upcell.io, Inc. (“we,” “our,” “Upcell.io”) provides data marketing services (the “Services”) designed to assist for-profit and not-profit organizations, and companies that work with them, in their customer outreach and marketing processes. In general, we seek to help our customers (and sometimes, their customers) to market their goods and services in a more relevant and efficient way by providing information and insights about their actual and potential customers. Our solutions, many of which are described on this website, are often (but not exclusively) used to support email marketing.
We take seriously the privacy interests of the individuals whose information we handle and maintain in our database. We in turn provide this Privacy Policy (“Privacy Policy”) to explain how we use and manage information, and what rights consumers have to control how their information is used in marketing.
To review the “Addendum” we have created specifically to address disclosures required under the California Consumer Privacy Act, please see our “CCPA PRIVACY NOTICE.” This Addendum is also helpful for those in other U.S. states that wish to understand in a specific way how we obtain, use and disclose personal information (also referred to as “personal data” in some states). We use the term “personal information” to capture the various types of information and identifiers that are generally included in statutory definitions of this term (or the term “personal data”), particularly under U.S. state privacy laws that use those terms. (We do not market our services to residents of Europe, the United Kingdom (UK), or Switzerland, and do not intentionally create products or services related to such residents.).
In addition to using personal information to create and provide our products and services, we operate corporate websites, which are designed for our own customers and prospective customers, and others who want to learn about our services. We address the information we collect and use for those business purposes (such as information we use to communicate with our corporate customers, and potential customers) in Section 6 of this Privacy Policy.
Information That We Collect and Use in Our Services
In order to provide our Services, we receive data, including personal information, from a variety of sources, including from websites and apps that collect the information, public sources, and other data compilers. We refer to the information that we collect and process throughout this Privacy Policy as “Information” or “the Information.” We generally seek to collect only “business intelligence” information – Information associated with work emails, phone numbers, job titles and related information; however, we may also collect Information such as identifiers that consumers employ for personal use as well.
The Information we use to provider our Services includes:
Personal email
Professional email
Personal or professional telephone number, and postal address
IP address
A cookie or device identifier, which uniquely identifies your browser or device
Usage data related to your email interactions, such as whether you receive, open or respond to an email, and related information, as well as whether an email is or recently has been in use
Usage data related to your website interactions, such as whether you visit or log in to a website, page visits and related information
Information and actions associated with consumer interactions, such as success rates of consumer outreach (whether by phone, email or other channels), and in turn which consumers (or types of consumers) may be interested in which types of products
Demographic information, such as inferenced income or age range, household size, or home ownership, and personal information such as jobs held or educational institutions attended.
Information regarding consumer interests, such as what type of products you may be interested in, or what types of hobbies you might have, such as whether you are a likely pet owner or a frequent traveler.
Some of the above information may be inferred – for instance, if certain identifiers appear connected to the same person or phone number/email address, we may infer that they relate to the same individual
We may combine any of the points of Information we collect or receive with other Information.
upcell.io also receives information through this website (and any other website we operate), and our business operations. We describe this information in Section 6.
How We Use the Information
upcell.io uses the Information for various purposes, including the following.
As Part of Our Services:
Data Marketing Services. Our Services include our licensing or other provision of marketing information (which may include personal information) to our customers, generally regarding which customers or prospective customers are most likely to be interested (or disinterested) in certain offers or certain products or services. We also help our customers identify and understand their customers better, by providing insights about them. Our customers may at any given time include (but are not limited to) small and medium-sized businesses, ad and media agencies, job recruiters, non-profits, brands and marketing data platforms that help their customers to market and advertise to their own customers (and prospective customers). Our customers also may include other data compilers, who work with their own customers.
Retargeting Services. We sometimes help our customers to “retarget” marketing content to website visitors. In particular, our Services help customers to send emails or other marketing to people who visited or logged in to their websites, by cross-referencing information such as cookie identifiers and emails and other personal information (including those compiled by third party data services) for those purposes.
