Legal

Privacy Policy.

How Uplane collects, uses, shares, and protects personal data across the Website and the Service, including our cookie policy and the GDPR and California addenda.

Last updated August 19, 2026
01

Introduction

Welcome to Uplane, Inc. (“Uplane,” “we,” “us,” or “our”). We operate a SaaS platform designed to help businesses manage their marketing efforts, including ad generation, landing page generation, and ad cost management (the “Service”). This Privacy Policy describes how Uplane collects, uses, discloses, and safeguards your information when you visit uplane.com (the “Website”) and when you use our Service.

This document also includes our Cookie Policy, detailing our use of cookies and similar technologies. We are committed to protecting personal data in accordance with applicable data protection laws, including the GDPR for individuals in the EEA, UK, and Switzerland, and the CCPA as amended by the CPRA for California consumers.

Please read this Privacy Policy carefully. If you do not agree with it, please do not access the Website or use our Service.

02

Who we are

Uplane, Inc. is a corporation registered in Delaware, with its principal place of business at:

Uplane, Inc.
500 Sansome St,
STE 410
94111 San Francisco

When providing the Website and Service directly to a customer, Uplane acts as a data controller for personal data such as account and billing information. When customers use the Service to process their end users' personal data, Uplane typically acts as a data processor on the customer's behalf. In those cases, the customer is the data controller and our Data Processing Agreement governs the processing.

03

What information we collect about you

Information you provide

  • Account and contact information: name, company, email and postal address, phone number, username, and password.
  • Payment and billing information: payment card or bank details and billing address, generally collected by our payment processors.
  • Profile information: job title, industry, and professional details used to customize your experience.
  • Communications: support correspondence, feedback, survey responses, and social-media interactions.
  • User-generated content: information, text, images, campaign settings, and other content you create or manage through the Service.

Information collected automatically

  • Log and device data: IP address, browser, operating system, device identifiers and settings, referring pages, access times, and pages viewed.
  • Usage and performance data: interactions with features, searches, campaigns, session duration, and information used to monitor the Service's performance and stability.

Information from third parties

We may receive information from authentication, analytics, advertising, marketing, and sales partners. When you connect an integrated platform, such as an advertising platform or CRM, we receive the data you authorize us to access, which may include campaign performance, ad cost, and lead data.

04

How we use your information

We use personal data to:

  • register and manage accounts, process subscriptions and payments, provide Service features, and respond to support requests;
  • analyze and improve the Website and Service, develop new features, and personalize content and recommendations;
  • send marketing communications where permitted, advertise our services, and measure campaign effectiveness;
  • conduct analytics, research, testing, and product development;
  • protect users and our systems from fraud, abuse, unauthorized access, and security incidents;
  • meet legal and regulatory obligations; and
  • support a merger, financing, acquisition, reorganization, or sale of assets.

Legal bases for these purposes

For people in the EEA, the UK, and Switzerland, each purpose rests on one of the following bases:

PurposeLegal basis
Providing accounts, the Service, and support; processing paymentsPerformance of a contract (Art. 6(1)(b))
Security, fraud and abuse prevention, and protecting our systemsLegitimate interests (Art. 6(1)(f))
Improving the Website and Service, and developing new featuresLegitimate interests (Art. 6(1)(f))
Analytics and advertising cookies and similar technologiesYour consent (Art. 6(1)(a)), given through our consent panel
Marketing email where required by law to be opt inYour consent (Art. 6(1)(a))
Tax, accounting, and other legal obligationsLegal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, those interests are: keeping the Website and Service available, secure, and free from abuse; understanding which parts of our product and marketing work so we can improve them; and running and growing our business, including reaching potential customers. We balance those interests against your rights and freedoms before relying on this basis, and you may object to processing on this basis at any time.

05

How we share your information

We may share personal data with service providers that support hosting, payments, analytics, communications, customer support, security, and CRM functions; with integrated platforms at your direction; and with current or future affiliates that must honor this policy.

Named recipients for this Website are Cloudflare, Inc., which provides hosting and the bot protection described below; PostHog, Inc., which processes product analytics on our behalf on its US Cloud once you have consented to analytics; and LinkedIn Corporation, which receives identifiers and site activity through the LinkedIn Insight Tag once advertising is permitted, for conversion measurement and retargeting. Cloudflare and PostHog act as our processors for the Website functions described here. LinkedIn processes Insight Tag data under its own privacy terms.

We may also disclose data in connection with a business transaction, with your consent, or where we reasonably believe disclosure is necessary to comply with law, protect rights or property, investigate wrongdoing, protect safety, or guard against legal liability.

06

Cookie policy and tracking technologies

Cookies are small text files placed on your device. We may also use local storage, pixels, and similar technologies to operate the Website, remember preferences, understand performance, and, where permitted, measure or personalize advertising.

Types of cookies

  • Strictly necessary: enable core functionality, security, and session management.
  • Performance and analytics: help us understand usage and improve the Website and Service.
  • Functionality: remember choices and provide personalized features.
  • Advertising and targeting: help deliver and measure relevant advertising.

Cookies may be temporary session cookies or persistent cookies. Third parties such as analytics providers, advertising partners, and social-media platforms may also set cookies or similar technologies.

Cookies currently set on this Website

These are the cookies and similar technologies this Website uses or may set, depending on the visitor and browser. The strictly necessary ones are needed to deliver the Website you asked for and to keep it secure, and under the ePrivacy rules they do not require your consent. Analytics and advertising entries do not run for EEA or UK visitors until the relevant category is accepted. California sale or sharing opt-outs and browser opt-out preference signals are also honored.

