1. Who We Are
UpSearch is operated by UpSearch.io.
We act as the data controller for personal data processed through the UpSearch service.
If you have any questions about this policy or how your data is handled, you can contact us at:
privacy@upsearch.io
2. Information We Collect
Information you provide directly
- Account information such as name and email address
- Site descriptions, business context, goals, preferences, and configuration settings
- Messages, prompts, and instructions submitted through the UpSearch chat and report interfaces
Information accessed via Google integrations
If you explicitly connect Google services via OAuth, we may access the following data only for authorised properties:
Google Search Console
- Verified site list
- Search performance data such as queries, impressions, clicks, and average position
- Page-level and query-level performance metrics
Google Analytics (GA4)
- Property and account identifiers for connected Google Analytics properties
- Aggregated traffic, engagement, and content performance metrics
- Page-level and event-level reporting data
- Where explicitly authorised by the user, limited Google Analytics management data required to perform user-initiated configuration actions, such as enabling reporting features or linking properties necessary for analysis
We request only the minimum OAuth scopes required to provide UpSearch functionality.
Technical and usage data
- Log data required for security, abuse prevention, debugging, and service reliability
- Session identifiers and authentication tokens
- Basic usage metadata related to feature execution
We do not intentionally collect sensitive personal data.
3. How We Use Your Information
We use your information strictly to operate and deliver the UpSearch service, including to:
- Perform SEO analysis and generate recommendations
- Analyse site performance using connected Google Search Console and Google Analytics data
- Maintain system context and continuity across sessions
- Generate reports, insights, and action plans requested by you
- Perform user-requested configuration or setup actions within Google Analytics when explicitly authorised
- Enable, maintain, or support reporting and analysis features that require limited Google Analytics management permissions
- Communicate with you regarding your account, billing, or service updates
- Secure the platform, prevent abuse, and diagnose technical issues
We do not:
- Use your data for advertising
- Sell personal data
- Use Google user data for any purpose unrelated to providing UpSearch features
4. Legal Basis for Processing
Under applicable data protection laws, including GDPR, we process personal data on the following bases:
- Performance of a contract: to provide the services you request
- Legitimate interests: to maintain platform security, reliability, and functionality
- Consent: for access to Google Search Console and Google Analytics data via OAuth
You may withdraw consent for Google integrations at any time.
5. Google User Data and Limited Use Disclosure
UpSearch’s use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- Google user data is used only to provide and improve user-facing features of UpSearch
- Google user data is not used for advertising or marketing purposes
- Google user data is not used to train public or shared AI models
- Google user data is not sold or transferred to third parties except as required to operate the service
- Any Google Analytics management permissions are exercised only in response to explicit user actions and are never used for autonomous changes, advertising, or secondary purposes
6. AI Processing and Automated Analysis
UpSearch uses purpose-built AI systems to analyse data and generate recommendations.
- AI processing is performed solely to deliver requested features
- Chat inputs, site data, and authorised Google data may be processed to generate outputs
- AI-generated outputs are informational recommendations and not professional advice
- User data is not used to train public or general-purpose AI models
7. Data Storage and Security
We implement technical and organisational safeguards to protect your data, including:
- Encryption of data at rest and in transit
- Role-based access controls and restricted internal access
- Secure authentication and session handling
- Infrastructure monitoring and logging for security events
Data is stored using Supabase and related cloud infrastructure.
8. Data Retention and Deletion
- Personal data is retained only for as long as necessary to provide the service or meet legal obligations
- Google Search Console and Google Analytics data is accessed on demand to generate reports and insights
- Data derived from Google APIs is retained only as long as required to provide continuity of requested features
- If a user disconnects a Google integration, OAuth tokens are revoked and associated Google user data is no longer accessed
- You may request deletion of your account and associated data at any time by contacting privacy@upsearch.io
9. Third-Party Processors
We use trusted third-party processors solely to operate UpSearch:
- Supabase for authentication and database infrastructure
- OpenAI for AI processing
- Google for Search Console and Analytics API access
- Vercel for hosting and deployment
These providers act as data processors and process data only according to our instructions.
10. International Data Transfers
Some service providers may process data outside the European Economic Area.
Where applicable, we rely on appropriate safeguards such as standard contractual clauses to ensure adequate data protection.
11. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
To exercise these rights, contact privacy@upsearch.io.
12. Managing and Revoking Google Access
You may revoke UpSearch’s access to Google services at any time by:
- Disconnecting the integration within your UpSearch account
- Visiting myaccount.google.com/permissions and removing UpSearch
Once access is revoked, UpSearch will no longer be able to access Google user data.
13. Cookies
We use essential cookies required for:
- Authentication
- Security
- Session management
Where required by law (including in the EEA, UK, and Switzerland), we use a consent management platform (CMP) to collect and store consent choices before enabling non-essential Google tags and related storage.
- Analytics storage is enabled only after user consent where required
- Advertising-related storage and signals are enabled only after user consent where required
- Consent choices can be changed at any time through the cookie settings interface
UpSearch implements Google Consent Mode to respect these consent choices and adjust tag behavior accordingly.
14. Children’s Privacy
UpSearch is not intended for use by individuals under the age of 16.
We do not knowingly collect data from children.
15. Changes to This Policy
We may update this Privacy Policy from time to time.
If material changes are made, we will notify users through the service or by email.