Additional Marketing Services. Other Services we may make available, which may supplement the above Services, may involve (a) assisting customers to target and optimize email campaigns, display, or other marketing; (b) measuring the effectiveness or performance of marketing campaigns,, by determining which messages are most likely to be seen or opened by which types of consumers, or which types of ads are most likely to lead to purchases; (c) analyzing and optimizing our customers’ (or their service providers’) proprietary databases; (d) helping customers detect and prevent fraud and provide “validation” or data hygiene services, e.g., by verifying or removing or correcting old, incorrect or outdated information or evaluating whether an email address recently has been active.
Audience Segments. We may create groups of individuals we believe are interested in particular types of products or have other common interests or characteristics (for instance “Technology Executives” or “Marketing Professionals”). We refer to these as “Audience Segments” and may link those Audience Segments to identifiers that are then used by us, our customers, or third party platforms to help target and advertise in a relevant way to those groups of individuals.
To Operate Our Services
We also use the Information described above for our own internal purposes – such as to improve, test, update and verify our own database; develop new products; operate, analyze, improve and secure our Services and our databases and servers.
3. How We Share Information with Third Parties, including Service Providers
upcell.io may share the Information with customers, marketing services and platforms, as well as service providers that help us to provide the Services we’ve described above (or other services we may add in the future). This includes sharing in the following ways:
With Our Customers: As described above, we license the Information in various ways to our customers (and something to partners and resellers, who license the Information to their customer), when we provide our Services. We may sometimes share the Information with those Customers’ service providers (for instance, a provider that prints or sends mailings for a Customer).
With Our Partners: We also may share the Information, including personally identifiable information and Audience Segments, with business and data partners to help provide more tailored targeted marketing, advertising and communications. Likewise, we may do so for analytical purposes, including to help these other parties measure campaign performance, inform future campaigns, or to handle, analyze, or segregate this Information on our or our customers’ behalf. Sometimes, we will share the Information with the service providers of those businesses, such as where they rely on particular ad or content delivery platforms to house or process Information they use.
With Our Service Providers: We share the Information with a variety of service providers in order to operate, protect and advertise our Services and maintain our website(s). For instance, we may share the Information with our tech, hosting and customer support providers, marketing and advertising providers, other data providers (such as to enhance or verify our Information), security vendors, payment vendors (as to our business-to-business information), and other companies help us deliver, secure or develop our Services.
Corporate transfers: If upcell.io, its stock or its significant assets are acquired by or merged into another entity, our information will be transferred to that entity, and may be shared during due diligence in anticipation of any such transaction.
Affiliates, parent companies and subsidiaries: Upcell.io may share some or all of the Information in our possession with any affiliated or subsidiary companies (if we ever have any).
As required by law or to protect any person or entity: Upcell.io may disclose Information if we believe that such disclosure is necessary to (a) comply in good faith with relevant laws or to respond to subpoenas or warrants served on us; or (b) to protect or otherwise defend the rights, property or safety of upcell.io, our customers, or any other person or entity.
4. Your Marketing and Opt-Out Choices
There are multiple ways that you can opt-out of having the Information used to market to you:
First, you may visit our opt-out page at https://www.upcell.io/data-claim to have your personal information removed from our database. We will then in most cases remove your personal information from our active marketing databases within 15 business days, from the time we received the opt-out request. We may in certain cases (and where legally permissible) require that you verify any of the information that you submit, such as through a verified email response or another verified response.
To opt out of our Retargeting Services described in section 2, go to https://5x5data.com/opt-out-preferences/ and follow the instructions on that page regarding opting out of their cookies and other personal identifiers. You will need to do that from each browser that you use (because the retargeting and thus the “opt out” are cookie-based), and if you clear your browser cookies you will need to opt out again.
