Privacy Policy

Upvista collects data to optimize our platform development, AI workflows, and client support pipelines. We collect the following categories of information:

• Directly Provided Information: Personal identifiers such as name, corporate email address, business telephone number, and company name provided when completing our inquiry, application, or registration forms.
• Technical Device & Usage Data: Anonymized analytical parameters including internet protocol (IP) address, approximate location, device manufacturer, operating system, and system log parameters collected when interacting with our online portals.
• Application & Candidate Data: Resumes, portfolio URLs, cover letters, and professional histories submitted directly to our careers portal.

We utilize collected data to maintain our operations and support client frameworks:

• Delivery of Core Services: Setting up staging builds, threat modeling simulations, and optimizing natural language interfaces for custom AI deployments.
• System Optimization & Integrity: Evaluating user sessions to identify potential threat vectors, protecting our source code repositories, and mitigating bot operations.
• Client Communications: Responding to Statements of Work (SOW) requests, scheduling project consultations, and providing security reports.

We do not sell user data. We share information only with trusted third-party providers ("Subprocessors") who facilitate our operations, including:

• Cloud infrastructure and web hosting platforms (e.g., Vercel, Supabase).
• Secure transactional email distribution systems (e.g., Resend).
• Technical analytics tools and telemetry collection frameworks.

All subprocessors are bound by contractual confidentiality terms and are strictly audited to ensure they maintain privacy compliance.

As a security-first engineering organization, we treat data security with the utmost priority. All transmission pipelines employ Advanced Encryption Standard (AES) protocols, and database assets are segregated and encrypted at rest.

We isolate and secure client source code repositories using strict Multi-Factor Authentication (MFA) and Least-Privilege access profiles. Despite our precautions, no electronic transmission or database storage mechanism is completely immune to threats, but we implement state-of-the-art protections to secure all data.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access & Disclosure: Requesting details of what personal metadata we hold about you.
• Right to Rectification: Requesting correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Requesting the complete deletion of your personal data from our operational repositories, subject to regulatory retention mandates.
• Right to Data Portability: Requesting a copy of your personal data in a structured, machine-readable format.

To exercise any of these rights, please email us directly at info@upvista.co.

Our website utilizes cookies and similar tracking techniques to optimize session states, analyze traffic, and verify user inputs.

You can manage or disable cookie tracking directly through your local web browser settings. Please note that disabling cookies may result in degraded responsiveness or limited functionality across some areas of our platforms.

We respect global privacy standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

If you reside within the European Economic Area (EEA) or California, we handle all data processing requests in strict accordance with the legal structures, guidelines, and compliance provisions mandated by those frameworks.

We reserve the right to revise or update this Privacy Policy to align with changing regulations or shifts in our services. Any updates will be posted to this page with an updated effective date at the top of the policy.