Privacy Policy
Upshift is an AI product strategy and evaluation consultancy. This policy explains what personal information we collect through withupshift.com, why we collect it, who it is shared with, and what you can ask us to do about it. We have deliberately kept the site's data collection minimal, and this policy describes what the site actually does rather than every practice we might one day adopt.
Who we are
Upshift ("we", "us") operates withupshift.com. For any question about this policy or about personal information we hold, contact aaron@withupshift.com. We are the data controller for information described in this policy.
What we collect
Information you give us
- Booking details. When you book a call, you provide your name, email address, company size, which AI tools your team uses, and anything you write in the free-text field. We also record which button on the site you started from, so we can tell which parts of the site are useful.
- Email correspondence. If you email us, we keep the message and your address so we can reply and maintain a record of the conversation.
- Engagement information. During client work we may receive business information belonging to your organisation. That is governed by the engagement contract and any data processing terms agreed with you, not by this policy.
Information collected automatically
- Server logs. Our host records standard request data — IP address, user agent, requested page, timestamp — as part of serving and protecting the site.
- No analytics, no advertising, no tracking pixels. This site runs no analytics package, sets no cookies of its own, and does not use localStorage or sessionStorage. We do not build advertising profiles and we do not sell personal information.
Third parties the site relies on
Loading or using this site involves three external services. Each receives some data by virtue of how the web works, and each has its own privacy policy:
| Service | Purpose | What it receives |
|---|---|---|
| Cloudflare Pages | Hosting and content delivery | Request data including IP address, for delivery, caching and abuse prevention |
| Cal.com | Call scheduling | Your name, email, booking answers and scheduling metadata, when you open or complete a booking |
| Google Fonts | Typeface delivery | Your IP address and user agent when the font files are requested |
We do not share personal information with anyone else, and we do not sell it. We may disclose information where the law requires it, or where necessary to establish or defend legal claims.
Why we are allowed to use it
Where data protection law requires a legal basis, we rely on: your consent when you choose to book a call or email us; our legitimate interests in operating and securing the site and responding to enquiries; and the performance of a contract where you become a client.
How long we keep it
Booking records and correspondence are kept while there is an active or prospective working relationship and for a reasonable period afterwards, so we can honour follow-up requests and meet record-keeping obligations. Host log data is retained on our provider's standard schedule. If you ask us to delete your information and we have no legal reason to keep it, we will.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent at any time. Residents of the EEA and UK have these rights under the GDPR; residents of California have comparable rights under the CCPA, including the right not to be discriminated against for exercising them. Since we do not sell personal information or share it for cross-context behavioural advertising, there is nothing to opt out of on that front.
To exercise any of these, email aaron@withupshift.com. We will respond within the timeframe the applicable law requires. EEA and UK residents also have the right to complain to their local supervisory authority.
International transfers
We are based in the United States and the providers listed above operate globally, so your information may be processed outside your country. Where transfers from the EEA or UK are involved, we rely on our providers' standard contractual clauses and equivalent safeguards.
Security
The site is served over HTTPS. We limit access to enquiry and client data to the people who need it, and during engagements we scope data access to what the work requires and document the handling before starting. No system is perfectly secure, and we do not claim otherwise.
Children
This is a business-to-business service. It is not directed to children, and we do not knowingly collect information from anyone under 16.
Changes
If we change this policy we will update the date at the top of this page. Material changes affecting how we use information already collected will be communicated directly to affected clients.
Contact
Upshift
aaron@withupshift.com