Privacy Policy

1. INFORMATION WE COLLECT

Depending on how you interact with UPSHIFT, we may collect the following categories of information.

Information you provide

We may collect:

• your name;
• email address;
• telephone number, when provided;
• billing information;
• order number and purchase details;
• products purchased and access entitlements;
• messages and information submitted through our contact form;
• support correspondence;
• information you provide while activating or using the UPSHIFT Assistant.

Please do not send us passwords, full payment card details or other information that is not necessary for us to provide support.

Order and payment information

Purchases and subscriptions are processed through the payment provider shown at checkout. That provider and its payment partners collect and process the information required to complete a transaction, calculate applicable taxes where required, prevent fraud, issue receipts and manage payment-related matters.

This may include:

• billing details;
• payment method information;
• transaction identifiers;
• payment and subscription status;
• fraud-prevention and verification information;
• products purchased;
• order history.

UPSHIFT may receive order, customer, transaction, subscription and entitlement information from the payment provider shown at checkout that is necessary to deliver products, activate access, provide support and maintain business records.

UPSHIFT does not store complete payment card numbers or card security codes in its own database. Payment card information is processed by the payment provider and its payment partners according to their respective privacy and security practices.

Website and device information

When you visit our website, Shopify and other service providers may automatically collect technical information such as:

• IP address;
• browser and device type;
• operating system;
• referring pages;
• pages viewed;
• approximate location;
• cookie identifiers;
• date and time of access;
• interactions with the website.

Telegram and UPSHIFT Assistant information

When you interact with the UPSHIFT Assistant, we may receive information made available through Telegram, including:

• Telegram user ID;
• display name and username, where available;
• selected language;
• messages, commands and button interactions sent to the bot;
• account activation and connection status;
• the UPSHIFT products available to your account;
• subscription status and period;
• technical usage information.

The Assistant processes commands you send in order to add information to or retrieve information from your connected tracker.

Financial entries and habit results may be processed temporarily when completing a command, but UPSHIFT does not currently use MongoDB as permanent storage for the contents of your financial transactions, such as amounts, categories or transaction descriptions. These entries are written to or read from the Google Sheets file connected by the user.

Telegram processes information independently under its own terms and privacy policy.

Google Sheets and Google account information

If you connect a Google Sheets tracker to the UPSHIFT Assistant, we may process:

• the identifier of the connected spreadsheet;
• the type of tracker connected;
• connection and authorization status;
• information contained in the connected spreadsheet when required to perform a command requested by you.

UPSHIFT accesses Google Sheets information only to provide the requested tracker and Assistant functionality.

UPSHIFT’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data, use it for advertising, or allow humans to read it unless this is necessary for security, legal compliance, support requested by the user, or another purpose permitted by Google’s applicable policies.

2. HOW WE USE INFORMATION

We may use personal information to:

• process and reconcile purchases and subscriptions;
• deliver purchased digital products;
• verify purchases and product access;
• create and manage customer records;
• activate and operate the UPSHIFT Assistant;
• connect purchased products to a Telegram account;
• connect and operate supported Google Sheets trackers;
• manage subscriptions, renewals and cancellations;
• respond to questions and provide customer support;
• send service-related and transactional communications;
• prevent fraud, misuse and security incidents;
• troubleshoot and improve our products and services;
• maintain business and accounting records;
• comply with legal, regulatory and tax obligations;
• enforce our Terms of Service and other agreements.

We will not use personal information for purposes that are materially incompatible with those described in this Privacy Policy without providing appropriate notice or obtaining consent where required.

3. LEGAL GROUNDS AND CONSENT

Depending on the circumstances and applicable law, we process personal information because:

• it is necessary to provide a product or service you requested;
• it is necessary to administer your purchase or subscription;
• you have provided consent;
• it is necessary for legitimate business, security or fraud-prevention purposes;
• it is necessary to comply with legal obligations;
• it is necessary to establish, exercise or defend legal rights.

Where processing is based on consent, you may withdraw your consent by contacting us. Withdrawal does not affect processing that occurred before consent was withdrawn and may prevent us from continuing to provide features that require the relevant information.

4. HOW WE SHARE INFORMATION

We may share personal information only as necessary with service providers that help us operate UPSHIFT, including:

• Shopify, which hosts our online storefront and processes website, customer and store information;
• The payment provider shown at checkout, which provides checkout, payment, receipt, refund, fraud-prevention and related transaction services;
• Google, when you use Google Sheets, Google Drive or related account functionality;
• Telegram, when you communicate with or use the UPSHIFT Assistant;
• MongoDB Atlas, which stores technical account, connection, purchase and subscription information;
• email, hosting, security, analytics or customer-support providers that we may use;
• professional advisers, regulators or authorities where reasonably necessary or legally required.

