Privacy policy

We at Upstream PBC know you care about how your personal information is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Policy.

The terms “Upstream Tech,” “we,” and “us” refer to Upstream PBC. By using or accessing the Upstream Tech website(s), products, services and applications (the “Services”) in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy. Most importantly, in some instances before you use or access Services, Upstream Tech will request and require your consent that we will collect, use, and share your personally identifiable information.

Remember that your use of Upstream Tech’s Services is at all times subject to the Terms of Agreement put in place when access was granted, which incorporate this Privacy Policy. Any terms we use in this Privacy Policy without defining them have the definitions given to them in the Terms of Agreement.

What does the privacy policy cover?

This Privacy Policy covers our treatment of personally identifiable information ("Personal Information") that we gather when you are accessing or using our Services, but not the practices of companies we don’t own or control, or people that we don’t manage. We gather various types of Personal Information from our users, as explained in more detail below, and we use this Personal Information internally in connection with our Services to:

  • to personalize, provide, and improve our Services;
  • to allow you to set up a user account and profile;
  • to contact you and allow other users at your organization to contact you;
  • to fulfill your requests for certain products and services;
  • and to analyze how you use the Services.

In certain cases, we may also share some Personal Information with third parties, but only as described below.

As noted in the Terms of Agreement, we do not knowingly collect or solicit Personal Information from anyone under the age of 16. If you are under 16, please do not attempt to register for the Services or send any Personal Information about yourself to us. If we learn that we have collected Personal Information from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Information, please contact the Upstream Tech Legal Department by email at

Will the privacy policy change?

We’re constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes. If you wish to continue using the Services after any changes to the Privacy Policy have been posted, we may request and require your agreement to the changes.

What information does Upstream Tech collect?

Information You Provide to Us. We receive and store any information you knowingly provide to us. For example, through the registration process and/or through your account settings, we may collect Personal Information such as your name, email address, phone number, and third-party account credentials. Certain information may be required to register with us or to take advantage of some of our features. However, before processing any Personal Information you provide to us, we will request and require your explicit consent, unless otherwise permitted by applicable law.

Upstream Tech does not process or seek to collect special categories of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sexual orientation. Entry of any special categories of personal data by you is strictly prohibited and constitutes a breach of this Privacy Policy and Terms of Agreement.

You should also be aware that Upstream Tech may also process Personal Information without your express consent to the extent one of the following applies:

  • Processing is necessary for the performance of a contract with Upstream Tech to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Processing is necessary for compliance with a legal obligation to which Upstream Tech as the controller is subject.
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Upstream Tech as the controller.
  • Processing is necessary for the purposes of the legitimate interests pursued by Upstream Tech as the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

We may communicate with you if you’ve provided us the means to do so and given your explicit consent. For example, if you’ve given us your email address, we may send you promotional email offers on behalf of other businesses, or email you about your use of the Services. If you do not want to receive communications from us, please indicate your preference by either utilizing the “Unsubscribe” functionality or sending a request to

Information Collected Automatically. Whenever you interact with our Services, we seek to automatically receive and record information on our server logs from your browser or device, which may include your IP address, geolocation data, device identification, “cookie” information, the type of browser and/or device you’re using to access our Services, and the page or feature you requested. “Cookies” are identifiers we transfer to your browser or device that allow us to recognize your browser or device and tell us how and when pages and features in our Services are visited and by how many people. Please note you may change the preferences on your browser or device to prevent or limit your device’s acceptance of cookies, but this may prevent you from taking advantage of some of our features. If you click on a link to a third-party website or service, such third party may also transmit cookies to you. Again, this Privacy Policy does not cover the use of cookies by any third parties, and we aren’t responsible for their privacy policies and practices.

Please be aware that cookies placed by third parties may continue to track your activities online even after you have left our Services, and those third parties may not honor “Do Not Track” requests you have set using your browser or device.

We may use this data to customize Content for you that we think you might like, based on your usage patterns. We may also use it to improve the Services - for example, this data can tell us how often users use a particular feature of the Services, and we can use that knowledge to make the Services interesting to as many users as possible.

Will Upstream Tech share any of the information it collects?

We neither rent nor sell your Personal Information in personally identifiable form to anyone. However, we may share your Personal Information with third parties as described in this section. If we use third-party subprocessors, Upstream Tech will endeavor to ensure adequate technical and organizational measures exist at those subprocessors to safeguard Personal Information.


  • Stripe, Inc., USA
  • Google LLC, USA
  • Amazon Web Services, Inc., USA
  • Microsoft Corporation, USA
  • GitLab B.V., USA
  • HelloSign, Inc., USA

Information that’s no longer personally identifiable. We may anonymize your Personal Information so that you are not individually identified, and provide that information to our partners. We may also provide aggregate usage information to our partners, who may use such information to understand how often and in what ways people use our Services, so that they, too, can provide you with an optimal online experience. However, we never disclose aggregate information to a partner in a manner that would identify you personally, as an individual. Affiliated Businesses. In certain situations, businesses or third-party websites we’re affiliated with may sell or provide products or services to you through or in connection with the Services (either alone or jointly with us). You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service.

Our Agents. We may employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products or services to you; for example, we may make third-party data accessible via our website.

Business Transfers. We may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that would be transferred. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party. In these cases, if you do not wish to have your Personal Information transferred, you may request erasure of your Personal Information by contacting

Protection of Upstream Tech and Others. Please keep in mind Upstream Tech may process Personal Information for compliance with a legal obligation to which Upstream Tech is subject. We reserve the right to access, read, preserve, and disclose any information that we believe is necessary to comply with law or court order; enforce or apply our Terms of Agreement and other agreements; or protect the rights, property, or safety of Upstream Tech, our employees, our users, or others.

Is my personal information secure?

Your account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.

We endeavor to protect the privacy of your account and other Personal Information we hold in our records through appropriate technical and organizational measures based on the highest industry standards, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.

What personal information can I access?

Through your account settings, you may access, and, in some cases, edit or delete information you’ve provided to us, including your name and password, email address and user profile information, including images you have uploaded to the site.

More importantly, you have the right to obtain from Upstream Tech confirmation as to whether or not Personal Information concerning you is being processed, and, if that is the case, access to the following information:

  • The purposes of the processing.
  • The categories of Personal Information concerned.
  • The recipients or categories of recipient to whom the Personal Information have been or will be disclosed, in particular recipients in third countries or international organizations.
  • Where possible, the envisaged period for which the Personal Information will be stored, or, if not possible, the criteria used to determine that period.
  • The existence of the right to request from Upstream Tech, as the controller, rectification or erasure of Personal Data or restriction of processing of Personal Information concerning you or to object to such processing.
  • The right to lodge a complaint with a supervisory authority.
  • Where the Personal Information are not collected from you, any available information as to their source.
  • The existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

If you have any questions about accessing Personal Information we have on file about you, please contact us at

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties.

What choices do I have?

You can always opt not to disclose information to us, but keep in mind some information may be needed to register with us or to take advantage of some of our features.

You may be able to add, update, or delete information as explained above. When you update information, however, we may maintain a copy of the unrevised information in our records. You may, of course, request deletion of your account and Personal Information by emailing Upstream Tech will then undertake measures to effect deletion of your Personal Information, unless we are required by law to preserve the information.

What if I have questions about this policy?

If you have any questions or concerns regarding our Privacy Policy and data protection principles, please send a detailed message to, and we will try to resolve your concerns.

Effective February 1, 2018.