To the extent the DAA continues to maintain it, you may visit the DAA Webchoices tool at https://youradchoices.com/ to learn more about this type of advertising and how to opt out of this advertising on websites by companies participating in the DAA self-regulatory program. In addition, many websites and advertising platforms recognize a “GPC” signal, which may be deployed on a browser or through a browser extension, as a means of honoring a “do not sell” request. For more information on this method of “opting out,” please go to https://globalprivacycontrol.org/.
If we market to you by email, in our corporate capacity – such as if you are a customer or prospective customer of ours and we send information about our Services -- you may “unsubscribe” from our marketing emails through a link placed in your emails.
5. Cookies and Similar Technologies
Cookies and How We Use Them
upcell.io and its business partners use certain industry-standard technologies, including cookies and similarly functioning technologies, which we describe below. (We and/or our service providers use these technologies on our website, for instance, and our partners may use these technologies in their own marketing services.)
We may work with third parties or service providers to provide or enhance our services (e.g. for purposes of tailoring ads, or placing browser cookies), or to offer marketers ways to access or use our Information, often coded in “hashed” format. These partners may set and access their own cookies, pixel tags and similar technologies on your browser, which may have cookies with varying expiration periods. Those partners may, likewise, collect various types of information about your browser, device, or browsing activities through use of these cookies.
Cookies, in turn, are small data files that contain a string of characters, such as a unique browser identifier. Cookies are stored on your computer or other device and act as tags that identify your device. Our (or other companies’) servers send your device a cookie when you visit a website. A pixel tag (also commonly known as a web beacon or clear GIF) is an invisible 1 x 1 pixel that is placed on certain web pages. When you access web pages (such as the website of a marketer), pixel tags may generate a generic notice of the visit and permit our partners (or sometimes, us) to read the cookies that a respective company or server has deployed. Pixel tags can be used in combination with cookies to track the activity on a site by a particular device.
We or our service providers, and other online marketing platforms that we or they work with, may use cookies to, among other things, “remember” you, determine visitor patterns and trends, collect information about your activities on our clients’ sites, or interact with the advertising you see. Cookies are used in this way to provide relevant content to you and replace non-relevant communications with ads that better match your interests.
Disabling Cookies
Most web browsers are set up to accept cookies. You may be able to set your browser to warn you before accepting certain cookies or to refuse certain cookies. However, if you disable the use of cookies in your web browser, some features of our website and other services may be difficult to use or become inoperable.
6. Data Collected Through Our Corporate Website and in our Corporate Capacity
Information Collected
upcell.io collects information from users of our website(s) (including any page on which this Privacy Policy is posted), including:
The domain name and IP address of a user’s web browser, as well as a user agent, time stamp and other information about a user’s browser or device.
Information about what content and pages users access, utilize or visit on our website, or how they interact with our content – for instance, if they spent a certain amount of time reviewing a particular blog post or description of particular services.
Information, including personally identifiable and contact information that you provide, which could include (for instance) survey information, sign-up information (e.g., if you sign up for our webinars, events or newsletters), requests for information, mailing addresses and email addresses.
We may also collect information in the course of conducting and marketing our business. For instance, we may collect information through phone calls, at trade shows, during webinars, or during other marketing initiatives and activities.
How upcell.io Uses the Information We Collect Through Our Website
We use the Information we collect through our website(s) to do the following:
Create and manage your user account.
Provide Services you have requested.
Respond to and communicate with you (including regarding news and updates about our services).
Send you offers and ads for our products and services, when you browse the website(s) or other companies’ websites on the Internet (such as to “retarget” you with information about our Services).
Send you offers and ads for products and services of partner brands, or other offers we believe may be of interest to you, such as invitations to events and webinars.
Perform data analysis (including market research).
We may combine the Information with other information we obtain from third parties, publicly available sources, and any other product or service we provide to further improve the relevance and effectiveness of products, and advertisements offered, including (but not limited to), those provided on or through our services.
