Privacy Policy

upto. (“we,” “our,” or “us”) operates the website https://www.getupto.io and the upto. email digest service. Questions? Email us at support@getupto.io.

• Account information — your email address and name when you sign up.
• Newsletter content — emails and RSS feed items you route to your upto. inbound address, used solely to generate your digest.
• Usage data — which digests you open, which topics you save or ignore, and reply commands you send. Used to personalize your digest.
• Billing information — handled entirely by Creem (our payment processor). We do not store card numbers or payment details.
• Technical data — standard server logs (IP address, browser type, request timestamps). Retained for up to 30 days for security purposes.

• To generate and deliver your personalized email digest.
• To improve topic clustering, deduplication, and content quality.
• To send service-related emails (account setup, billing receipts, support replies).
• To detect and prevent abuse or unauthorized access.

We do not sell your data, show you ads, or share your newsletter content with third parties.

Your data is stored in the European Union using Supabase (PostgreSQL). All data is encrypted at rest and in transit (TLS). We apply role-based access controls and audit our security practices regularly.

We use the following sub-processors to operate the service:

• Supabase — database and authentication
• Postmark — email delivery and inbound email processing
• OpenAI — AI-powered digest generation (content is processed but not used to train OpenAI models)
• Creem — payment processing and subscription management
• Vercel — web hosting and infrastructure

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Digest content and newsletter items are retained for 12 months to support your archive, then deleted.

You may at any time:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your digest history

To exercise any of these rights, email support@getupto.io.

We use only essential session cookies required for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

We may update this policy from time to time. We will notify active users of material changes by email at least 14 days before they take effect.

For privacy questions or requests, contact us at support@getupto.io.