Privacy Policy

1. Introduction

UpAmp is a marketing automation service provided by Mfini Inc., a Delaware corporation ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the UpAmp marketing automation platform and services, including our free tools.

By using UpAmp, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

• Name and contact information (email address, phone number)
• Business information (company name, industry, size)
• Billing information (processed securely through Stripe)
• Account credentials (username, encrypted password)
• Email verification data (temporary, hashed verification codes used during registration to confirm email ownership; these expire after 10 minutes)
• Marketing preferences and goals
• Profile information (avatar, timezone, language preferences)

Free Tools User Information

When you use our free blog generator or social post generator without creating an account, we collect:

• Email address (for verification and delivery of generated content)
• Content generation requests (topics, parameters, preferences)
• Usage count (number of free generations used)

This information is used to provide the free service and may be used for marketing purposes to inform you about our full platform offerings.

Contact and Email List Data

When you use our contact management and email marketing features, we store information about your contacts that you provide, including:

• Contact details (names, email addresses, phone numbers)
• Company and professional information (job title, company name, website)
• Geographic information (address, city, state, country, postal code)
• Social media profile URLs
• Custom fields and tags you create
• Email engagement metrics (emails sent, opened, clicked, bounced, unsubscribed)
• Purchase history and revenue attribution (if provided)
• Lead scoring data and contact activity history

Important: You are responsible for ensuring you have proper consent to store and use your contacts' information in compliance with applicable laws.

Third-Party Account Information

When you connect your advertising and social media accounts (Google Ads, Facebook, Instagram, LinkedIn, Twitter/X), we receive:

• Account identifiers and names
• Profile information (username, profile picture, biography)
• Page and business account information
• Campaign performance data
• Audience targeting information
• Ad spend and budget data
• Follower counts and engagement metrics

Important: We do not store your third-party platform passwords. Authentication is handled through secure OAuth protocols directly with each platform.

WordPress Integration

When you connect a WordPress site using the UpAmp Connector plugin, we collect and store:

• Your WordPress site URL (API endpoint)
• API credentials (key and secret) generated by the plugin, stored encrypted at rest
• WordPress category and tag information retrieved from your site

When you publish content through UpAmp to your WordPress site, we transmit:

• Blog post content (title, body text, excerpt)
• Post metadata (categories, tags, publication status)
• Featured image URLs
• SEO meta descriptions

Important: API credentials are used solely to publish content to your authorized WordPress site. You can revoke access at any time by regenerating credentials in the UpAmp Connector plugin or disconnecting the integration in your UpAmp account settings.

Content You Create and Generate

We store content that you create or generate using our platform:

• Blog posts and articles (including drafts)
• Social media posts
• AI-generated images and featured images
• AI-generated videos and associated metadata (duration, generation parameters)
• Email campaigns and templates
• Content generation parameters and preferences

Content Optimization Data

When you use our Content Optimization and Blog Optimizer features, we collect and store:

• URLs of websites you submit for blog discovery and analysis
• Blog post content retrieved from those websites for SEO/GEO scoring
• SEO and GEO analysis scores and optimization recommendations
• AI-rewritten versions of blog content
• Optimization job metadata (status, progress, timestamps)

Usage Information

• Log data (IP address, browser type, pages visited)
• Device information (operating system, device type)
• Usage patterns and feature usage
• Content generation counts and billing usage
• Cookies and similar tracking technologies (see our Cookie Policy)

Audit and Security Logs

For security, compliance, and service improvement purposes, we maintain audit logs that include:

• IP addresses associated with account activities
• Browser and device information (user agent)
• Timestamps of actions taken on your account
• Records of logins, content creation, publishing, and account changes

3. AI Services and Content Generation

UpAmp uses third-party artificial intelligence services to power our content generation features. When you use AI-powered features (blog generation, social post creation, image generation), your input data is processed by these services:

AI Service Providers

Text and Image Generation:

• OpenAI (GPT models, DALL-E) - For text and image content generation
• Google (Gemini) - For text content generation and image creation
• Anthropic (Claude) - For text content generation

Video Generation:

• Runway - For AI video generation from images and text prompts
• OpenAI (Sora) - For AI video generation from text prompts
• HeyGen - For AI avatar video generation

