Privacy Policy
At UpliftOS, we believe your data belongs to you. This Privacy Policy describes how we collect, use, and protect your personal information — whether you use UpliftOS to build applications, run AI agents, or both — in compliance with GDPR, CCPA, and other applicable privacy regulations.
1. Our Commitment to Privacy
We are committed to protecting your privacy and ensuring that your personal data is handled with the utmost care and security. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your information.
2. Information We Collect
Account Information
- Name and email address
- Account credentials (encrypted)
- Organization and team information
- Billing and payment information
- Communication preferences
- Mobile phone number, if you choose to provide one for SMS notifications or account security
Usage Data
- Device identifiers and IP addresses
- Browser type and operating system
- Platform usage patterns and interactions
- Agent configurations and workflows
- Application specifications, source code, build logs, and deployment metadata
- Error logs and performance data
Agent Data
Data processed by your AI agents is stored securely and only accessible to you and your authorized team members. We do not use your agent data to train our models without explicit consent.
App & End-User Data
Applications you build on UpliftOS — their source code, databases, and configurations — belong to you and are treated with the same protections as your other data. If your application collects personal data from your own end users (such as your customers or employees), you are the data controller for that data and UpliftOS processes it on your behalf under our Data Processing Addendum. Your application's privacy notice — not this policy — governs what your application collects.
Voice, Video & Call Data
When you use voice or video features — including calls with AI agents — we process audio, video, recordings, and transcripts to deliver those features, using the speech, avatar, and transport providers listed on our Subprocessors page. If you record calls with third parties, you are responsible for obtaining any consent the law requires — see our Outbound Communications Policy.
3. How We Use Your Information
Platform Operations
- Providing and maintaining the UpliftOS platform
- Processing transactions and managing billing
- Authenticating users and securing accounts
- Sending important updates and notifications
- Providing customer support
Service Improvement
- Analyzing usage patterns to improve our services
- Developing new features and capabilities
- Detecting and preventing fraud and abuse
- Complying with legal requirements
4. Information Sharing
We never sell your personal information. We only share information as described below and as required by law.
SMS and Mobile Opt-In Data
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the SMS service, who process that data solely to transmit the messages you asked us to send. Your phone number is never sold, rented, or licensed. See our SMS Terms for message frequency, rates, and how to stop messages at any time.
With Your Consent
We share information when you explicitly authorize us to do so, such as when you connect third-party integrations.
Service Providers
We work with carefully selected third-party service providers who help us operate our platform. All providers sign data processing agreements.
Legal Requirements
We may disclose information when required by law, such as in response to a court order or subpoena.
5. Your Privacy Rights
Under GDPR, CCPA, and other privacy laws, you have important rights regarding your personal data:
- Right to Access — Request copies of your personal data
- Right to Rectification — Request corrections to inaccurate data
- Right to Erasure — Request deletion of your personal data
- Right to Portability — Receive your data in a portable format
- Right to Object — Object to certain processing activities
- Right to Restrict — Request limitations on processing
To exercise any of these rights, contact us at [email protected] .
6. Security Measures
Technical Safeguards
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Multi-factor authentication
- Regular security audits
- Intrusion detection systems
Administrative Safeguards
- Security-trained staff
- Role-based access controls
- Regular privacy training
- Incident response procedures
- Vendor security assessments
7. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. When you delete your account, we will delete or anonymize your data within 30 days, unless retention is required by law.
8. International Transfers
We may transfer your data to countries outside your jurisdiction. When we do, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or certification under data privacy frameworks.
9. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of material changes through the platform or by email. Your continued use indicates acceptance of the updated policy.
10. Contact Us
Spoko.ai Inc d/b/a UpliftOS
Privacy Team