Privacy policy

Who we are

UpSecure provides cybersecurity consulting, secure AI adoption, websites, web apps, and automation for small businesses, solo professionals, and families. This policy covers upsecure.us and the services we run on it. Contact us at info@upsecure.us.

What we collect

When you send us a message

Your name, email address, the topic you selected, your message, and — only if you choose to provide it — your mobile phone number. We also store a one-way hash of your IP address and your browser's user-agent string. We hash the IP rather than storing it so we can spot abuse of the form without keeping a record of where you connected from.

When you run a free security checkup

The domain you entered and the results we found, along with a hashed IP and user-agent. The checkup reads public DNS and certificate records only. It never touches your accounts, devices, or mailboxes, and it cannot see anything a mail server couldn't already see.

When you use the chat or voice assistant

Chat conversations are stored so a person can follow up and so we can improve the answers. Voice calls are handled by our provider, Retell AI, which records and transcribes them for the same reason. Please don't share passwords, recovery codes, card numbers, or account numbers with either one — we will never ask for them, and our assistants are instructed to stop you if you start.

What we don't collect

We don't run advertising trackers, we don't use analytics cookies, and we don't build profiles of visitors across other websites.

Text messages (SMS)

Providing a mobile number is optional and never required to get help from us. You only receive texts if you tick the consent box, which is unticked by default and reads:

Text me about my request. I agree to receive SMS messages from UpSecure at the number provided. Message frequency varies. Msg & data rates may apply. Reply STOP to opt out, HELP for help.

We use SMS only to support an existing conversation — confirming and reminding you about consultations you booked, and following up on requests you started. We don't send promotional or marketing texts. Message frequency varies and is typically one to four messages per request. Message and data rates may apply.

Reply STOP to any message to stop receiving them, or HELP for help. You can also email info@upsecure.us and we'll remove your number.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties. We share your number only with the messaging provider that delivers the text on our behalf, and only for that purpose.

Why we collect it

To answer you, to deliver work you asked for, to keep the site from being abused, and to prove that anyone who receives a text from us agreed to receive one. That's all.

Who we share it with

We do not sell your data, and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our behalf:

• Supabase — stores contact messages, checkup results, and chat conversations
• Resend — delivers the email that carries your message to us
• Retell AI — powers the voice assistant, including recording and transcription
• Cal.com — handles calendar bookings when you schedule a call
• Vercel — hosts the website
• OpenAI — generates chat responses when AI mode is enabled

We may also disclose information if the law requires it, or to protect someone's safety.

How long we keep it

Contact messages and consent records: three years from your last contact, since consent records need to outlive the messages they authorize. Checkup results and chat conversations: two years. Voice recordings and transcripts: per our provider's retention, and no longer than two years. Ask us to delete yours sooner and we will.

Your choices

Email info@upsecure.us to see what we hold about you, correct it, delete it, or opt out of texts. We'll respond within 30 days and we won't make you jump through hoops. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA; we extend these choices to everyone regardless.

Security

Data is encrypted in transit and at rest by our providers. Our database tables are configured so that only our server can read them — the public keys embedded in this website cannot. Access is limited to people who need it. No system is perfect, and we'd rather say that than claim otherwise.

Children

This site isn't directed at children under 13, and we don't knowingly collect their information. If you believe we have, email us and we'll delete it.

Changes

If we change this policy we'll update the date at the top. Material changes to how we use text messaging will be communicated to anyone who has opted in.