Privacy Policy

Upplift is operated by Unified Path Holdings LLC, a Delaware limited liability company (“Upplift”, “we”, “us”). This policy explains how we handle personal information in connection with the Upplift platform and our website.

Upplift is a business-to-business platform. Our customers are companies who use it to create branded, access-controlled spaces for their own investors, customers, partners and suppliers. We therefore handle personal information in two distinct roles:

• As a controller — for information about our own customers and website visitors: account details, billing information, support correspondence, access requests and platform usage data. This policy governs that information.
• As a processor— for the content and contacts our customers upload into their spaces, including information about their stakeholders. We process that material on our customer’s documented instructions under our agreement with them. If you are a stakeholder who was given access to a space, the company that invited you is responsible for that information, and requests should go to them in the first instance.

• Account information — name, work email, company, role and authentication identifiers. Sign-in is handled by a third-party identity provider; we do not store passwords.
• Customer content — documents, video, images, messages and structured records our customers upload or create, together with the contact details of stakeholders they invite.
• Usage and technical data — log records, IP address, browser and device information, features accessed and timestamps. We keep audit records of security-relevant actions.
• Billing information — subscription status and transaction records. Card details are handled by our payment processor and never reach our systems.
• Enquiries — what you submit through our access-request form or send us by email.

• To provide, secure and operate the platform, including authenticating users and enforcing access controls.
• To communicate with you about your account, service changes and support requests.
• To process payments and administer subscriptions.
• To monitor performance, diagnose faults and prevent abuse or unauthorised access.
• To comply with legal obligations and enforce our agreements.
• To respond to access requests and, where you have asked to hear from us, to send relevant updates.

We do not sell personal information, and we do not use customer content to train general-purpose artificial-intelligence models.

Some features use third-party AI services to generate answers or summarise material. Where a space includes an assistant, what it can draw on is bounded by the same access rules that govern what the person asking can already see — it cannot reach content that is locked to them. Relevant excerpts are transmitted to our AI providers to generate a response. Those providers act as processors and are contractually prevented from using the material to train their models.

We share information with a small number of vendors who help us run the platform. Each is bound by contract to protect it and to use it only to provide services to us. They cover:

• Cloud hosting and application delivery.
• Database hosting.
• Identity and authentication.
• File and object storage.
• Video hosting and streaming.
• Transactional email delivery.
• Error monitoring and performance analytics.
• Payment processing.
• AI text generation and embeddings.

A current list naming each sub-processor is available on request from [email protected]. We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets.

We are based in the United States and our infrastructure is primarily hosted there. If you access the platform from elsewhere, your information will be transferred to and processed in the United States, which may have different data-protection laws than your own country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

We apply technical and organisational measures appropriate to the risk, including encryption in transit, database-level isolation between customers, least-privilege access controls, signed time-limited links for stored files, and audit logging of sensitive operations. No system is perfectly secure, and we cannot guarantee absolute security.

We keep account information and customer content while an account is active, and afterwards only as long as needed for the purposes described here or to meet legal, accounting or reporting obligations. Customers may request deletion of their content at any time; we will delete or de-identify it within a reasonable period, subject to backups being overwritten on their normal cycle.

Depending on where you live, you may have the right to request access to your personal information, to have it corrected or deleted, to object to or restrict certain processing, to receive a portable copy, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal information for cross-context behavioural advertising.

To exercise a right, contact [email protected]. If your information was uploaded by one of our customers, we will refer your request to them and support them in responding.

We use a small number of strictly necessary cookies to keep you signed in and to secure the service. We do not use advertising cookies. Blocking necessary cookies will prevent sign-in from working.

The platform is intended for business use and is not directed to children under 16. We do not knowingly collect information from children.

We may update this policy from time to time. When we make material changes we will update the version above and, where the change affects customers, ask account holders to review and accept the new version on next sign-in.

Unified Path Holdings LLC — privacy enquiries: [email protected].