Privacy Policy

1. Who we are

Upswing is operated by Sage Dutra as Upswing Strategies LLC, registered in the State of Oregon.

• Operating name: Upswing
• Mailing address: 249 Liberty St NE #120, Salem, OR 97302
• Phone: 971-509-5656
• Email: sage@upswingfast.com
• Governing law: State of Oregon

A single email address handles all sales, support, privacy, and cancellation requests. Sage reads it personally.

2. What this policy covers

This policy covers:

1. The Upswing website at upswingfast.com.
2. Websites Upswing builds and hosts for client businesses on their own domains.
3. Email correspondence with Upswing.
4. Scheduling and onboarding tools Upswing uses to work with clients and prospective clients.

If you visit a client’s Upswing-built website, this policy applies to the data Upswing collects through that site. The client business may have its own separate privacy practices that govern how they handle data after it reaches them.

3. What we collect

We collect three categories of information.

3.1 Information you give us

• Your name, business name, phone number, email address, service area, and any business details you share through forms, email, or phone.
• Photos, logos, license numbers, and other content you provide for use on your website.
• Payment information processed by Stripe. We do not see or store your full card number. Stripe handles all card data directly.

3.2 Information we research publicly

Before we build a spec website for a prospective client, we research publicly available information about the business. That includes:

• Business name, address, phone number, and service area as listed on the business’s public profiles.
• Public reviews on Google and other directories.
• License and certification information from public regulatory databases (for example, the Oregon Construction Contractors Board for trades).
• The business’s existing website, if it has one.

We do not access private accounts, paid databases of personal information, or anything behind a login.

3.3 Information collected automatically

When you visit upswingfast.com or a website Upswing hosts:

• Standard server logs (IP address, browser type, referring page, pages viewed, timestamps).
• Google Analytics 4 data (anonymized page views, sessions, device type, geographic region at the country and state level).
• Inquiry form submissions, when you choose to send one.

We do not run retargeting cookies, advertising pixels, or third-party tracking on upswingfast.com or on the websites we host for clients.

4. How we use what we collect

We use your information to:

• Build, deliver, host, and maintain your website.
• Communicate with you about your subscription, your site, and your account.
• Send you monthly performance reports.
• Process payments through Stripe.
• Improve our service and operations.
• Comply with legal obligations.

We do not use your information for advertising, profiling, or any purpose unrelated to running the service we sell.

5. AI and how we use it

Upswing uses AI tools to help build, write, design, and update client websites. This includes research synthesis, draft copywriting, layout iteration, and revision passes.

Here is what we want you to know about how we use AI:

• What we send to AI tools: publicly available information about your business (the same information described in Section 3.2), plus content you provide for use on your site.
• What we do not send: payment information, private correspondence between you and Sage, or anything else marked confidential.
• No training on your data: the AI tools we use are configured so your information is not used to train external AI models. We have selected providers and plans that contractually commit to this.
• Encryption: all data sent to AI tools is encrypted in transit and at rest.
• Human review: every AI-assisted output that reaches your website is reviewed by Sage before it goes live.

The AI subprocessors we use are listed in Section 9.

6. Cookies and tracking

We use a small number of cookies and similar technologies, all of which fall into one of two categories:

• Strictly necessary cookies: session cookies that let the website function (for example, remembering your billing toggle preference). These do not track you across sites.
• Analytics cookies: Google Analytics 4 cookies that help us understand how the site is used. GA4 is configured with IP anonymization and without advertising features.

We do not use:

• Advertising cookies.
• Retargeting or remarketing pixels.
• Third-party tracking services beyond Google Analytics 4.

You can disable cookies in your browser at any time. Strictly necessary cookies do not work without cookies enabled, so some parts of the site may not function.

7. Inquiry form submissions on client sites

When a visitor submits an inquiry form on a website Upswing hosts for a client:

• The submission is routed directly to the client business owner.
• A copy is delivered to sage@upswingfast.com for delivery confirmation only.
• We do not aggregate, share, sell, or analyze visitor data across client sites.
• We do not contact form submitters for any purpose other than delivery confirmation if the client requests it.

8. Google Analytics 4 and Search Console

Active client websites use Google Analytics 4 and Google Search Console to measure traffic and search performance.

• GA4 and Search Console properties for client sites are configured under Upswing’s account, because Upswing owns the domain and the website during the subscription. This is part of the managed-service model.
• The client receives a monthly email report summarizing the data in plain English.
• Transfer of GA4 and Search Console properties to the client is available only as part of the full buyout option described in our Terms of Service.

GA4 is configured to anonymize IP addresses and to exclude advertising features.

9. Subprocessors

We use the following service providers to operate Upswing. Each is a subprocessor that handles client or visitor data in some capacity.

Each subprocessor is contractually committed to handle data in accordance with applicable privacy laws and is configured to keep client data out of any training datasets for external AI models.

We will update this list if we add or remove subprocessors. Material changes are communicated to active clients by email at least 30 days before they take effect.

10. How long we keep your information

Active client data is retained for the duration of your subscription.

After cancellation, all client website content (copy, images, design, and the domain registration) is retained indefinitely so reactivation is fast and seamless if you ever come back. Reactivation is fee-free. If you want all of your data permanently deleted instead, email sage@upswingfast.com and we will delete it within 30 days.

Prospective client research data (information collected before you become a client) is retained for up to 12 months. After 12 months without engagement, we purge the records.

Email correspondence is retained for as long as we maintain customer support records, typically not less than three years, for legal and operational reasons.

Payment records are retained as required by applicable tax and accounting law.

11. Security

We take security seriously.

• All websites Upswing hosts use HTTPS by default. SSL certificates auto-renew and are monitored.
• All credentials are managed in encrypted secret management (Infisical). No credentials are stored in plain text.
• Data sent to subprocessors is encrypted in transit (TLS) and at rest.
• Uptime monitoring runs every 5 minutes, 24/7.
• We apply security patches and dependency updates promptly.

Security incident notification. If we become aware of a security incident affecting your data, we will notify you within 72 hours of becoming aware of it, by email to the address on your account.

12. Your rights

You have the right to:

• Access the information we hold about you.
• Correct information that is inaccurate.
• Delete your information (subject to the legal and operational records we are required to keep).
• Opt out of analytics on websites we operate by using your browser’s Do Not Track setting or by disabling cookies.

To exercise any of these rights, email sage@upswingfast.com. We will respond within 30 days.

If you are in a jurisdiction with additional privacy rights (for example, California, the European Union, or the United Kingdom), those rights apply in addition to what is described here. Contact us if you want to exercise them and we will respond in accordance with the applicable law.

13. Children’s privacy

Upswing’s services are intended for businesses, not for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, email sage@upswingfast.com and we will delete it.

14. International data transfers

Upswing operates from Salem, Oregon. Some of our subprocessors operate in other countries. By using Upswing’s services, you consent to the transfer of your data to and processing in jurisdictions outside your own, including the United States, where data protection laws may differ.

15. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the policy reflects the most recent revision.

Material changes (changes that meaningfully affect what we collect, how we use it, or your rights) will be communicated to active clients by email at least 30 days before they take effect.

Continued use of Upswing’s services after a change takes effect constitutes acceptance of the updated policy.

16. Contact

Questions about this policy, your data, or your rights:

• Email: sage@upswingfast.com
• Phone: 971-509-5656
• Mail: Upswing, 249 Liberty St NE #120, Salem, OR 97302