable law or reasonably necessary to establish or defend legal claims. Data that is no longer required is deleted or anonymized where practical.
Your rights
Where applicable, you may request access, correction, deletion, restriction, portability or objection and may withdraw consent at any time for consent-based processing. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country. Requests can be sent to support@upogee.com and we may need to verify your identity before acting on a request.
Security
Upogee applies technical and organizational measures intended to protect account and portfolio information, including access controls, encrypted transport, security monitoring and separation of payment-card handling from Upogee where a payment provider is used. No online service can guarantee absolute security, so users should also protect their account credentials and devices.
Changes and contact
We may update this policy when the product, providers or legal requirements change. Material changes will be reflected on this page with a revised date. For privacy questions or data-rights requests, contact support@upogee.com.