Privacy Policy

At Upsel (“Upsel,” “we,” “us,” or “our”), we are committed to protecting your privacy and ensuring transparency in how we handle your data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-driven business performance platform (the “Service”).

ChatGPT Plugin

This section applies specifically to the Upsel.ai plugin available in ChatGPT (the “Plugin”). It is separate from the Upsel.ai business performance platform and its POS integrations described elsewhere in this Privacy Policy.

Information used through the Plugin

The Plugin uses only the information that you choose to provide in your ChatGPT conversation to generate the requested sales audit, business calculation, or operational template. This may include menu items, prices, aggregate sales figures, wage-cost figures, service observations, stock availability, and business goals.

Please do not provide employee personal information, customer personal information, payment-card data, passwords, API keys, government identifiers, or other sensitive personal information through the Plugin.

How the information is used

The information you provide is used only to generate the analysis, calculation, recommendation, or template you request in that ChatGPT conversation. The Plugin does not create an Upsel.ai account, connect to a point-of-sale system, process payments, change business records, or make decisions on your behalf.

Sharing and storage

Upsel.ai does not receive, store, or retain the content you provide to the Plugin in an Upsel.ai database or workspace. The Plugin has no live POS connection and does not send your conversation content to an Upsel.ai backend.

Your use of ChatGPT, including the processing and retention of conversation content within ChatGPT, is governed by OpenAI’s applicable terms and privacy policies.

Your choices and controls

You decide what information to provide to the Plugin. You may avoid providing sensitive information and may use the controls available in ChatGPT to manage or delete your conversations. If you contact Upsel.ai directly for support, we will handle the information you provide in that support request in accordance with this Privacy Policy.

Contact

For questions about Upsel.ai’s handling of information in connection with the Plugin, contact us at support@upsel.ai.

1. Information We Collect

To provide our Service, we collect and process data from various sources. This includes:

• Account Information: When you create an account, we collect your name, email address, business name, and payment information.
• Business Data from POS Systems: When you connect your Point of Sale (POS) system (e.g., Tevalis), we sync and store a copy of the following types of data (“Business Data”). Some of this information, such as employee names, may be considered Personally Identifiable Information (PII), which we handle with strict confidentiality.
• Sales Data: Transaction details, items sold, revenue, and payment methods.
• Staff Data: Employee names, roles, and performance metrics.
• Product Data: Product catalogs, groups, and types.
• Attendance Data: Staff clock-in/clock-out times and work hours.
• Usage Data: We collect information about how you interact with our Service, such as features used and session duration, to help us improve our platform.
• Website attribution data: When you visit our website through a campaign link, we may store campaign parameters and advertising click identifiers, such as UTM parameters, Google click identifiers, and Meta click identifiers. We also record the landing page and referring website. This data is stored in your browser for up to 90 days to help us understand which marketing activity led to a website visit, demo-booking click, or signup click.

2. How We Use Your Information

Your information is used for the following purposes:

• To Provide and Improve the Service: We use your Business Data to generate real-time dashboards, track Key Performance Indicators (KPIs), and provide you with actionable insights to enhance your business performance.
• To Manage Your Account: We use your account information to manage your subscription, process payments, and communicate with you about service-related updates.
• For Analytics and Development: We analyze aggregated and anonymized data to improve our algorithms, develop new features, and enhance the overall user experience. We will never use your specific Business Data for training our AI models without your explicit consent.
• To Measure Marketing: We use website attribution data to understand the effectiveness of our advertising and campaigns. When you follow a link to our booking or signup service, we may include relevant campaign information in that link so the source of the visit can be retained through that journey.
• To Ensure Security: We monitor for and protect against fraudulent or unauthorized activity.

3. Data Storage and Security

We implement industry-standard security measures to protect your data. All Business Data is encrypted during transmission (TLS) and at rest. Our data is stored securely in Firestore, and access is strictly controlled by our backend services. We regularly review and update our security practices to protect your information from unauthorized access, disclosure, or destruction.

4. International Data Transfers

To provide you with the Service, we may store and process data in servers located outside of your home country, including in the United States. We take all necessary measures to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

5. Third-Party Integrations and Services

• POS System Integration: Our Service relies on connecting to third-party POS systems like Tevalis. We only access the data necessary to provide our Service, as authorized by you. We are not responsible for the data practices of your POS provider.
• Service Providers: We use trusted third-party services for functions such as payment processing (e.g., Stripe) and cloud hosting (e.g., Google Cloud). These providers are bound by confidentiality agreements and are prohibited from using your data for any other purpose.
• Website Measurement and Advertising: We use Google Tag Manager and Google Analytics to measure website activity, and Meta Pixel to measure advertising activity. These providers may use cookies or similar technologies according to their own privacy policies. We use first-party browser storage to retain website attribution data as described above.

6. Your Privacy Rights and Data Control

You have control over your data. You have the right to:

• Access and Export Your Data: You can request access to or an export of your Business Data at any time.
• Request Data Correction or Deletion: You can request that we correct inaccuracies or delete your Business Data. Please note that deleting certain data may impact your ability to use the Service.
• Manage Permissions: You can revoke our access to your POS system at any time through your account settings, which will stop any future data synchronization.
• Control Website Storage: You can clear website storage and cookies through your browser settings. This may remove stored campaign attribution information.

GDPR Compliance

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These include the right to access, correct, update, or request deletion of your personal information. If you wish to exercise any of these rights, please contact us using the information below.

7. Data Retention

We retain your Business Data for as long as your account is active or as needed to provide you with the Service. If you cancel your subscription, we will retain your data for a limited period to allow for reactivation, after which it will be permanently deleted in accordance with our data retention policy. We may retain some anonymized data for analytical purposes. Website attribution data stored in your browser expires after up to 90 days unless you clear it earlier through your browser settings.

8. Children’s Privacy

Our Service is intended for business users and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or through the Service. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

10. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Upsel
Level 2, 247 Cameron Road, Tauranga, 3110, New Zealand
Email: support@upsel.ai