Privacy Policy

How Upadz collects, uses, shares and protects personal information.

Last updated October 19, 2026 · Effective October 19, 2026

1. Who controls your information

InnovaCore LLC, a Wyoming limited liability company operating Upadz, is responsible for personal information described here. Contact privacy@upadz.io or write to 30 N Gould St Ste N, Sheridan, WY 82801, United States. This policy covers the website and Service.

2. Information we collect

We collect account and workspace details; content and product URLs you submit; uploaded and generated media; prompts, research, projects and generation records; support messages; and information about how you use the Service. We also process device, browser, IP address, session and security data needed to operate and protect it.

For billing, we record plan, interval, amounts, tax, payment status, processor identifiers, refunds, disputes, credit ledger entries and policy acceptance versions. Stripe processes payment details. We do not receive full card numbers. For affiliate referrals, we record referral clicks, attributed signups, payments and commissions; affiliates see aggregate earnings rather than referred customers' identities.

3. How we use information

We use information to create and secure accounts, run workspaces and AI generation, process payments and credits, support customers, prevent fraud, operate referrals, measure and improve the Service, communicate about transactions, and comply with law. We record policy acceptance time and versions, and may store keyed hashes of IP address and browser information as evidence. After account deletion, we may retain a one-way keyed email hash to prevent repeat free-credit claims.

4. Legal bases where applicable

Where EEA or UK law applies, we process information to perform our contract, comply with legal obligations, pursue legitimate interests in security, fraud prevention and service improvement, or on consent for optional analytics and other processing that requires it. You may withdraw consent at any time without affecting earlier lawful processing.

5. Who receives information

We use Vercel for hosting, Supabase for database and authentication, Stripe for payments, and service providers for AI generation, storage, analytics, communication and support. We share only information needed for those services. We may also disclose information to authorities or advisers where legally required, or in a business transaction subject to appropriate safeguards.

Content you ask us to generate may be sent to AI providers to perform that request. If you connect an advertising platform, information needed for that integration is exchanged with the platform under your authorization.

6. Cookies and analytics

Necessary cookies support sign-in, security and core functions. Optional analytics run according to your choice where consent is required. Referral links may use a 30-day attribution cookie. The Cookie Policy explains these technologies and how to change your choice.

7. International transfers

Upadz is run remotely. We and our service providers may process your information in the United States and other countries, where privacy laws may differ.

8. Retention and security

We retain information while needed to provide the Service and for security, fraud prevention, disputes and legal obligations. Payment, invoice and accounting records are kept as long as required by applicable tax and accounting law. We delete or de-identify information when it is no longer needed, subject to lawful exceptions and backups.

We use access controls, encryption in transit and other technical and organizational measures to protect information. No service can guarantee absolute security.

9. Your rights

Depending on your location, you may request access, correction, deletion, portability or restriction of your personal information; object to certain processing; withdraw consent; or appeal a decision. Contact privacy@upadz.io. You may also complain to your local data-protection authority. Some requests are limited by legal obligations or the rights of others.

You can request account and data deletion through the Service or at privacy@upadz.io. Deleting an account immediately cancels its subscription and forfeits unused credits, subject to applicable law; see the Refund & Cancellation Policy.

10. Children and changes

The Service is for adults aged 18 or older. We do not knowingly provide it to children. We may update this policy and will give notice of material changes where required.