Privacy policy

Data controller

The controller is individual entrepreneur Viacheslav Anatoliiovych Overkovskyi, Ukrainian tax number 3089717212. Registered and operating address: Apt. 9, 6 Artura Yarosha Street, Petropavlivska Borshchahivka, Kyiv Region, 08130, Ukraine.

Privacy contact: hello@uplify.agency, phone +380 98 307 53 41.

Information we process

Account data may include name, email, profile image, authentication identifiers, first and last login dates, plan, and subscription status.

Store data may include the feed URL and product names, descriptions, prices, availability, attributes, images, categories, SKUs, and other catalog fields. Conversations and leads may include a shopper's request, name, phone number, delivery details, consent to share information with the manager, and selected products.

Channel data. If a store connects Instagram or OLX, we receive the store account ID and name, access tokens, shopper messages and comments, and the shoppers' IDs in those services. For OLX we also receive details of the listing the shopper is writing about. Tokens are stored encrypted and are never shown in the workspace.

Notifications and tracking. Notifications sent to the store's Telegram, email, or webhook contain the shopper's name, phone number, and request. If the store turned on Nova Poshta tracking, the phone number a shopper enters in the chat is sent to the Nova Poshta API with the store's key to find their parcels.

Technical data may include IP address, browser, device, event logs, session cookies, usage statistics, model tokens, and estimated model cost.

Payment information

WayForPay processes subscription and add-on payments. UPLIFY Chat does not store full bank-card details. It may receive transaction data needed for account records, such as the payment identifier, status, amount, currency, date, and subscription period.

Why we use information

• to create accounts, authenticate users, and protect access;
• to synchronize catalogs, search products, and operate the widget;
• to receive messages from connected channels and reply to them;
• to record and deliver a shopper's lead to the store manager;
• to account for plans, payments, limits, and usage;
• to provide support, diagnose failures, protect the Service, and prevent fraud;
• to analyze aggregated product usage and improve service quality.

Legal bases and recipients

Information is processed to perform a contract, comply with legal duties, protect legitimate interests in security and service stability, and obtain consent where consent is required.

Information may be shared in the necessary scope with WayForPay, hosting providers, authentication providers, email services, and model providers. If the store has turned on the related features, information is also shared with Meta (Instagram), OLX, Telegram, and Nova Poshta. We do not sell personal information or share it for a third party's independent marketing.

Where data is stored

The Service runs on servers rented from Hetzner Online GmbH in data centres in Germany, in the European Union. Databases, backups and uploaded files are kept there. Service providers listed below may process data in other countries under their own data protection terms.

Service providers

These companies process data on our behalf, only for the purpose shown. Before a shopper's message is sent to a language model, phone numbers and email addresses in it are masked.

• Hetzner Online GmbH (Germany) — hosting, databases and backups.
• OpenAI (USA) — the language model that writes the consultant's answers; it receives the shopper's messages and the relevant products.
• Anthropic PBC (USA) — a backup language model and auxiliary text tasks.
• Voyage AI (USA) — meaning-based product search; it receives product texts and shopper search requests.
• Google LLC (Vertex AI Gemini, USA) — short conversation summaries for the store and reading images a shopper sends; names, phones, emails and addresses are removed from summary input.
• Resend and Postmark — sign-in links and notification emails.
• WayForPay — payments, as described above.

Retention

Account data is kept while the account exists or until a valid deletion request, unless law requires a longer period. Financial records may be retained for accounting and tax compliance.

Conversations are deleted automatically after a period without new messages that depends on the store's plan: 7 days on Free, 30 days on Launch, 90 days on Growth and 365 days on Scale. Their messages, summaries and replies sent to channels are deleted with them. Search text recorded by the widget is removed after the same period; the remaining event counts contain no personal data and are kept for statistics.

Raw messages received from Instagram and OLX and records of background tasks are deleted 30 days after they are processed. Saved product selections expire with their link.

Shopper requests (name, phone, delivery details and question) are kept while the store's account exists so the store can follow up, and are deleted with the account or earlier at the shopper's request. Technical logs are kept only as long as needed for diagnostics and security.

When a store's account is deleted, all shopper conversations, requests, contacts and widget events of that store are deleted together with the store's catalog and settings.

When a store disconnects Instagram or OLX, we revoke that channel's tokens and stop receiving its messages.

Data deletion

A store owner can delete the account and all store data by emailing hello@uplify.agency from the account email. To stop data exchange with Instagram or OLX only, disconnect the channel in the workspace. You can also remove the app's access in Facebook: Settings & privacy → Settings → Business integrations.

If you messaged a store on Instagram or OLX, or left a request in the chat, and want your data deleted from UPLIFY Chat, email hello@uplify.agency. Include the store name and the profile name or phone number you used. We will delete the messages and related data within 30 days and confirm by email. On request, we will instead send you a copy of everything we hold about you — messages, requests, contact details and chat events — within the same 30 days. Data the store has already received in Telegram or by email stays with the store, so please contact the store directly about it.

Cookies and protection

The Service uses necessary cookies and technical tokens for sign-in, sessions, and request protection. Traffic is sent over HTTPS. Access to internal services and databases is restricted, and critical events are logged.

Analytics and advertising

Public pages of chat.uplify.agency (home, sign-in, payment) use Meta Pixel and Google Analytics 4. They set cookies (_fbp, _fbc, _ga) to measure visits, sign-ups and payments and to show UPLIFY Chat ads. These tools do not run in the store dashboard or in the widget on customer websites.

To measure sign-ups and payments accurately, the Service also sends events from its server through the Meta Conversions API and the Google Analytics Measurement Protocol: event type, amount and plan, the identifiers from these cookies, IP address, User-Agent, and email hashed with SHA-256. For this purpose these identifiers are stored with the payment at checkout.

You can limit ad tracking in your browser settings or in your Meta and Google account settings. Recipients: Meta Platforms Ireland Ltd. and Google Ireland Ltd.

User rights

Subject to applicable law, a User may request information about processing, correction, export, deletion, or restriction. Send requests to hello@uplify.agency.

The Service is not intended for people under 18. This policy may be updated, and the date of the current version appears at the top of the page.