Effective Date: 02.06.2025

1. Who We Are

Upsta Analytics Pvt Ltd ("we", "our", or "us") is a data analytics company focused on transforming Order to Cash (O2C) operations through AI and predictive insights. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website or use our services.

We are the data controller for information collected through our website. For customers using our SaaS platform, we act as a data processor under applicable privacy regulations (including GDPR and CCPA).

2. Information We Collect

a) From Website Visitors:

• Contact Details: Name, email, phone number, company name, job title
• Browsing Data: IP address, browser type, device info, cookies, pages visited

b) From SaaS Clients and Users:

• Account Information: Names, business email addresses, user activity logs
• Business Data: Invoice, collections, payment behavior, or transactional files uploaded to the platform
• Log & Diagnostic Data: Session activity, access logs, metadata

3. How We Use Your Information

We use collected data to:

• Deliver and maintain our services
• Respond to inquiries or support requests
• Improve website performance and user experience
• Send updates, service notifications, and marketing communications (if opted in)
• Comply with legal or regulatory obligations

We do not sell your personal information to third parties.

4. Legal Basis for Processing (GDPR)

We process personal data based on:

• Consent (e.g., newsletter signup)
• Contractual obligation (e.g., service delivery)
• Legitimate interest (e.g., site analytics)
• Legal requirements

5. Your Rights

If you are based in the EU/EEA (GDPR) or California (CCPA), you have the right to:

• Access, correct, or delete your data
• Request data portability
• Object to or restrict data processing
• Withdraw consent at any time
• Opt out of marketing
• File a complaint with your local data protection authority

To exercise these rights, email us at hello@upstaanalytics.com.

6. Data Processor Role & Subprocessors

When providing services to our clients, Upsta Analytics Pvt Ltd acts as a data processor. We only process personal/business data as instructed by the client. We may use vetted subprocessors (e.g., AWS, email providers) to support service delivery under strict contractual and confidentiality agreements.

A full list of subprocessors is available upon request.

7. Data Retention

We retain your data only as long as necessary to:

• Deliver services
• Fulfill legal obligations
• Resolve disputes

Client data may be deleted or exported upon termination, per the client’s request.

8. Data Transfers

If personal data is transferred outside India or the EEA, we ensure that appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

9. Data Security

We implement best-in-class technical and organizational security controls, including:

• Encryption (at rest and in transit)
• Role-based access control
• Secure cloud infrastructure (e.g., AWS)
• Regular penetration testing and access audits

10. Cookies

We use cookies and similar tracking tools to analyze web traffic and personalize your experience. You can manage cookies through your browser settings.

11. Updates to this Policy

We may update this Privacy Policy to reflect changes in legal, technical, or business operations. We'll notify you through our website or email (where appropriate).

12. Contact Us

Upsta Analytics Pvt Ltd
Email: hello@upstaanalytics.com
Address: Bangalore, Karnataka, India