Privacy Policy

At YupTees, we are committed to protecting your privacy and ensuring that your personal information is handled securely and transparently. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

This policy applies to anyone who uses our website yuptees.com or any of our services.

What We Collect and Why

We only collect the minimum amount of personal information necessary to provide our services.

Identity and Access

Email address: We collect your email address when you sign up using Google Authentication. This helps us identify your account and send you important service-related communications.

Billing Information

Payment details: When you make a payment for our services, we process this through Stripe. We do not store your full payment information ourselves - only the last four digits of your card number and billing address for record-keeping, invoicing, and fraud prevention.

Cookies and Tracking Technologies

Essential cookies: We use cookies and caching technologies that are necessary for the site to work, such as authentication and session management, your cookie consent preference, and security features.

Marketing cookies: With your consent, we also use cookies and similar technologies from advertising partners (Meta, Google Ads, and Reddit) to measure how our marketing performs. These cookies are only set after you accept marketing cookies in our consent banner, which appears on your first visit. You can withdraw or change your consent at any time via the “Cookie Settings” link in the footer. If you reject or do not respond, no marketing cookies are set. We also process limited event data (such as page visits and conversions) through our advertising partners’ server-side interfaces to measure ad performance.

The main cookies we use are:

We load Google Ads tags with Google Consent Mode v2: while consent is denied, no advertising cookies are set and only limited cookieless measurement occurs.

Your choices (including California): Our advertising tools may be considered a “sale” or “share” of personal information under California law (CCPA/CPRA). You can opt out at any time: reject marketing cookies in the consent banner, reopen it via the “Your Privacy Choices” link in the footer, or send a Global Privacy Control (GPC) signal from your browser or extension, which we honor automatically. Residents of the EU/UK can withdraw consent at any time with the same links; withdrawing consent only affects future tracking.

How We Use Your Data

We use your personal information to:

• Provide, operate, and maintain our services.
• Process payments and manage subscriptions via Stripe.
• Communicate with you about your account, updates, or marketing emails (with your consent).
• Improve and personalize our services.
• Detect, prevent, and respond to technical issues or abuse.
• Comply with legal obligations and enforce our Terms of Service.

Do We Share Your Information?

We do not sell or rent your personal data to third parties. However, we may share your data under the following circumstances:

Service Providers

We use third-party services like:

• Stripe for payment processing.
• Google Cloud Platform for hosting, storage, and infrastructure.
• Supabase for database management.
• Meta (Facebook), Google Ads, and Reddit for advertising and conversion measurement.

These providers only process data to perform specific tasks on our behalf and are prohibited from using it for other purposes.

Legal Requests

We may disclose your data if required by law or to respond to valid legal requests (e.g., court orders, government investigations). In such cases, we will attempt to notify you unless legally prohibited.

Business Transfers

If YupTees is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will notify you before any such transfer occurs.

Your Rights with Respect to Your Data

As a user of our services, especially if you’re located in the European Union or United Kingdom, you have certain rights under applicable data protection laws, including:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure (“Right to Be Forgotten”): You can request deletion of your personal data, which we will fulfill within 60 days after account cancellation.
• Right to Restrict Processing: You may request that we limit how your data is used.
• Right to Object: You may object to the processing of your data in some situations.
• Right to Data Portability: You can request your data in a structured, commonly used format.

To exercise any of these rights, please contact us at support@yuptees.com.

How Long We Retain Your Data

• Active accounts: We retain your data as long as your account is active.
• Deleted accounts: After you cancel your account, all personal data will be deleted from active systems immediately. Within 60 days, all data will also be removed from backups.

If you delete content while your account is still active, it will be removed permanently within 30-90 days depending on system processes.

User Data Deletion

If you would like to request the deletion of your account and all associated data, please follow these steps:

1. Go to Settings in your dashboard.
2. Find your User ID and copy it.
3. Click Support in the dashboard - a support chat window will open.
4. Send us a message requesting to delete your account and include the User ID that you copied.

Once we receive your request, we will process the deletion of your account and all personal data in accordance with our data retention policy described above.

Where Is Your Data Stored?

Your data is stored on Google Cloud Platform (GCP) servers located in the United States, and we also use Supabase for database operations. If you are located outside the U.S., you acknowledge that your data may be transferred to, stored, and processed in the U.S.

International Data Transfers

Since we are based in Estonia but use U.S.-based services like Google Cloud and Supabase, your personal data may be transferred outside the EU/UK. To ensure adequate protections, we rely on:

• GDPR Standard Contractual Clauses
• EU-U.S. and UK-U.S. Data Transfer Frameworks (if applicable)

You may request a copy of our data processing agreements upon request.

How We Secure Your Data

We implement industry-standard security measures to protect your personal information:

• All data is encrypted in transit using SSL/TLS.
• Sensitive data is encrypted at rest where applicable.
• Regular backups are performed and secured.
• Access to data is limited to authorized personnel only.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. Please use caution when sharing sensitive information online.

Marketing Communications

We may send you service-related announcements, updates, and promotional messages. You can opt out of marketing emails at any time using the unsubscribe link included in each message.

Children’s Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from minors. If we become aware that a child’s data has been collected without parental consent, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated via email or posted notice on our website.

The most current version of the policy will always be available on our website.

Contact Us

If you have any questions, concerns, or requests regarding your data or this Privacy Policy, please contact us at:

• Email: support@yuptees.com
• Company: YupTees
• Location: Tallinn, Estonia