This Privacy Policy explains how we collect, use, share, and protect information when you use any Upsted service, including Upsted Spark, at https://www.upsted.com/spark.
By using our services, you agree to the practices described below.
Personal Information
We collect personal information when you:
This may include:
Financial and Transactional Data
Plaid Integration
When you link a financial account via Plaid, we retrieve certain financial data (e.g., account name, balances, and transaction history) to help us better understand your financial context and provide supportive tools and experiences. We do not store your login credentials or account/routing numbers. We store Plaid access tokens in accordance with Plaid’s security recommendations, which allow us to securely maintain access to your linked accounts and update financial data as needed. Your use of Plaid is governed by the Plaid Privacy Policy.
Stripe Integration
We use Stripe to handle:
Upsted does not store or process card numbers or full bank account details. All sensitive financial data is handled by Stripe in accordance with PCI DSS. Your use of Stripe is governed by the Stripe Privacy Policy.
We use your information to:
We do not sell your personal data.
We may share your data only with:
All third parties are contractually obligated to protect your information and comply with applicable laws.
We retain data only as long as necessary for the purposes described above or as required by law.
Security measures include:
Upsted does not store your Plaid or Stripe login credentials or sensitive financial identifiers (e.g., full bank account or card numbers). We do store certain financial data retrieved via Plaid (such as account metadata, balances, and transaction histories) and Stripe (such as invoices, payout records, and subscription statuses) in order to provide core features and services. All sensitive payment data is securely handled by Stripe in compliance with industry standards (e.g., PCI DSS).
Depending on your location, you may have the right to:
To exercise your rights, please contact us at: privacy@upsted.com. We will respond in accordance with relevant laws (e.g., GDPR, CCPA).
We use cookies and similar technologies to:
You can control cookies via your browser settings. Some features may not work properly if cookies are disabled.
Our Services are not intended for children under 13 years of age (or 16 in jurisdictions with heightened protections). We do not knowingly collect data from children without verified parental consent.
We may update this Privacy Policy occasionally. If we make material changes, we will notify you by email or via the Services. Please review this page periodically.
If you have questions or concerns about this Privacy Policy, contact us: