Privacy Policy

Who we are

This policy explains how upconv, 185 Arch. Makarios III Avenue, Limassol, Cyprus ("we") handles personal data when you visit upconv.ai, book a call or write to us. We are the controller of this data.

What we collect

• Usage data: pages viewed, clicks, scroll, referrer and campaign tags, approximate location (country, city) from your IP address, device and browser type, errors.
• Session recordings: if you accept cookies, we record how you move through the site. Text you type into fields is masked.
• Contact data you give us: name, email, company and message when you write to us, book a call or reach us on Telegram.
• Booking data: name, email and the time you pick on our booking page.

Why we use it

• To answer you and run the call you booked (performance of a contract or steps before it).
• To understand which pages and products interest visitors and to improve the site (legitimate interest; cookies and recordings only with your consent).
• To keep the site secure and fix errors (legitimate interest).
• To meet legal obligations, where they apply.

Cookies and consent

Until you choose, and if you pick "Necessary only", analytics runs in memory: no analytics cookies and no session recording; each reload is a new anonymous visitor.

"Accept" enables analytics cookies and session recording. You can change your choice any time via "Cookie settings" in the footer; withdrawing consent deletes the analytics cookies.

We may use automated tools to summarise session recordings to understand what visitors were looking for. This has no legal or similarly significant effect on you.

Who processes data for us

• Vercel Inc. (USA): website hosting.
• PostHog Inc. (USA): product analytics, session recordings and error tracking.
• Notion Labs Inc. (USA) and Google LLC (USA): booking page, calendar and Google Meet calls.
• Zoho Corporation B.V. (EU): our email.
• Telegram: internal notifications to our team about visits and enquiries, and chats if you message us there.

International transfers

Some providers are in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

How long we keep it

Usage data and recordings: up to 12 months. Correspondence and booking data: as long as we are in contact and up to 3 years after, unless the law requires longer.

Your rights

Under the GDPR you can ask to access, correct, delete or port your data, restrict or object to processing, and withdraw consent at any time. Write to us and we will reply within one month.

You can also complain to the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy) or your local authority.

Changes

We may update this policy. The date at the top shows the latest version.