Privacy Policy

1. Introduction

Upkeepit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our home maintenance management platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password
• Profile Information: Home address, property details, preferences
• Payment Information: Processed securely through Lemon Squeezy (we don't store card details)
• Content: Photos, documents, notes you upload about your home
• Communications: Support requests, feedback, survey responses

2.2 Information Collected Automatically

• Usage Data: Features used, tasks created, interaction patterns
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, pages viewed
• Cookies: Session cookies, preference cookies, analytics cookies

2.3 AI-Processed Information

When you use our photo analysis features, images are processed by Google AI (Gemini) to identify maintenance issues. These images are not stored by Google beyond processing.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Send maintenance reminders and notifications
• Process payments and manage subscriptions
• Analyze and improve our Service
• Respond to support requests
• Send service updates and marketing communications (with consent)
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Supabase (database), Vercel (hosting), Resend (email), Lemon Squeezy (payments)
• Contractors: Only if you explicitly request contractor connections
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In case of merger, acquisition, or sale
• With Consent: When you explicitly agree to sharing

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• Regular security audits
• Access controls and authentication
• Rate limiting and DDoS protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service:

• Account data: Until account deletion
• Home documentation: Until you delete it
• Usage logs: 90 days
• Payment records: As required by law (typically 7 years)

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@upkeepit.co

8. Cookies

We use cookies and similar technologies for:

• Authentication and security
• Remembering preferences
• Analytics (with Vercel Analytics)
• Performance monitoring

You can control cookies through your browser settings. Disabling cookies may limit functionality.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. California Privacy Rights

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information.

12. GDPR Compliance (EU Users)

For EU users, we comply with GDPR requirements:

• Legal basis for processing (consent, contract, legitimate interest)
• Data Protection Officer contact: dpo@upkeepit.co
• Right to lodge complaints with supervisory authorities
• Data breach notification procedures

13. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Supabase (Database): Privacy Policy
• Google AI (Gemini): Privacy Policy
• Lemon Squeezy (Payments): Privacy Policy
• Vercel (Hosting): Privacy Policy

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance.

15. Contact Us

For privacy-related questions or concerns: