Privacy Policy

Last Updated: May 3, 2025

1. Introduction

This Privacy Policy describes how upagent ("Provider", "we", "us", or "our"), collects, uses, shares, and protects your personal information when you use our website and services. Our Service is operated from Israel.

By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

2. Scope of This Policy

This Privacy Policy applies to information we collect about you when you:

• Use our website (including any subdomains).
• Use the upagent monitoring service and related features.
• Communicate with us regarding support or other inquiries.

Collectively referred to as the "Services".

3. Information We Collect

We only collect information necessary to provide and improve our Services, communicate with you, or comply with legal obligations. We collect information in two ways: information you provide to us directly and information collected automatically.

3.1. Information You Provide to Us:

• Account Information: When you register for an account, we require your email address. You may optionally provide a password (which we store in a hashed format).
• Billing Information: If you subscribe to a paid plan, our third-party payment processor will collect information required to process payments, such as your name, billing address, and payment card details. We do not directly store your full payment card information.
• Notification Credentials: Depending on how you configure notifications within the Service, you might provide us with additional information such as webhook URLs, API keys for third-party services, email addresses, or phone numbers (for SMS notifications).
• Communications: If you contact us for support or other inquiries, we will collect the information contained in your communications (e.g., your email address, name, and the content of your message).

3.2. Information We Collect Automatically:

• Log Information: Like most online services, our servers automatically collect standard log data when you access or use our Services. This may include your IP address, browser type and version, operating system, referring website, pages visited, date and time of access, and potentially unique device identifiers.
• Usage Information: We may collect information about how you interact with our Services, such as features used, actions taken, and frequency of access.
• Time Zone: We may automatically detect or ask for your browser's reported time zone to help display times correctly or schedule reports appropriately within the Service.

4. How and Why We Use Information

We use the information we collect for the following purposes:

• To Provide and Maintain Services: To set up and manage your account, operate the monitoring service, send configured notifications, process payments, and provide customer support.
• To Improve and Develop Services: To analyze usage patterns, identify areas for improvement, develop new features, and enhance the user experience.
• To Ensure Security: To monitor for and prevent security incidents, protect the integrity of our Services, detect and combat spam or malicious activity, and protect the rights and property of the Provider and others.
• To Communicate With You: To respond to your inquiries, send important service-related notices (e.g., billing issues, policy updates), solicit feedback, and, if you opt-in, send marketing communications about our products.
• To Comply with Legal Obligations: To comply with applicable laws, regulations, court orders, or other legal processes required by Israeli authorities or other competent jurisdictions.

5. Legal Basis for Processing (Primarily under Israeli Law, considering GDPR principles)

Our legal basis for collecting and using the information described above depends on the specific information and the context in which we collect it:

• Performance of Contract: Much of our processing is necessary to fulfill our contractual obligations to you as set out in our Terms of Service (e.g., providing the core monitoring service, processing payments, managing your account).
• Legitimate Interests: We process some data based on our legitimate interests (or those of third parties), provided these interests are not overridden by your data protection rights. Examples include improving our Service, maintaining security, and basic operational communications.
• Consent: For certain processing activities, such as sending direct marketing emails or using non-essential cookies, we will rely on your explicit consent. You can withdraw your consent at any time.
• Legal Obligation: We may need to process your information to comply with legal or regulatory requirements in Israel or other applicable jurisdictions.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or other legal requirements).

Criteria for determining retention periods include:

• The duration of your active account and use of our Services.
• The existence of ongoing legal obligations (e.g., record-keeping requirements).
• The need to resolve disputes or enforce our agreements.

We may anonymize or aggregate data for statistical purposes, in which case we may use this information indefinitely without further notice to you. We periodically review our data retention practices.

7. Sharing Information

We value your privacy and do not sell your personal information. We share your information only in the limited circumstances described below:

• Third-Party Service Providers (Sub-processors): We engage trusted third-party companies and individuals to perform services on our behalf (e.g., hosting, payment processing, email delivery, SMS delivery, analytics). These sub-processors only have access to the information necessary to perform their tasks and are contractually obligated to protect your data and use it solely for the purposes for which it was disclosed. Our current key sub-processors include:
  • Hosting: Hetzner - Germany
  • Payment Processing: Lemon Squeezy
  • Email Delivery: AWS SES
  • Error Logging: Sentry
• Legal Requirements: We may disclose your information if required by law, subpoena, court order, or other governmental request from competent Israeli authorities or other jurisdictions where legally mandated.
• To Protect Rights and Safety: We may disclose information when we believe in good faith that disclosure is necessary to protect our property or rights, or the safety of third parties or the public at large (e.g., in emergencies).
• Business Transfers: If we are involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such deal and outline your choices. This Privacy Policy will continue to apply to your information post-transfer.
• With Your Consent: We may share information with third parties when we have your explicit consent to do so.

8. Security Measures

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include practices like data encryption (where appropriate), access controls, and regular security monitoring. Passwords are stored using strong hashing algorithms.

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. International Data Transfers

Your information may be processed, stored, and transferred to countries outside of your country of residence, including Israel, the United States, and countries within the European Economic Area (EEA), where our servers or our sub-processors' facilities are located.

Israel is recognized by the European Commission as providing an adequate level of data protection. When transferring data to other countries (e.g., via sub-processors in the US), we rely on appropriate safeguards such as Standard Contractual Clauses approved by relevant authorities or other legally accepted mechanisms to ensure your data receives adequate protection consistent with this policy and applicable law.

10. Your Rights

• Right to Review (Access): You have the right to review the personal information we hold about you.
• Right to Rectification: If you believe any information we hold about you is inaccurate, incomplete, or out-of-date, you have the right to request its correction or update.
• Right to Request Deletion: You may request the deletion of your personal information under certain circumstances, such as if the information is incorrect, incomplete, unclear, or outdated, or if it was collected or is being used unlawfully, or if it is no longer necessary for the purposes for which it was collected (subject to our legal obligations to retain certain data).

To exercise these rights, please contact us using the details provided in the "Contact Information" section below.

11. Cookies

We use cookies and similar tracking technologies (like web beacons or pixels) to operate and improve the Service, analyze usage, and personalize your experience. Cookies are small text files stored on your device. We use essential cookies (necessary for site function) and may use analytics or performance cookies (to understand usage).

You can control cookies through your browser settings, usually allowing you to refuse some or all cookies or to alert you when cookies are being sent. However, disabling essential cookies may affect the functionality of our Services.

12. Third-Party Links

Our Services may contain links to other websites or services not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. For significant changes, we may provide more prominent notice (such as via email to registered users). Your continued use of the Service after any modification to this Privacy Policy will constitute your acceptance of such modification.

15. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us: [email protected]