Uplane procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ For users in the EEA, UK, and Switzerland, Uplane, Inc. at the address below is the controller responsible for personal data processed in connection with the Website and Service: Uplane, Inc.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Questions about this policy, your personal data, or your rights can be sent to [email protected] . Uplane, Inc.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “94111 San Francisco Depending on the processing, our legal basis is performance of a contract, legitimate interests, consent, compliance with a legal obligation, or protection of vital interests. Limited pre-consent website measurement with in-memory identifiers rests on legitimate interests; persistent analytics, browser storage, and browser fingerprinting rest on your consent. You may have rights to access, rectify, erase, restrict, or receive a portable copy of your personal data, and to object to processing. Contact us to exercise these rights. You may also lodge a complaint with the supervisory authority in your place of residence, work, or the alleged infringement. Withdrawing consent. Where we process personal data on the basis of your consent, you may withdraw it at any time, and doing so is as easy as giving it: use the Cookie settings link in the footer of any page, the unsubscribe link in any marketing email, or write to us. Withdrawal does not affect the lawfulness of processing carried out before you withdrew. Providing your data. You are not required by law to give us personal data. Some of it is necessary to enter into or perform a contract with us: without account, contact, and billing details we cannot create an account, provide the Service, or invoice you. Everything else, including anything you tell us in a form or a demo request, is voluntary. Automated decision-making. We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing, including profiling. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ up_consent Stores the choice you make in the consent panel, so we do not ask again and can evidence the choice. Uplane 6 months (12 months for California) up_region Records which privacy regime applies to your request, so the correct consent surface is shown. Uplane 24 hours cf_clearance, __cf_bm and related Distinguishes people from automated systems and protects forms against abuse. Cloudflare (Turnstile, bot management) Session to 30 days uplane_visitor_<workspace id> (local storage, not a cookie) Recognises a returning browser so repeat visits are counted as one visitor rather than several. Uplane (US region) Until you clear your browser storage uplane_session_<workspace id> (session storage, not a cookie) Groups the pages you view into a single visit. Uplane (US region) Until you close the tab uplane_tracking_disabled (local storage, not a cookie) Records that you have opted out of analytics, so the SDK stays off on later visits. Uplane Until you clear your browser storage ph_<project key>_posthog (cookie and local storage) Recognises a returning browser so product analytics counts visitors rather than page loads. If you submit the demo form, this identifier is linked to the email address you gave us. PostHog, Inc. (US Cloud) 12 months li_fat_id Stores a LinkedIn ad click identifier on this domain for conversion attribution, retargeting, and analytics. LinkedIn 30 days bcookie, lidc Identifies a browser for diagnostics and routes requests to the appropriate LinkedIn data center. ” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | medium | “ We retain personal data only as long as necessary for the purposes for which it was collected and to satisfy legal, accounting, or reporting requirements. We consider the data's amount, nature, and sensitivity; potential harm from misuse; the processing purpose; available alternatives; and applicable law. Data processed for customers is retained primarily according to our customer agreements.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “The Service uses automation to generate and optimize advertising on our customers' behalf, which does not decide anything about you in that sense. International transfers. Because we are based in the United States, personal data is transferred there and may be processed by our service providers in other countries. Our own analytics are collected in our US region, so measurement data about your visit is processed in the United States. PostHog, Inc. processes analytics on its US Cloud. LinkedIn Corporation processes Insight Tag data in the United States and other locations described in its privacy documentation. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum. You can request a copy of the safeguards we rely on by emailing [email protected] .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The Website and Service may link to or integrate with services we do not operate. We do not control their privacy practices and encourage you to review the privacy policy of each third party you use.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We may share personal data with service providers that support hosting, payments, analytics, communications, customer support, security, and CRM functions; with integrated platforms at your direction; and with current or future affiliates that must honor this policy. Named recipients for this Website are Cloudflare, Inc., which provides hosting, the bot protection described below , and delivery of our analytics script ; Microsoft Corporation, whose Azure platform hosts our analytics service ; PostHog, Inc., which processes product analytics on our behalf on its US Cloud once you have consented to analytics ; and LinkedIn Corporation, which receives identifiers and site activity through the LinkedIn Insight Tag once advertising is permitted, for conversion measurement and retargeting . Cloudflare and PostHog act as our processors for the Website functions described here. LinkedIn processes Insight Tag data under its own privacy terms. We may also disclose data in connection with a business transaction, with your consent, or where we reasonably believe disclosure is necessary to comply with law, protect rights or property, investigate wrongdoing, protect safety, or guard against legal liability. We also count completed demo bookings on our server independently of your analytics cookie choice. For this count, we send PostHog only the event name, capture time, and a randomly generated identifier used for that event alone. We do not send your contact details, booking details, browser identifiers, or IP address, and disable person profiles and location enrichment. This count does not load an analytics script or set an analytics cookie in your browser.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may receive information from authentication, analytics, advertising, marketing, and sales partners. When you connect an integrated platform, such as an advertising platform or CRM, we receive the data you authorize us to access, which may include campaign performance, ad cost, and lead data.” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Access to certain features of the Service may require a subscription fee. You agree to pay all applicable fees in accordance with the pricing and payment terms presented to you.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.