Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and, if provided, your name. We use this information to authenticate you, send service notifications, and provide customer support.

Stripe Data

To provide the Service, we access data from your connected Stripe account(s) via the Stripe API. This includes:

• Webhook event logs (type, status, timestamps, payload metadata)
• Charge and payment intent summaries (amounts, statuses, IDs)
• Refund and dispute records
• Revenue aggregates used for anomaly detection

We do not access or store full card numbers, bank account details, or your customers’ personally identifiable information from Stripe. We strongly recommend using Stripe Restricted Keys with only the permissions required by Uptraq.

Usage Data

We collect standard server logs and product usage metrics (pages visited, features used, error rates) to improve the Service and diagnose issues. This data is aggregated and not tied to specific individuals beyond what is needed for debugging.

Cookies

We use essential cookies to maintain your login session and preferences. We do not use third-party advertising cookies or tracking pixels.

2. How We Use Your Information

• To provide, operate, and improve the Service
• To send transactional emails (alerts, account notifications, receipts)
• To detect and alert you to revenue anomalies and webhook failures
• To respond to support requests
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Ever.

3. Data Sharing

We share data only with the following categories of service providers, solely as needed to operate the Service:

• Stripe — for API access to your connected accounts.
• Paddle — our Merchant of Record, who processes your subscription payments and handles billing data.
• Infrastructure providers — cloud hosting and database services under strict data processing agreements.
• Transactional email providers — to deliver alerts and account notifications.

We may disclose information if required by law, regulation, or valid legal process, or to protect the rights and safety of Uptraq, our users, or the public.

4. Data Retention

We retain your account data for as long as your account is active. Stripe event data is retained for 7 days on the Free plan and 90 days on the Pro plan. You may request deletion of your account and associated data at any time by contacting us at support@uptraq.io. We will process deletion requests within 30 days.

5. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. All data is transmitted over TLS. API keys you provide are encrypted at rest. However, no system is completely secure; we encourage you to use strong passwords and Stripe Restricted Keys with minimal permissions.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, email us at support@uptraq.io. We will respond within 30 days.

7. Children’s Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Material changes will be communicated to registered users by email. Continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

9. Contact

Questions about this Privacy Policy? Reach us at support@uptraq.io.