Privacy Policy

Upuah (“we”, “us”, “our”) provides live chat API infrastructure, an embeddable widget, and workspace tools through upuah.com. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

1. Who this policy covers

This policy applies to visitors of upuah.com, customers who create or use a Upuah workspace, agents invited to a workspace, and end users who interact with a Upuah chat widget or ticket form embedded on a customer’s website.

2. Information we collect

Account and workspace data

• Name, email address, and profile details for workspace owners and agents
• Company or workspace name, plan, billing contact information, and related settings
• API keys, embed tokens, webhook URLs, and integration configuration you create

Visitor and conversation data

• Name, email, phone, and message content submitted through chat or tickets
• Attachments uploaded with tickets where enabled
• Channel, status, timestamps, and assignment metadata for conversations and tickets

Technical and usage data

• IP address, browser type, device information, and approximate location derived from IP
• Pages and features used on upuah.com and in the dashboard
• Allowed origins, referrers, and delivery logs related to the widget and API
• Cookies and similar technologies as described in our Cookie Policy

3. How we use information

• Provide, operate, secure, and improve the Upuah service
• Authenticate API keys, enforce allowed origins, and deliver webhooks
• Route conversations and tickets to the correct workspace and agents
• Communicate about product updates, security notices, and support
• Detect abuse, prevent fraud, and comply with legal obligations
• Analyze aggregate usage to improve reliability and product quality

4. Customer responsibility

When you embed Upuah on your site, you are the controller of visitor data collected through your widget or forms. You must provide your own notices to visitors, obtain any required consent, and use Upuah only in ways that comply with applicable law. We process that data on your behalf to deliver the service.

5. Sharing

We do not sell personal information. We may share data with:

• Infrastructure and subprocessors that host, store, or deliver the service under contractual safeguards
• Payment or billing providers when you purchase a plan
• Professional advisors or authorities when required by law or to protect rights and safety
• A successor entity if we are involved in a merger, acquisition, or asset sale

6. Retention

We retain account, conversation, and ticket data for as long as your workspace is active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal requirements. You may request deletion of workspace data subject to retention obligations and technical limits.

7. Security

We use administrative, technical, and organizational measures designed to protect personal data, including access controls, encrypted transport (HTTPS), and scoped API keys. No method of transmission or storage is completely secure; please protect your credentials and rotate keys if exposed.

8. International transfers

Upuah may process data in countries other than where you or your visitors are located. Where required, we use appropriate transfer mechanisms and contractual protections.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent. Workspace owners can manage most account data in the dashboard. For other requests, contact us using the details below. We may need to verify your identity before acting.

10. Children

Upuah is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided data, contact us and we will take appropriate steps.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the service after changes become effective constitutes acceptance of the updated policy where permitted by law.

12. Contact

Privacy questions: privacy@upuah.com
Security: security@upuah.com
Website: https://upuah.com