Legal · version 2026-05-24 · effective May 24, 2026

Privacy Policy

Last updated: 2026-05-24

This Privacy Policy explains what personal data UpTurtle (“we,” “us,” or “our”) collects when you use our app hosting and related services (the “Services”), how we use it, who we share it with, and the choices you have. It works alongside our Terms of Service.

1. What we collect

We collect data in three ways: things you give us directly, things we collect automatically as you use the Services, and things we receive from third parties acting on your behalf.

Information you give us:

  • Account information. Your name, email address, password (stored as a one-way hash), and any profile details you add.
  • Payment information. Billing name, address, and payment method details. Card numbers and bank details are handled by our payment processor (Stripe) - we never see or store full card numbers ourselves.
  • Your Content. The code, files, data, and other content you upload, store, or transmit through the Services. We treat Your Content as private and don’t access it except as needed to operate the Services or as required by law.
  • Support communications. Messages you send to email addresses like support@upturtle.com or abuse@upturtle.com, and any additional details we need to investigate the issue.

Information we collect automatically:

  • Usage and diagnostic data. Log entries, IP addresses, request paths, response codes, error traces, and resource-usage metrics - used for billing, abuse detection, debugging, and product improvement.
  • Device and browser information. Browser type, OS, referring page, and similar details from your interactions with our website and dashboard.
  • Cookies. We use cookies for authentication and core functionality, as well as session information related to the use of the product.

Information from third parties:

  • Authentication providers. If you sign in via Auth0 (including any social logins like Google or GitHub that Auth0 brokers), we receive your name, email, and any other profile fields you authorize.
  • Payment processor. Stripe shares billing status (succeeded, failed, refunded) and the country of the payment method, used for tax handling and dispute resolution.

2. How we use your data

We use the data we collect to:

  • Run the Services - provision, host, scale, and maintain your apps.
  • Bill you and handle taxes (in cooperation with Stripe).
  • Communicate about your account, billing, security incidents, and material changes to the Services.
  • Provide customer support.
  • Detect and prevent abuse, fraud, security threats, and violations of our Terms of Service.
  • Improve the Services - debug issues, measure feature use, and plan improvements.
  • Measure the effectiveness of our marketing campaigns (only on our marketing site, only if you have accepted advertising cookies).
  • Comply with legal obligations.

We do not sell your personal data, and we don’t use Your Content or any of your information to train AI models.

3. Who we share it with

We share personal data with:

  • Subprocessors that help us run UpTurtle. These include:
    • DigitalOcean - cloud infrastructure (where your apps and our databases run).
    • Stripe - payment processing and tax handling.
    • Auth0 - sign-in and account authentication.
    • PostHog - product analytics.
    • Google - tag management on our marketing site (loads other ad-measurement tags below). Only active if you have accepted advertising cookies via our cookie banner.
    • LinkedIn - ad campaign measurement on our marketing site (the LinkedIn Insight Tag), so we can see which LinkedIn ads bring visitors to upturtle.com. Only active if you have accepted advertising cookies via our cookie banner.
  • Legal authorities - when we’re required to by valid legal process (subpoena, court order, etc.) or to protect our rights, our customers, or the public from harm. We push back on overbroad requests.
  • In a sale of the business - if UpTurtle is acquired or merges, your data may transfer to the new owner under this same Policy (or one with equivalent protections).

We don’t share Your Content with third parties except as needed to run the Services (for example, storing it on our cloud provider).

4. Cookies and tracking

We use cookies and similar technologies for:

  • Authentication and session management - keeping you signed in.
  • Functionality - remembering your preferences (theme, dashboard layout, etc.).
  • Product Analytics - how you use our app and our marketing site, to help us improve the product. This class of tracking only occurs if you have accepted analytics cookies via our cookie banner.
  • Advertising / Ad measurement - measuring which of our ad campaigns bring visitors to upturtle.com (currently the LinkedIn Insight Tag, loaded through Google Tag Manager). This class of tracking only occurs if you have accepted advertising cookies via our cookie banner, and only on our marketing site - never inside the product dashboard.

5. How long we keep data

  • Account data, billing records, support communications: for as long as your account is active, plus a reasonable period to comply with tax, accounting, and legal requirements (typically up to seven years for financial records).
  • Your Content: while your account is active. As stated in our Terms of Service, when your account ends we delete Your Content immediately. Export anything you want to keep before you cancel.
  • Logs and diagnostic data: 14 days for raw application logs, 1 year for usage metrics.
  • Backups: we may retain backups briefly (less than one week) after deletion before they cycle out as part of normal operations.

6. Your rights

Depending on where you live, you have rights over the personal data we hold about you, including:

  • Access - request a copy of what we have.
  • Correction - fix anything inaccurate.
  • Deletion - ask us to delete your data (subject to legal retention requirements like financial records).
  • Portability - get your data in a portable format.
  • Objection or restriction - limit how we use your data in certain cases.
  • Withdraw consent - for processing that’s based on consent (like marketing emails).

To exercise any of these, email us at support@upturtle.com. We’ll respond within 30 days.

If you’re in the EU, UK, or California, additional rights apply under GDPR, UK GDPR, and the CCPA/CPRA. We honor those rights for everyone, regardless of where you live.

7. Security

We protect your data with industry-standard measures: encryption in transit and at rest, role-based access controls, least-privilege access for our team, and regular security reviews. No system is perfectly secure, so we can’t guarantee absolute safety, but we work to reduce risk continuously. If we discover a security incident affecting your data, we’ll notify you within the timeframes required by law.

8. Children’s privacy

The Services are not intended for anyone under 18. We don’t knowingly collect personal data from children. If you believe a minor has signed up, contact us at support@upturtle.com and we’ll delete the account.

9. International data transfers

UpTurtle is based in the United States, and our infrastructure is hosted in the US. To aid in GDPR compliance, our product analytics provider (PostHog) hosts its data in Germany. Our advertising-measurement partners (Google, LinkedIn) operate from the US. If you’re using the Services from outside the US, your data will be transferred to and processed in the US. Where required, we use Standard Contractual Clauses or equivalent safeguards for these transfers.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we’ll notify you by email or through your account dashboard at least 30 days before they take effect. Continuing to use the Services after that means you accept the updated Policy.

11. Contact us

For privacy questions or to exercise your rights, email support@upturtle.com or write to us:

UpTurtle P.O. Box 1093 Okemos, MI 48805

Questions? Contact us at support@upturtle.com.