Privacy policy

Who we are

UploadX.io ("UploadX", "we") runs uploadx.io from the United States. For anything about your personal data, email privacy@uploadx.io.

What this policy covers

This policy covers the UploadX early access list and the pages on uploadx.io that are open today. UploadX itself is not open yet. Before it opens, we will update this policy to cover the service and change the date above.

What we collect when you join the list

• Your email address.
• The answers you choose to give: what you deliver, your typical delivery size and the tool you use today.
• Whether you asked for product updates, which version of that checkbox's wording you agreed to, and when.
• The campaign tags in the link you arrived from (such as utm_source), the domain of the website that sent you (never the full address) and the page you signed up on.
• Your country, which Cloudflare works out from your connection. We keep the country only, never your IP address.
• The date and time you signed up.

What we use it for

• To invite you to UploadX early access. This is the one email the form promises.
• To send you occasional product updates, only if you ticked the box. You can stop them at any time.
• To understand, in totals, who is interested: what people deliver, how large, with which tools and where they came from.

We do not sell your data, share it for advertising or build a profile of you. These pages load no analytics and no advertising.

Our legal basis

You ask to join the list, and we rely on your consent to keep you on it (GDPR and UK GDPR Article 6(1)(a)). Product updates are a separate consent, given by the checkbox. You can withdraw either at any time, and withdrawing does not affect what we did before.

How long we keep it

• Your sign-up is kept until 12 months after we invite you, or until you ask us to delete it, whichever comes first. If early access closes before we invite you, we delete your sign-up within 12 months of it closing.
• Our database backups are kept for 7 days, so anything we delete is gone from them within 7 days.
• Our web servers keep access and error logs, which include IP addresses, for 30 days, to keep the site secure and to fix problems. Then they are deleted.
• To stop automated abuse of the form, we keep a short-lived counter for each connection. It holds a one-way coded value made from your IP address, never the address itself, and is deleted within two hours.

Who handles it for us

• Our hosting provider stores the site and the list on servers in Norway, in the European Economic Area.
• Cloudflare, Inc. carries every request to uploadx.io over its network, protects the site and stores our database backups in the European Union. It handles your IP address to do this, and your browser may send it reports about network errors. Cloudflare is based in the United States; transfers to it rely on its certification under the EU-US Data Privacy Framework and its UK Extension, with the European Commission's standard contractual clauses as a fallback.

We run UploadX from the United States, so we read the list from there.

Cookies

These pages set no cookies and store nothing in your browser.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it or to stop us using it, and you can withdraw your consent at any time. Email privacy@uploadx.io from the address you signed up with, and we will answer within one month.

If you are in the EU, the EEA or the UK, you can also complain to your data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), in the EU or EEA the authority of your country (listed at edpb.europa.eu).

Children

UploadX is not for children. Please do not join the list if you are under 16.

Changes

If we change this policy, we will post the new version here and update the date above.