Privacy Policy

We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679). Below — what data, why, and on what legal basis.

1. Data we collect

• Email address — to create an account and sign in via magic link.
• Profile content — text, .mhtml, or .pdf you submit for analysis. Processed to generate the audit report and then deleted.
• Payment data — processed exclusively by Stripe. We receive only a transaction confirmation; we never see or store card details.
• Usage data — credit balance, generated reports (stored so you can access report history).

2. Legal basis and purposes

• Contract performance (Art. 6(1)(b) GDPR) — account, credits, audit generation.
• Legitimate interest (Art. 6(1)(f) GDPR) — fraud prevention, service security.

3. Data retention

Profile content submitted for analysis is deleted after the report is generated. Account data (email, balance, report history) is retained until account deletion. We retain records required by tax law for 5 years.

4. Third parties

• Supabase — authentication and database (EU region).
• Stripe — payment processing.
• Anthropic — AI model used to generate audit reports.
• Vercel — hosting infrastructure.

We do not sell or share personal data with advertisers or other third parties.

5. Your rights

Under GDPR you have the right to access, rectify, erase, restrict processing of, and port your data, as well as to object to processing. To exercise these rights, contact: support@up-bro.com.

6. Complaints

You may lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl) or the supervisory authority in your country of residence.