These providers may process information in countries other than your own and according to their own privacy policies and contractual obligations.

We may also disclose information:

• to comply with applicable law, regulation or lawful process;
• to protect the rights, safety and security of UPSHIFT, our customers or others;
• to investigate fraud, misuse or security incidents;
• in connection with a sale, transfer or restructuring of all or part of the business.

We do not sell or rent personal information.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our Shopify storefront and service providers may use cookies and similar technologies to:

• operate essential website and checkout functions;
• remember preferences;
• maintain security;
• prevent fraud;
• understand website performance and usage;
• support analytics or marketing features that we enable.

Where required, you can manage optional cookies through the privacy preferences displayed on our website. You can also control cookies through your browser settings, although disabling essential cookies may prevent parts of the website or checkout from working correctly.

6. DATA STORAGE AND RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing products and subscriptions, maintaining purchase records, resolving disputes, preventing fraud and complying with accounting, tax or other legal obligations.

Retention periods depend on the type of information:

• order, payment and subscription records may be retained for business, accounting, fraud-prevention and legal purposes;
• Telegram account and tracker connection information may be retained while the account or connection remains active;
• temporary verification and connection tokens are configured to expire automatically;
• support correspondence may be retained for as long as necessary to resolve the request and maintain an appropriate support record;
• information may be retained longer where required by law, an active dispute or a security investigation.

When information is no longer reasonably required, we may delete or anonymize it.

Information stored in a Google Sheets file remains under the control of the Google account that owns or controls that file. Disconnecting the UPSHIFT Assistant does not automatically delete the customer’s Google Sheets file.

7. INTERNATIONAL DATA TRANSFERS

UPSHIFT CORE is operated by an individual entrepreneur registered in the Republic of Kazakhstan, while our customers and service providers may be located in and process information in other countries.

Where personal information is transferred internationally, we take reasonable steps to use service providers and safeguards appropriate to the nature of the information and applicable legal requirements.

8. THIRD-PARTY SERVICES

Our services depend on third-party platforms that maintain their own privacy practices. You should review their policies for further information:

• Shopify Privacy Policy
• Google Privacy Policy
• Google API Services User Data Policy
• Telegram Privacy Policy
• Telegram Bot and Mini App Standard Privacy Policy
• MongoDB Privacy Policy

UPSHIFT is not responsible for the independent privacy practices of third-party services.

9. DATA SECURITY

We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, disclosure, alteration, loss or misuse.

These measures may include restricted database access, access controls, encrypted connections, expiring verification tokens and the use of established infrastructure and payment providers.

However, no online service, transmission method or storage system can be guaranteed to be completely secure. You are responsible for protecting access to your email, Telegram and Google accounts.

10. YOUR RIGHTS AND CHOICES

Subject to applicable law, you may request that we:

• confirm whether we process your personal information;
• provide access to personal information we hold about you;
• correct inaccurate or incomplete information;
• delete information that is no longer required;
• withdraw consent for certain processing;
• restrict or object to certain uses of your information;
• explain how your personal information has been used or disclosed.

We may need to verify your identity before completing a request. Some information may need to be retained where required for legal, accounting, fraud-prevention or dispute-resolution purposes.

To submit a privacy request, email yevgenbagat@gmail.com.

You may disconnect the UPSHIFT Assistant or revoke Google account access through the relevant Google or Telegram settings. Revoking access may prevent connected features from working.

11. CHILDREN’S PRIVACY

UPSHIFT products and services are not directed to children under 18, and we do not knowingly collect personal information from children under 18.

If you believe that a child has provided personal information to us, contact us so that we can review and, where appropriate, delete it.

12. THIRD-PARTY LINKS

Our website or digital products may contain links to websites or services operated by third parties. We are not responsible for their content, security or privacy practices.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy when our products, service providers, legal obligations or data practices change.

The updated version will be posted on this page with a revised “Last updated” date. Where appropriate or legally required, we may provide additional notice.

14. CONTACT US

For questions, privacy requests or complaints concerning this Privacy Policy, contact:

ИП UPSHIFT CORE
Individual entrepreneur operated by Yevgeniy Bagatskiy
Email: yevgenbagat@gmail.com
Business address: 147 Kosyma Pshenbaeva Street, Ekibastuz, Pavlodar Region, Republic of Kazakhstan

We usually respond within 1–2 business days.