Privacy Policy

Last Updated : 03 June 2026

This Privacy Policy describes how UpBlick (“UpBlick,” “we,” “our,” and “us”) collects, uses, stores, discloses, and protects personal information and other data when you access our website, use our software, or connect third-party services to the platform.

This Policy is intended to be read together with our Terms of Service and any applicable in-product notices. If you provide us with information relating to customers, employees, business contacts, or end users, you represent that you have the right to do so and that all required notices and permissions have been obtained.

1. Role of the Parties

For account, billing, website, and product administration data that relates directly to our own customer relationship, UpBlick generally acts as an independent controller of that information. Where you use the Services to process personal data relating to your customers, leads, staff, or end users, you are typically the controller or business responsible for that data, and UpBlick acts as a service provider or processor on your behalf.

2. Information We Collect

a. Information you provide directly

Account and profile details, such as name, email address, phone number, business name, role, and login credentials or authentication information.
Billing, payment, tax, and transaction-related information, including billing contact details and invoice records.
Workspace content, support communications, uploaded files, customer lists, survey content, campaign templates, notes, and review response drafts that you choose to store or process through the Services.

b. Information from connected services

Google account information reasonably necessary to authenticate the user and identify the authorized account owner or manager.
Google Business Profile account, location, review, and related metadata that you explicitly authorize us to access.
Information from other third-party integrations that you choose to connect, subject to the permissions you grant and the third party’s policies.

c. Information collected automatically

IP address, approximate geolocation, browser type, device identifiers, operating system, timestamps, referrer URLs, interaction logs, and technical diagnostics.
Security, audit, and usage logs used to authenticate users, maintain service integrity, troubleshoot errors, and detect abuse.

Unless specifically required for a lawful and clearly disclosed purpose, we do not intend to request or process special categories of sensitive personal data through the standard operation of the Services. You should not upload sensitive personal data unless its collection and processing is strictly necessary, legally permitted, and adequately disclosed to the relevant data subjects.

3. How We Use Information

To provide, operate, secure, maintain, and improve the Services.
To authenticate users, manage workspaces, and enable third-party integrations you request.
To display, organize, analyze, and report on review data, customer feedback, location performance, and related reputation management workflows.
To process payments, send invoices, administer subscriptions, and provide account support.
To detect, investigate, and prevent fraud, abuse, security incidents, unauthorized access, and violations of our Terms or third-party policies.
To communicate with you regarding service updates, support matters, operational notices, and, where permitted, product information.

4. Google User Data and Google Business Profile Data

Where you connect Google services, UpBlick accesses and uses Google user data solely for the user-facing features and use cases that you request within the application, such as authentication, review monitoring, listing-related dashboards, reporting, and authorized management workflows.

We do not sell Google user data or Google Business Profile data.
We do not use Google user data for advertising, including personalized, remarketing, or interest-based advertising.
We do not use Google user data to train generalized artificial intelligence or machine learning models unrelated to the user-facing functionality requested by the user.
We disclose Google user data only as necessary to provide the Services, comply with law, enforce rights, or protect security and service integrity.

Additional information regarding our handling of Google Business Profile data is available in our Google Business Profile Data Policy.

5. Legal Bases for Processing

Depending on the context and applicable law, we process information on one or more of the following bases: your consent; performance of a contract; our legitimate interests in operating and securing the Services; compliance with legal obligations; and, where applicable, protection of rights and safety.

Where the General Data Protection Regulation (“GDPR”) or similar laws apply, the legal basis relied upon may vary depending on the context of the relationship, the type of information involved, and the specific processing activity. Where India’s Digital Personal Data Protection Act, 2023 and related rules (“DPDP”) apply, we aim to process digital personal data in accordance with applicable notice, consent, legitimate-use, security, and grievance-handling requirements.

6. Disclosure of Information

We may disclose information to the following categories of recipients:

Authorized users and workspace members: based on your account configuration and permissions.
Service providers and subprocessors: vendors that support hosting, authentication, communications, analytics, billing, storage, monitoring, and customer support, under contractual confidentiality and data protection obligations.
Professional advisers and transaction counterparties: where reasonably necessary in connection with legal advice, financing, audits, reorganization, merger, acquisition, or asset transfer.
Governmental, regulatory, or law enforcement authorities: where disclosure is required by law, legal process, or to protect rights, property, users, or the public.

7. International Transfers

We and our service providers may process information in countries other than the country in which the data was collected. Where required by applicable law, we take reasonable steps to implement appropriate safeguards for cross-border data transfers.

Where GDPR or comparable laws apply, such safeguards may include contractual protections, adequacy-based transfer mechanisms, or other lawful transfer tools available under applicable law. Where DPDP applies, transfers are handled subject to applicable Indian legal requirements as they may exist from time to time.

8. Retention of Information

We retain personal information and operational records for as long as reasonably necessary to provide the Services, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain security and backup records. The specific retention period depends on the nature of the data, the applicable user relationship, technical requirements, and legal obligations.

For data obtained from Google APIs, we aim to retain and cache such data only as permitted by applicable Google terms and policies, and only to the extent reasonably necessary to support the authorized features of the Services.

9. Security Measures

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. Such measures may include encrypted transmission, access controls, authentication safeguards, logging, monitoring, and secure infrastructure practices.

No system can be guaranteed to be fully secure, and you remain responsible for maintaining secure credentials, endpoint security, and appropriate permission management within your organization.

10. Your Rights and Choices

Subject to applicable law, you may have the right to request access to, correction of, deletion of, restriction of, or portability of your personal information, and to object to certain processing activities. You may also withdraw consent where processing is based on consent.

Depending on the jurisdiction, these rights may include the right to know what personal data is being processed, the right to correction and erasure, the right to grievance redressal, the right to nominate another person to exercise certain rights on your behalf, and the right not to be subject to certain forms of solely automated decision-making where such protections are provided by law.

You can update certain account information within the Services.
You may disconnect Google or other integrations through the product settings or through the relevant third-party account permission interface.
You may contact us at support@upblick.com to submit a privacy-related request.
Where marketing communications are sent by us in accordance with applicable law, you may opt out using the unsubscribe mechanism included in the communication or by contacting us directly.

If you believe your rights have been violated, you may also have the right to lodge a complaint with the competent data protection or privacy authority in your jurisdiction, subject to applicable law.

11. Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies for authentication, security, performance, analytics, and preferences. Additional details are available in our Cookie Policy.

12. Children’s Privacy

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children in a manner requiring parental consent under applicable law. If you believe a child has provided personal information to us improperly, please contact us so that we may review the matter.

13. Third-Party Sites and Services

The Services may contain links to or integrate with third-party websites, platforms, and services. We are not responsible for the privacy, security, or content practices of those third parties, and their use of information is governed by their own policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will be posted on this page together with the revised “Last Updated” date. Material changes may also be communicated through the Services or by other appropriate means where required by law.

15. Customer

Questions, complaints, or requests regarding this Privacy Policy may be sent to support@upblick.com.

Additional compliance information is available in our Compliance & Data Protection page.