Uplup Logo

Privacy Policy

Your privacy is important to us. Learn how we protect your data.

Last updated: August 28, 2025

Table of Contents

Uplup operates the https://uplup.com website, which provides the SERVICE.

This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decides to use our Service, the Uplup website.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which are accessible at https://uplup.com, unless otherwise defined in this Privacy Policy.

Roles of the Parties (GDPR/UK GDPR/CCPA)

For campaigns that our customers run on Uplup, the customer (e.g., a brand or company) determines the purposes and means of processing personal data. Accordingly, the customer is the Data Controller (or business under CCPA/CPRA), and Uplup Inc. acts as the Data Processor (or service provider under CCPA/CPRA), processing personal data solely on behalf of and under the instructions of the customer. You can permanently delete all campaign data at any time from your account. You can also download all of your campaign data in CSV format. All CSV download links will auto-expire after 7-days for security.

We do not sell or share personal data for cross-context behavioral advertising. We process data only to provide and secure the Service, fulfill legal obligations, and as otherwise described here.

Categories of Data We Process

  • Account & Billing Data: name, email, organization, and transactional information you provide when creating an account or purchasing.
  • Contest Entrant Data: fields configured by the customer (e.g., name, email, social handles), plus timestamps, IP address, device signals used for security/fraud prevention, and submission metadata.
  • Technical Data: IP address, device identifiers, browser type, language, referrer, pages viewed, and similar usage information.
  • Support Communications: messages you send to us (e.g., tickets, chat).

Legal Bases for Processing (EEA/UK)

Where the GDPR/UK GDPR applies, we rely on the following legal bases: (i) performance of a contract (to provide the Service to you or our customer), (ii) legitimate interests (e.g., to secure, improve, and operate the Service), and (iii) compliance with legal obligations. Where consent is required by law (e.g., for certain cookies/analytics in the EEA/UK), we will seek it from the relevant user.

Information Collection and Use

For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to your name, phone number, and postal address. The information that we collect will be used to contact or identify you.

How We Process Your Data

We collect and process data to provide and improve our Service. This includes processing data to understand user interactions with our website, improving user experience, and ensuring security. The data we collect may include Personal Information, such as your name, phone number, postal address, IP address, browser type, and the pages you visit on our site.

We may process your data for the following purposes:

  • To provide and maintain our Service, including monitoring its usage.
  • To manage your account and provide customer support.
  • To detect, prevent, and address technical issues.
  • To provide you with news, special offers, and general information about our services unless you opt-out of receiving such information.

Cookies & Tracking Technologies

We use cookies and similar technologies to run and improve the Service. This includes: strictly necessary cookies (for core features and security), analytics cookies (to understand usage and improve the product), and security/fraud-prevention technologies (to protect campaigns from abuse).

  • Google Analytics: used to measure usage and performance. Google may set cookies to enable these features. Where required by law, analytics cookies are only set with your consent. You can opt out via your browser settings or Google’s opt-out tools.
  • IPQualityScore (device fingerprinting for anti-fraud): we use ipqualityscore.com to help detect bots, duplicate/abusive entries, and other suspicious activity. This involves collecting device and network signals (e.g., IP address, user agent, device/behavioral signals) to generate a fraud risk score used to protect campaigns.

You can manage cookies in your browser settings. If you block certain cookies or scripts, parts of the Service may not function properly.

How To Delete Your Data

Customers (controllers) may delete entrant data at any time within the product. End users may also request deletion by contacting the contest owner directly. If you contact Uplup about a contest you did not create, we will route your request to the applicable customer and assist them in responding.

Upon a verified deletion request, we will permanently delete or irreversibly anonymize personal data within 30 days, unless retention is required by law or allowed for legitimate business purposes (e.g., security logs). Backups are purged on a rolling schedule.

Log Data

We want to inform you that whenever you visit our Service, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

Cookies

Cookies are files with small amounts of data that are commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive.

Our website uses these "cookies" to collect information and to improve our Service. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.

Service Providers

We engage third parties to help us provide, secure, and improve the Service. When these providers process personal data on our behalf, they are our sub-processors and may only process data as instructed by Uplup. We require appropriate confidentiality, security, and data protection commitments from them.

  • DigitalOcean (hosting & infrastructure): cloud servers and storage used to host the Service.
  • IPQualityScore (security & fraud prevention): device fingerprinting and risk scoring to help block abusive entries and cheaters.
  • Google Analytics (analytics): product usage analytics to improve our Service.

We will update this section if our core sub-processors materially change. Enterprise customers may request a current list via support.

International Data Transfers

We may process and store personal data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.

Data Retention

We retain personal data for as long as necessary to provide the Service and as instructed by the customer, to comply with legal obligations, resolve disputes, and enforce our agreements. Log data and security records may be kept for a limited period to investigate abuse and ensure the integrity of campaigns.

Your Privacy Rights

Depending on your location, you may have rights such as access, correction, deletion, portability, objection, and restriction. Where Uplup acts as a processor, requests relating to contest data should be directed to the contest owner (the controller). We will support our customers in responding to such requests.

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct certain information, and to opt out of certain data “sharing.” Uplup does not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Security

We value your trust in providing us with your Personal Information, thus we strive to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case that we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to take the necessary actions.

If you are located in the EEA/UK, our Service is not directed to children under the age at which consent is valid in your country (typically 16). We do not knowingly use analytics or marketing cookies for users under the applicable age of consent.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

Contact Us

If you have questions about this Privacy Policy or how we process personal data, please contact us through the website or your account representative. If you are an end user of a contest, please contact the contest owner (our customer) first; we will assist them in addressing your request as needed.

Website: https://uplup.com