Upsy Privacy Policy

Account: your name, email and sign-in details.

Your content: the files, memory and settings you add to Upsy.

Connected accounts: access to the services you connect, and the data your AI assistants request from them, like emails, events, files or messages.

Browser: the sessions and logins of your cloud browser.

Activity: what each assistant did through Upsy (which action, when, and short details like an email's subject), for your history and alerts.

Support: the messages you send us.

Technical: the logs and usage information needed to run and secure Upsy.

Only to provide Upsy to you: to connect your AI assistants, carry out what they ask within the access you give them, show your history, send alerts, keep Upsy secure, and support you.

We don't sell your data, don't use it for advertising, and don't use data from your connected accounts to train AI models.

People at Upstash don't look at your content, unless you ask us to (for example for support), to investigate security issues or abuse, or when the law requires it.

Your files, memory, browser sessions and the keys to your connected accounts are kept in the storage you choose: Upsy's storage (on Upstash), your own Google Drive, or your own S3 bucket. Memory, keys and browser sessions are encrypted with a key of your own.

Your account, settings and activity history are kept in our database.

Gmail, Google Calendar and Google Drive connect through Composio, a service provider that keeps their access and makes requests to them for us. It doesn't store the contents of those requests; files passing through are deleted within 24 hours.

Your cloud computer runs on Upstash, and is deleted once it's idle and your session is saved.

Service providers that help us run Upsy, listed on our Subprocessors page, only to provide Upsy.

The AI assistants you connect: they receive the data they request, within the access you give them, and handle it under their own privacy policies.

The services you connect, when your assistants act there for you.

Others only when the law requires it, to protect Upsy, our users or others, or as part of a merger or acquisition, under this policy.

Upsy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use data from Gmail, Google Calendar and Google Drive only to provide the features you use in Upsy: letting the AI assistants you choose search, read and act on it, within the access you allow.

We don't use it for advertising, don't sell it, and don't use it to train AI models. We transfer it only to provide those features (to your assistants, and to Composio to reach Google), for security, to comply with the law, or in a merger or acquisition.

People at Upstash don't read it, unless you agree, for security, or when the law requires it.

Your content and keys: until you delete them, or your account. In your own Google Drive or S3 bucket, you control them.

When you disconnect a service, its keys are deleted, and its connection at Composio is removed.

Your activity history: while your account exists.

Our service providers keep logs and backups for limited periods, under their own policies.

In Upsy you can disconnect services, remove assistants or change their access, delete files and memory, delete your saved browser, and choose where your data is kept.

To close your account and delete your data, email support@upstash.com. Your rights to access, correct, delete or move your data, and to object, are described in the Upstash Privacy Policy.

Data is encrypted in transit and at rest, and your AI assistants never see the keys to your accounts. No system is perfectly secure, and Upsy is in beta: don't connect or store confidential or sensitive data.

Found a security issue? Report it to security@upstash.com.

Upsy isn't for anyone under 18.

We may update this policy. For material changes, we'll tell you by email or in Upsy before they take effect.

Questions about your privacy: support@upstash.com.