We may use IP addresses to help diagnose problems with our servers and to administer our website(s). We also may use IP addresses to help identify visitors to our website(s) for the duration of a session and to gather demographic information about our visitors. We may use clickstream data to determine how much time visitors spend on each web page of our website(s), how visitors navigate through the website(s), and how we may tailor our website(s) to better meet the needs of our visitors. We also use this Information for compliance with our legal obligations, policies and procedures, including the enforcement of our Terms and Conditions.
If we collect Information from “offline” sources – such as if you provide us your business card at a trade show – we will maintain that information and use it for marketing and business purposes, as well.
How upcell.io Shares the Information We Collect Through Our Websites
We may sometimes share or otherwise disclose the Information we collect about you, as described in this Privacy Policy or otherwise disclosed to you when you provide us with the information, including as follows:
We may share the Information with service providers who help us deliver the services you request or we provide. For instance, we share the Information with tech and customer support providers, marketing and advertising providers, other data providers (such as to enhance or verify our Information), security and data hygiene vendors, payment vendors (as to our business to business information), and other companies that may help us deliver or develop Services.
We may share the Information to communicate with you and market to you, including through email, direct mail or display media.
We will disclose your personal information (or other Information) if we believe in good faith that we are required to do so by law, regulation or other government authority or to protect the rights, safety or property of ourselves or any person or entity. We may also cooperate with law enforcement agencies in any official investigation and we may disclose any Information to the requesting agency in doing so.
If we or all or substantially all of our assets, are purchased by another company (such as in a merger, consolidation, restructuring, the sale of stock and/or assets, or other corporate change or financing transaction), the Information in our possession will likely be transferred to the successor entity. We also may share the Information during the course of any due diligence process leading up to any such transaction.
Our website(s) use cookies and similar technologies, both for its internal and operational purposes and to market to you (such as to retarget ads to you when you visit other sites across the Internet).
Privacy Rights You May Have in Specific States
Certain states have passed state-specific privacy laws that grant residents of their state’s particular privacy rights. These states include but are not limited to California (as to which a separate “Addendum” is provided below), as well as Colorado, Connecticut, Montana, New Jersey, Montana, Oregon, Texas, Utah, and Virginia. It also includes other states as their own states’ laws have or will become effective over time. A useful privacy “tracker” as to what these states are, and when each privacy law becomes effective, is provided by the “IAPP,” an industry association devoted to privacy issues, at https://iapp.org/resources/article/us-state-privacy-legislation-tracker/. If you live in one of these states, you may have the following rights with respect to your “personal information” or “personal data” (as such terms are defined under applicable law, and collectively referred to herein as “personal information”), namely, you may have the right to ask that we:
Provide you access to and/or a copy of certain personal information we hold about you.
Correct or update personal information we hold about you.
Delete certain personal information we have about you.
Opt you out of the sale or sharing of personal information, or processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable.
You also generally have the right to not be discriminated against for exercising your rights.
You also have the right to disclosures, as we provide in the Policy about the types of personal information we collect and disclose, and from and to whom:
How to Exercise your Privacy Rights. To exercise your right to opt out of the sale of your personal information, please see our instructions in Section 4, above. You may also call us at (855)-525-7940 or email us at privacy@upcell.io to exercise any of the above rights, in which case you should include your name, email address and home address along with the type of request you are making. Certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you. In addition, if you ask for a copy of your personal information (or ask to have that information deleted), we will take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, verifying your name and email address. If we cannot verify you, we may be unable to respond to your requests.
Authorized Agents. You may designate an authorized agent to make requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request.
Right to Appeal. In certain states, residents have the right to appeal our decision to deny your request, if applicable. If you wish to do this, please send an email to privacy@upcell.io with the word “Privacy Appeal” in the subject line.