CookiePurposeSet byLifetime
up_consentStores the choice you make in the consent panel, so we do not ask again and can evidence the choice.Uplane6 months (12 months for California)
up_regionRecords which privacy regime applies to your request, so the correct consent surface is shown.Uplane24 hours
cf_clearance, __cf_bm and relatedDistinguishes people from automated systems and protects forms against abuse.Cloudflare (Turnstile, bot management)Session to 30 days
uplane_visitor_<workspace id> (local storage, not a cookie)Recognises a returning browser so repeat visits are counted as one visitor rather than several.Uplane (US region)Until you clear your browser storage
uplane_session_<workspace id> (session storage, not a cookie)Groups the pages you view into a single visit.Uplane (US region)Until you close the tab
ph_<project key>_posthog (cookie and local storage)Recognises a returning browser so product analytics counts visitors rather than page loads. If you submit the demo form, this identifier is linked to the email address you gave us.PostHog, Inc. (US Cloud)12 months
li_fat_idStores a LinkedIn ad click identifier on this domain for conversion attribution, retargeting, and analytics.LinkedIn30 days
bcookie, lidcIdentifies a browser for diagnostics and routes requests to the appropriate LinkedIn data center.LinkedIn24 hours to 1 year
UserMatchHistory, AnalyticsSyncHistory, lms_ads, lms_analyticsMatches advertising identifiers and measures advertising and analytics activity off LinkedIn.LinkedIn30 days
li_sugrSupports probabilistic matching of a visitor to a LinkedIn identity.LinkedIn90 days

Where we rely on consent, nothing non-essential is stored on or read from your device until you have given it, refusing is exactly as easy as agreeing, and refusing has no consequence for your use of the Website. You can change or withdraw your choice at any time, as easily as you gave it, using the control below or the Cookie settings link in the footer of every page. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

We keep a record of the choice you make, including the categories you agreed to and when, so that we can demonstrate it. Your browser settings can also be used to block or delete cookies, though blocking strictly necessary cookies may prevent parts of the Website from working. You may also use applicable industry opt-out tools, including the Network Advertising Initiative and Digital Advertising Alliance.

If your browser sends a Global Privacy Control signal, we treat it as an opt out of the sale and sharing of personal information without any further action from you.

07

Data security

We use reasonable technical, administrative, and physical safeguards designed to protect personal data, including encryption, access controls, security reviews, and staff training. No transmission or storage method is completely secure, so we cannot guarantee absolute security.

08

Data retention

We retain personal data only as long as necessary for the purposes for which it was collected and to satisfy legal, accounting, or reporting requirements. We consider the data's amount, nature, and sensitivity; potential harm from misuse; the processing purpose; available alternatives; and applicable law. Data processed for customers is retained primarily according to our customer agreements.

09

Children's privacy

The Website and Service are not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child under 13 has provided data to us, contact contact@uplane.com.

10

Your choices and rights

GDPR addendum

For users in the EEA, UK, and Switzerland, Uplane, Inc. at the address below is the controller responsible for personal data processed in connection with the Website and Service:

Uplane, Inc.
500 Sansome St,
STE 410
94111 San Francisco

Depending on the processing, our legal basis is performance of a contract, legitimate interests, consent, compliance with a legal obligation, or protection of vital interests.

You may have rights to access, rectify, erase, restrict, or receive a portable copy of your personal data, and to object to processing. Contact us to exercise these rights. You may also lodge a complaint with the supervisory authority in your place of residence, work, or the alleged infringement.

Withdrawing consent. Where we process personal data on the basis of your consent, you may withdraw it at any time, and doing so is as easy as giving it: use the Cookie settings link in the footer of any page, the unsubscribe link in any marketing email, or write to us. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

Providing your data. You are not required by law to give us personal data. Some of it is necessary to enter into or perform a contract with us: without account, contact, and billing details we cannot create an account, provide the Service, or invoice you. Everything else, including anything you tell us in a form or a demo request, is voluntary.

Automated decision-making. We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing, including profiling. The Service uses automation to generate and optimize advertising on our customers' behalf, which does not decide anything about you in that sense.

International transfers. Because we are based in the United States, personal data is transferred there and may be processed by our service providers in other countries. Our own analytics are collected in our US region, so measurement data about your visit is processed in the United States. PostHog, Inc. processes analytics on its US Cloud. LinkedIn Corporation processes Insight Tag data in the United States and other locations described in its privacy documentation. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum. You can request a copy of the safeguards we rely on by emailing contact@uplane.com.

California privacy addendum

In the preceding 12 months, we may have collected identifiers; California customer-record information; commercial information; internet or network activity; approximate geolocation; inferences; and payment-related sensitive personal information. We obtain these categories directly and indirectly from you and from service providers and business partners.

We use and disclose these categories for the business purposes described in this policy. We have not sold personal information. We may share identifiers, internet activity, and inferences with advertising networks, social-media platforms, and analytics providers for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16.

California consumers may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing. To submit a verifiable request, email contact@uplane.com. We may need information to verify your identity or authority and understand the request. We generally respond within 45 days, subject to a legally permitted extension.

11

Third-party websites and services

The Website and Service may link to or integrate with services we do not operate. We do not control their privacy practices and encourage you to review the privacy policy of each third party you use.

12

Changes to this Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will post the revised policy here, update the date above, and provide any additional notice required by law. Changes are effective when posted.

13

Contact us

Questions about this policy, your personal data, or your rights can be sent to contact@uplane.com.

Uplane, Inc.
500 Sansome St,
STE 410
94111 San Francisco