PRIVACY POLICY

This Privacy Policy describes how Upswing ("Upswing," "we," "us") collects, uses, and protects information about clients and visitors to upswingfast.com.

1. WHO WE ARE

Upswing is a web design and digital services company based in Salem, Oregon, owned and operated by Sage Dutra. We provide website design, hosting, and ongoing web presence services primarily to local businesses in Oregon.

2. WHAT WE COLLECT

Information you provide directly

• Contact information: Name, business name, phone number, and email address — submitted through contact forms or provided in communications with us.
• Business information: Business address, license numbers, services offered, photos, and other content you provide for your website.
• Payment information: Billing details processed by Stripe. Upswing does not store or have access to your full credit card number — Stripe handles all payment processing.
• Communications: Messages you send us by text, email, or through our website forms.

Information collected automatically

• Website analytics: Pages visited, time on site, and traffic source — collected via Google Analytics 4 on our own website. This data is aggregated and does not identify individual visitors.
• Contact form submissions: Logged with timestamp and IP address for security and spam prevention.

Information from third parties

When researching prospective clients, we may collect publicly available business information including Google Business Profile data (rating, reviews, business name, phone, address), licensing information from Oregon CCB or OREC public databases, and publicly visible social media content. This research is used only to prepare a website proposal. It is not sold or shared.

3. HOW WE USE YOUR INFORMATION

• To deliver services: Building and maintaining your website, managing your domain, sending performance reports, and handling update requests.
• To communicate with you: Responding to inquiries, sending onboarding communications, monthly reports, and service-related notices.
• To process payments: Billing and subscription management via Stripe.
• To improve our services: Analyzing aggregate usage patterns to improve the quality of our website templates and reporting.
• Legal compliance: Maintaining records as required by applicable law.

We do not use your information for advertising. We do not sell your data. We do not send marketing emails beyond service-related communications.

4. WHO WE SHARE YOUR INFORMATION WITH

We share information only with service providers necessary to deliver our services. These include:

• Stripe — payment processing. Stripe Privacy Policy →
• Vercel — website hosting. Your site is hosted on Vercel's infrastructure. Vercel Privacy Policy →
• Google — Analytics 4 and Search Console for your site's analytics. Google Privacy Policy →
• Notion — we use Notion internally to manage client workspace information and notes. Your data is not made public.
• Cal.com — scheduling. If you book a call, your scheduling information is handled by Cal.com.

We do not share your personal information with advertisers, data brokers, or any third party for marketing purposes.

5. HOW LONG WE KEEP YOUR INFORMATION

• Active clients: We retain all client information for the duration of the subscription.
• Cancelled clients: We retain basic account records (name, business name, billing history) for 3 years after cancellation for legal and accounting purposes. Your website content is retained for 60 days post-cancellation, after which it is deleted unless you request a content export.
• Prospective clients (not converted): Research data on prospective clients is retained for up to 12 months. After 12 months with no engagement, records are purged.

6. YOUR RIGHTS

You have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information.
• Deletion: Request deletion of your personal information (subject to our legal record-keeping obligations).
• Opt-out: Opt out of any non-essential communications.

To exercise these rights, contact privacy@upswingfast.com. We respond to all requests within 30 days.

7. COOKIES & ANALYTICS ON OUR WEBSITE

upswingfast.com uses Google Analytics 4 to understand how visitors use the site. GA4 uses cookies and similar tracking technologies. This data is aggregated and does not personally identify visitors.

If you prefer not to be tracked, you can use the Google Analytics opt-out browser add-on.

We do not use advertising cookies, tracking pixels for retargeting, or any cookies beyond what is necessary for analytics and site functionality.

8. YOUR CLIENTS' PRIVACY (FOR BUSINESS OWNERS)

If your Upswing-built website includes a contact form, form submissions from your site visitors are routed directly to your email address. Upswing logs form submissions for monitoring purposes (to catch failed deliveries and spam) but does not use or share information submitted through your contact form.

Your website includes Google Analytics 4 — a separate GA4 property dedicated exclusively to your business. Visitor data from your site belongs to you and is not combined with data from other client sites. You will receive your GA4 Property ID in your onboarding documentation.

9. SECURITY

We take security seriously. Measures include:

• All credentials managed via encrypted secret management (Infisical)
• All client sites hosted with HTTPS / SSL enforced
• Access to client data limited to essential personnel only
• Payment data handled exclusively by Stripe — we never store raw card data

No security system is impenetrable. If a security incident affects your data, we will notify you within 72 hours of becoming aware of the breach.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. If we make material changes, we'll notify active clients by email at least 14 days before the changes take effect. The current version is always published at this URL.

11. CONTACT

Privacy questions or requests:

Upswing
Sage Dutra
privacy@upswingfast.com
971-509-5656