Opt Out of Targeted Advertising. You may also opt out of targeted advertising, which we may occasionally engage in, such as to “retarget” with information about our services when you visit other websites (which in some states may be considered “selling” or “sharing” personal information). Please see the instructions in Section 4, above, to learn about those “opt out” methods. We do not knowingly sell the personal information of minors under 16 years of age, or deliberately target minors with advertising.
Links
This website may provide links to other websites that Upcell.io thinks users may be interested in. upcell.io is not responsible for the privacy practices of these other sites or companies.
Security and Data Integrity
upcell.io takes steps to help ensure that the data we possess is housed and transmitted securely. This may include various types of physical and electronic security, including firewall protections, encryption, hashing or truncation of data, and access controls to personal information. However, you should be aware that neither we nor any platform can guarantee 100 percent safety from hacks or illegal intrusion.
Changes to this Privacy Policy
From time to time, we may update this Privacy Policy. Any changes to it will become effective when it is posted to our website. Please check back to learn of any changes to this Privacy Policy
Storage of Information in the United States
If you are accessing our website from outside of the United States, your connection likely will be through and to servers located in the United States and all Information you provide will likely be processed and securely maintained in our web servers and internal systems located within the United States. (We generally store the Information used in our Services in the United States.) Thus, you should be aware that in accessing this website or otherwise communicating with us, the information we collect or receive from you may be subject to laws with lesser or different privacy standards than those in your own country (such as if you are in a country located in the European Union).
Your California and U.S. State Privacy Rights
If you are a resident of California or other states that recognize distinct consumer privacy rights, the California Consumer Protection Act, as amended by the California Privacy Rights Act (together the “CCPA”) provides certain rights of disclosure, access and deletion of your Information as described below in the “CCPA PRIVACY NOTICE” at the end of this Privacy Policy.
Contact Us
upcell.io has a designated privacy contact. If you have questions related to this Privacy Policy, or regarding our products or services, please contact us:
Privacy Officer
upcell.io, Inc.
6 Liberty Sq PMB 455, Boston, MA 02109
Email: privacy@upcell.io
We appreciate your comments and questions regarding upcell.io’s privacy practices.
CCPA PRIVACY NOTICE: ADDENDUM FOR CALIFORNIA RESIDENTS
CALIFORNIA PRIVACY RIGHTS
Last Modified: 5/5/2025
The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (together, the “CCPA”) provides certain rights to residents of California. This section of the Privacy Policy applies if you are a natural person who is a resident of California (“California Consumer”) and uses our Services. This Addendum supplements the information in the Privacy Privacy. However, this Addendum is intended solely for, and is applicable only as to, California Consumers: if you are not a California Consumer (or a resident of California), this does not apply to you and you should not rely on it.
In the below tables and sections, we describe (as required by the CCPA):
Our Collection of Personal Information – the types of Personal Information (which the CCPA defines broadly) that we collect, the types of sources we collect it from
Our Disclosure, Share and Sale of Personal Information – the types of recipients to whom we disclose, share or sell Personal Information.
Our Business Purposes – our business purposes for (a) collecting and (b) sharing Personal Information, which are generally the same.
Your California Privacy Rights and Choices– what rights you have under the CCPA, for instance, to request that we “opt out” or delete or correct your information from or in our marketing database (also called “do not sell” rights), or to request categories and personal information that we may have collected about you.
The following sets forth the categories of information we collect and purposes for which we may use California Consumers’ personal information:
OUR COLLECTION OF PERSONAL INFORMATION
Depending on how you interact with us, we may collect about you the categories of information summarized in the table below. The following table also describes how we collect and use such categories of information. The data types listed below each category are provided solely for purposes of example: we do not necessarily collect or use each such data type.
Category
Sources
Identifiers, e.g., name; alias; postal address; email address; telephone numbers, cookie or device identifiers
Data compilers and consumer data resellers. Publicly available data sources, such as publicly available websites. Our customers. (Together, “Commercial Data Sources”).