Data Sent to AI Providers

When generating content, we send to AI providers:

• Your content prompts and generation parameters
• Business context you provide (business name, industry, target audience)
• Topic information and keywords
• Tone and style preferences
• Existing blog post content submitted for SEO/GEO optimization and rewriting

Important: We do not send your personal account information, contact lists, or payment details to AI providers. Each AI provider has their own privacy policy and data handling practices. We encourage you to review their policies:

• OpenAI Privacy Policy: https://openai.com/privacy
• Google Privacy Policy: https://policies.google.com/privacy
• Anthropic Privacy Policy: https://www.anthropic.com/privacy

AI-Generated Images

When you use our image generation features, images are created using AI services (primarily Google Gemini, with OpenAI DALL-E as a fallback). Generated images are stored on our secure cloud storage (AWS S3) and associated with your account.

AI-Generated Videos

When you use our video generation features, we send to video AI providers:

• Source images you provide or select for video generation
• Text prompts describing the desired video content and style
• Video generation parameters (duration, aspect ratio, motion settings)

Generated videos are stored on our secure cloud storage (AWS S3) and associated with your account. We also store video metadata including duration, generation parameters, and credit consumption records for billing purposes.

We encourage you to review the privacy policies of our video generation providers:

• Runway Privacy Policy: https://runwayml.com/privacy
• OpenAI Privacy Policy: https://openai.com/privacy
• HeyGen Privacy Policy: https://www.heygen.com/privacy

4. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Generate AI-powered content on your behalf
• Create and manage your marketing campaigns
• Process payments and manage subscriptions
• Track usage for billing purposes (including overage charges)
• Communicate with you about your account and services
• Improve and optimize our platform
• Provide customer support
• Send marketing communications (with your consent)
• Comply with legal obligations
• Detect and prevent fraud or abuse
• Maintain security and audit logs
• Crawl and analyze websites you provide for content optimization

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

Service Providers

• Payment processing: Stripe for billing and subscription management
• Cloud infrastructure: Render for application hosting, AWS S3 for file storage
• AI text/image services: OpenAI, Google, and Anthropic for content generation
• AI video services: Runway, OpenAI (Sora), and HeyGen for video generation
• Email delivery: SendGrid for transactional emails, plus Mailchimp and Amazon SES for email campaign delivery
• Database: PostgreSQL database hosting, Redis for session management

Advertising and Social Media Platforms

We share necessary information with connected platforms (Google, Meta/Facebook, Instagram, LinkedIn, Twitter/X) to manage your campaigns and publish content on your behalf, using your own accounts.

Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

6. Advertising and Analytics

We use advertising and analytics services to improve our marketing and understand how users interact with our platform:

• Google Ads: We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. This may involve cookies and tracking pixels.
• Analytics: We collect usage data to understand how our platform is used and to improve our services.

You can opt out of personalized advertising by visiting Google's Ad Settings or using browser privacy settings. See our Cookie Policy for more details.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Encryption of sensitive credentials (API keys, tokens, passwords)
• Regular security audits and updates
• Access controls and authentication (including role-based permissions)
• Secure data centers with physical security
• Employee training on data protection
• Audit logging of account activities

8. Your Rights and Choices

You have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Object to or restrict processing of your data
• Port your data to another service (including contact export)
• Withdraw consent for marketing communications
• Disconnect third-party account integrations
• Delete your account through your account settings

To exercise these rights, please contact us at privacy@upamp.com or use the data deletion request form at upamp.com/data-deletion.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account data is retained while your account is active
• Generated content (blogs, social posts, images, videos) is retained until you delete it or close your account
• Video credit transaction history is retained for billing and audit purposes
• Audit logs are retained for security and compliance purposes
• Billing records are retained as required by law
• Free tool user data (email, usage counts) is retained for lead management purposes
• Content optimization jobs and results are retained while your account is active; original and optimized content versions are stored until you delete them or close your account

Upon account deletion, we will delete or anonymize your personal information within 90 days, except where retention is required for legal obligations.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our servers and service providers are located. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Children's Privacy

UpAmp is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email.

14. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@upamp.com
• Company: Mfini Inc.
  Service: UpAmp Marketing Automation Platform
• Website: upamp.com/contact