Privacy

Uplytics provides a business-to-business software service for marketing and creative studios. This notice explains what data we collect, how we use it and your rights.

You can reach the data controller at support@uplytics.ai.

Account data. Email address, name and profile image from your sign-in provider. Role assignments inside your studio. Authentication tokens needed to keep you logged in.

Business records. Anything you create inside Uplytics: customers, contacts, contracts, work orders, deliverables, invoices, Mushak forms, money receipts, content plans, comments and uploaded files.

Server logs. Request metadata (IP address, user agent, route, status code, timestamp) for security and abuse prevention. Logs are retained for 30 days then deleted on a rolling basis.

Product analytics. Aggregate usage events (which screens are visited, feature adoption) tied to your studio, not to individual end clients. We use this to prioritize the roadmap.

Application data is stored in encrypted, low-latency cloud regions. File uploads sit on private object storage. Transactional email goes through a managed sending service. Enterprise customers can request alternative hosting under a separate agreement.

All connections are TLS 1.2 or higher. Database storage is encrypted at rest with keys managed by the cloud provider. File downloads use short-lived signed URLs.

Every database query goes through a per-studio tenant scope. Customers can't read each other's records, even by mistake. File storage is partitioned by a per-studio prefix. Background jobs carry the originating tenant context end-to-end.

We rely on a small set of carefully chosen sub-processors to run the service. The current list is available on request to your account contact. Material changes to the list are notified 30 days in advance.

We do not sell, rent or share your data with anyone outside this list.

Bangladesh tax law requires VAT records to be kept for at least five years after the end of the relevant tax period. Even if you cancel, we retain issued Mushak 6.3 and 6.6 forms, money receipts and the invoices they reference for the legally required window in immutable archive form. We don't use this archive for any other purpose and you can request a copy at any time.

You can export your studio's data at any time as CSV plus a JSON dump of raw records. You can request deletion by emailing support@uplytics.ai. We purge production databases within 30 days of a deletion request, subject to the NBR retention obligations above.

You can correct any record from inside the app. For the small number of fields you can't edit (issued Mushak forms are immutable by design), email us and we'll explain the audit-safe correction path.

We use first-party cookies for sign-in sessions and CSRF protection. We don't run third-party advertising or cross-site tracking cookies. The marketing site uses no cookies until you sign in.

Uplytics is for businesses. We don't knowingly collect data from anyone under 18.

We'll update this page as the service evolves and notify account admins by email at least 14 days before any material change takes effect.

Email support@uplytics.ai for any privacy question or data request.