Government agencies (such as the US Postal Service and Census Bureau).
eCharacteristics of protected classifications under California or US law
E.g., sex/gender (marital status, age (over 40) (which may be based in some cases on inferences made)
Commercial Data Sources.
Commercial or transactions information
E.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies (which may in some cases be placed into categories or inferences)
Commercial Data Sources.
Employment Information
E.g., job title, job history, and related identifiers
Commercial Data Sources.
Internet or other electronic network activity information
E.g., information on a consumer’s visit to or interaction with a website (e.g., if a purchase was made online as opposed to offline)
Commercial Data Sources.
Geolocation data (not collected from mobile decides or networks)
United States Postal Service.
Education Information
E.g., college, university or graduate school attended and degrees obtained
Commercial Data Sources
Inferences of any of the above
Any of the above sources
OUR DISCLOSURE, SHARE, AND SALE OF PERSONAL INFORMATION
We will share the information collected from and about you as discussed above for various business purposes, with service providers and with third parties including our customers. The chart below how and with whom we sell, share or disclose personal information, and whether (based on the CCPA’s definition of “sell”) we believe we have “sold” or “shared” a particular category of information in the prior 12 months. (“Sharing” under the CCPA includes disclosure for purposes of cross contextual behavioral advertising, sometimes called targeted advertising or interest-based advertising.). Note that the examples we provide under the column “Category” simply reflect statutory, exemplary language: we do not necessarily collect all types of information reflected within each category.
Category
Categories of Third Parties We Share With
Whether We “Sold” or “shared” This Category of Personal Information in the Last 12 Months
Identifiers, e.g., name; alias; postal address; email address; and
Data compilers and consumer data resellers, consumer goods retailers, informational and retail websites, content publishers, non-profit organizations, business-to-business companies, job recruiters, data analytics providers, (referred to below together as “Customer Categories”).
Yes
Characteristics of protected classifications under California or US law.
E.g., sex/gender, age (which may be based in some cases on inferences made)
Customer Categories
Yes
Employment or educational information
E.g., job title, job history, colleges and universities attended and degrees obtained
Customer Categories
Yes
Inferences about the above
Customer Categories
Yes
We also may disclose any of the personal information we collect as follows:
Sharing for Legal Purposes: In addition, we may disclose personal information with third parties in order to: (a) comply with legal process or a regulatory investigation (e.g. a subpoena or court order); (b) enforce our Terms of Service, this Privacy Policy, or other contracts with you, including investigation of potential violations thereof; (c) respond to claims that any content violates the rights of third parties; and/or (d) protect the rights, property or personal safety of us, our platform, our customers, our agents and affiliates, its users and/or the public. We likewise may provide information to other companies and organizations (including law enforcement) for fraud protection, and spam/malware prevention, and similar purposes.
Disclosure In Event of a Corporate Transaction: We may also disclose personal information in the event of a major corporate transaction, including for example a merger, investment, acquisition, reorganization, consolidation, bankruptcy, liquidation, or sale of some or all of our assets, or for purposes of due diligence connected with any such transaction.
Disclosure to Service Providers: We disclose any personal information we collect with our service providers, which may include (for instance) providers involved in tech or customer support, operations, web or data hosting, billing, accounting, security, marketing, data management, validation, enhancement or hygiene, or otherwise assisting us to provide, develop, maintain and improve our services.
Aggregate or Deidentified Information: We may aggregate and/or de-identify any information collected so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, promotional partners, and sponsors, in our discretion.
OUR BUSINESS PURPOSES FOR COLLECTING AND DISCLOSING PERSONAL INFORMATION
Generally speaking, we collect and disclose the Personal Information that we collect for the following purposes, as we also have described in our Privacy Policy:
Our Purposes for collecting, using and sharing Personal Information
Data marketing services, for example:
Operating our data cooperative and providing marketing information to our Clients (which may include companies, non-profit organizations, other data compilers, resellers and platforms, advertising networks, and political organizations), generally regarding their marketing, recruiting, fundraising, customer service and engagement, and outreach activities.
