Privacy Policy

Last updated 12 November 2026. This policy explains what Upwise ("we") collects when you use Upwise, why, and the choices you have.

What we collect

• Account details: your name, email address and a scrambled (hashed) version of your password.
• Websites you add: the address, business name, city, services and the traffic numbers you enter.
• Scan results: what our scanner reads from the public pages of a website, its DNS and email records, SSL certificate and Google PageSpeed results. This is public information about the website.
• AI results: the questions sent to an AI assistant for your AI visibility check, its answers and the sources it cited, and your conversations with Ask Upwise.
• Google data, only if you connect Google: see the next section.
• Basic technical data: a session cookie that keeps you signed in, a cookie that remembers your language, and server logs (IP address, time, page) kept for security.

Google Search Console and Google Analytics

If you press "Connect Google", you sign in with Google and grant read-only access to:

• Google Search Console (scope webmasters.readonly): the list of your Search Console properties, and for the property you choose, search queries, pages, clicks, impressions, click-through rate and average position.
• Google Analytics (scope analytics.readonly): the list of your Analytics 4 properties, and for the property you choose, visitors, new visitors, sessions, engagement, key events and traffic channels.
• Your Google email address (scopes openid and email), so you can see which Google account is connected.

We use this data only to show it to you and the people you invite to your account, to calculate your growth estimate, to write alerts and reports for you, and to answer your questions in Ask Upwise. We cannot change anything in your Google accounts.

Upwise's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google data, use it for advertising, or use it to train AI models. People at Upwise do not read it unless you ask us to for support, it is needed for security, or the law requires it.

We store the Google sign-in token and the latest 28 days of synced figures for each connected website. You can disconnect at any time on the Search & traffic page, which deletes the token and the synced data. You can also remove access in your Google account at myaccount.google.com/permissions.

Who we share data with

• Anthropic (Claude AI) processes the site data, questions and conversations needed to run the AI visibility check and Ask Upwise. When Google data is connected, a summary of it is included in Ask Upwise questions so the answer can use it. Anthropic does not use this data to train its models under its commercial terms.
• Google PageSpeed Insights receives the address of websites we scan.
• Our hosting provider stores the database on our behalf.

We do not sell personal data. We share data with authorities only when the law requires it.

How long we keep data

We keep your account and website data while your account is open. When you remove a website, its scans, objectives, alerts, competitors, AI results and Google data are deleted. When you ask us to close your account, we delete it within 30 days, apart from what the law requires us to keep.

Security

Connections use HTTPS. Passwords are stored as scrypt hashes. Access to the server is restricted to the people who run it.

Your rights

You can see and correct your data in the app, export a PDF report, disconnect Google, remove websites, and ask us for a copy of your data or to delete your account.

Children

Upwise is a business tool and is not meant for children under 16.

Changes

If we change this policy in a way that matters, we will tell signed-in users in the app before the change takes effect.

Contact

Upwise