Privacy Policy

1. Introduction

Upland Group LLC ("Upland Group," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect through our website, client portal, AI-guided assessment tool, and related services (collectively, the "Services"), how we use and share it, and the choices you have. Upland Group LLC is based in Aldie, Virginia, United States.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

2. Information We Collect

Information you provide to us

• Contact and account details such as your name, business name, email address, phone number, and the password you set for your account.
• Information submitted through our contact form, consultation booking flow, and AI-guided business assessment, including your responses and any documents or details you choose to share.
• Communications you send to us, including support requests and correspondence.

Information collected automatically

• Usage and device data such as IP address, browser type, pages viewed, and interactions with our Services, collected via cookies and similar technologies.
• Analytics data collected through Google Analytics to help us understand how visitors use our website.

Information from third parties

• If you connect a Google account, we receive information from Google APIs (such as your email address, calendar availability, and files you authorize us to access) as described in Section 6.
• If you become a billing client, we may exchange limited account and invoice information with Intuit QuickBooks as described in Section 7.

3. How We Use Your Information

• To provide, operate, and improve our consulting Services and the client portal.
• To schedule and manage consultations and sync bookings with the relevant consultant's calendar.
• To generate tailored insights from your business assessment and prepare project plans and deliverables.
• To verify your email address, process account registrations and approvals, and authenticate you.
• To communicate with you about your account, bookings, inquiries, and project updates.
• To maintain customer records and, where applicable, prepare and manage invoices.
• To analyze usage, maintain security, prevent fraud, and comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share information only as described below:

• Service providers who process data on our behalf, including our cloud hosting provider, email delivery provider (Resend), analytics provider (Google), Google Workspace/Drive and Calendar services, our AI processing provider, and Intuit QuickBooks for billing.
• Our consultants and authorized team members, who access client information only as needed to deliver Services.
• Legal and safety reasons, such as to comply with applicable law, enforce our agreements, or protect the rights, property, or safety of Upland Group, our clients, or others.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

5. Cookies & Analytics

We use cookies and similar technologies for essential site functionality and to measure and improve our website through Google Analytics (GA4). You can control cookies through your browser settings. Disabling cookies may affect certain features of the Services.

6. Google API Services — Limited Use Disclosure

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We access Google Calendar to create and manage consultation events on the connected account, and Google Drive to map and retrieve project files you authorize, in order to provide our Services to you.
• We only use Google user data to provide and improve user-facing features that are prominent in the Services.
• We do not transfer or sell Google user data to third parties for advertising, and we do not use it for any purpose unrelated to the Services.
• We do not allow humans to read Google user data unless we have your consent, it is necessary for security or to comply with law, or the data is aggregated and anonymized.

7. QuickBooks / Intuit Data

If you become a billing client, we use Intuit QuickBooks to create and manage customer records and invoices. In that case we may share your name, business name, contact details, and invoice information with Intuit to provide billing services. Intuit's handling of your information is governed by Intuit's own privacy statement.

8. Data Retention

We retain personal information for as long as needed to provide the Services, maintain business and client records, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

9. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information. We honor these rights regardless of your location, to the extent practical:

• Right to know / access — request the categories and specific pieces of personal information we have collected about you.
• Right to correct — request that we fix inaccurate personal information.
• Right to delete — request deletion of personal information we hold about you, subject to legal exceptions.
• Right to data portability — receive a copy of certain information in a portable format.
• Right to opt out of sale or sharing and of targeted advertising and certain profiling (see Section 11).
• Right to non-discrimination — we will not deny services, charge different prices, or provide a different level of service because you exercised your rights.

How to exercise your rights. Submit a request using the form in Section 11, or email privacy@uplandgroupllc.com. We will verify your identity before fulfilling certain requests and will respond within the timeframe required by applicable law (for example, 45 days under the California Consumer Privacy Act (CCPA/CPRA) and the Virginia Consumer Data Protection Act (VCDPA), subject to permitted extensions).

Authorized agents. You may use an authorized agent to submit a request on your behalf; we may require proof of authorization and verification of your identity.

Appeals (Virginia and similar states). If we decline to act on your request, you may appeal by replying to our decision or emailing privacy@uplandgroupllc.com with "Privacy Appeal" in the subject line. We will respond to appeals within the period required by law.

You may also disconnect a connected Google account at any time (which revokes our ongoing access to that account's data) and manage cookies through your browser and our cookie banner.

11. Your Privacy Choices & Opt-Out

Do Not Sell or Share My Personal Information

We do not sell your personal information for money, and we do not share it for cross-context behavioral (targeted) advertising. We use analytics cookies only with your consent. If you would still like to formally record an opt-out of any sale, sharing, or targeted advertising, you may do so below.

Marketing email opt-out

Any marketing email we send includes an unsubscribe link, and you can opt out at any time. Opting out of marketing does not stop transactional or service messages related to your account, bookings, or projects.

Cookies & analytics opt-out

You can accept or decline analytics cookies using the cookie banner on our site, and you can change your choice any time by clearing your browser's site data. You may also use browser controls and the Google Analytics Opt-out Browser Add-on.

Submit a privacy request

Use this form to opt out or to exercise any of the rights described in Section 10:

12. Data Collection Policy — Categories, Sources & Retention

The table below summarizes the categories of personal information we collect, where it comes from, why we use it, and how long we generally keep it. We collect only what we need to operate our Services.

We do not knowingly collect sensitive categories of personal information beyond what you choose to share, and we do not use personal information for automated decisions that produce legal or similarly significant effects without human involvement.

13. Children's Privacy

Our Services are intended for businesses and individuals 18 years of age or older. We do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised effective date, and where appropriate, provide additional notice.

15. Contact Us

Upland Group LLC
Aldie, Virginia, United States
Privacy inquiries: privacy@uplandgroupllc.com
General inquiries: inquiries@uplandgroupllc.com