Helping our Clients identify and understand their consumers better, by providing insights about them and managing loyalty programs, as well as providing financial and other scoring products.
Assisting our Clients with use our Services to provide their End Users and prospects with better service, improved offerings, and special promotions, for instance, advising on which End Users or prospective End Users are most likely to be interested (or disinterested) in certain offers.
Online targeting, for example:
Creating or helping to create defined audience segments based on common demographics and/or shared (actual or inferred) interests or preferences (e.g., households with prospective students). When we do this, we work with a data partner that “matches” our or other Information through coding techniques (such as through coded data “hashing”) with online cookies and other identifiers, in order to target and measure ad campaigns online across various display, mobile and other media channels.
Additional marketing services, for example:
Assisting in targeting and optimizing direct mail and email campaigns, display, mobile and social media marketing.
Measuring the effectiveness of online or offline ad campaigns by determining which messages are most likely to be seen or opened by which types of consumers, or which types of ads are most likely to lead to purchases.
Analyzing and optimizing our Clients’ (or their service providers’) proprietary databases, or helping Clients to identify and mitigate potential fraud.
Providing “verification” or data “hygiene” services, to help companies update and/or “clean” their databases by either verifying or removing or correcting old, incorrect or outdated information.
Operating our Services, for example:
Improving, testing, updating and verifying our own database.
Developing new products.
Operating, analyzing, improving, and securing our Services.
Other internal purposes, for example:
For internal research, internal operations, auditing, detecting security incidents, debugging, short-term and transient use, quality control, and legal compliance. We sometimes use the information collected from our own website from social networks, from other “business to business” interaction (such as at trade shows) or from data compilers for the above, as well as for our own marketing purposes.
YOUR CALIFORNIA RIGHTS AND CHOICES
Without being discriminated against for exercising these rights, California residents have the right to request that we disclose what personal information we collect from you, to delete that information, and to opt-out of the sale of your personal information, subject to certain restrictions. You also have the right to designate an agent to exercise these rights on your behalf. This section describes how to exercise those rights and our process for handling those requests. (To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.) Please note that sometimes we act as a “service provider” for our clients, in which case we receive and act on instructions from the client(s) as to the client data provided: any requests to exercise rights with respect to data we handle on behalf of a client should be directed to the particular client.
a. Right to request access to your personal information
California residents have the right to request that we disclose what categories of your personal information that we collect, use, or sell. You may also request the specific pieces of personal information that we have collected from you. However, we may withhold some personal information where the risk to you or our business is too great to disclose the information.
b. Right to request deletion or correction of your personal information
California residents may also request that we delete or correct any personal information that we collected from you, such as if you have been a customer of ours. (Note that this is different from your right to “opt out” of us selling your personal information, which is described below; also note that we do not generally collect personal information directly from consumers.) However, we may retain personal information for certain important purposes, such as (a) to protect our business, systems, and users from fraudulent activity, (b) to address technical issues that impair existing functionality (such as de-bugging purposes), (c) as necessary for us, or others, to exercise their free speech or other rights, (d) to comply with law enforcement requests pursuant to lawful process, (e) for scientific or historical research, (f) for our own internal purposes reasonably related to your relationship with us, or to comply with legal obligations. Additionally, we need certain types of information so that we can provide our Services to you. If you ask us to delete it, you may no longer be able to access or use our Services.
c. Right to “opt-out” of the sale or “sharing” of your personal information.
California residents may opt out of the “sale” of their personal information. California law broadly defines what constitutes a “sale” – including making available a wide variety of information in exchange for “valuable consideration.”
Depending what information we have about you, and whether we have included any of it in our marketing products and services, we may have sold (as defined by California law) certain categories of information about you in the last 12 months, as described in the above table in Section 2 of this Addendum.
If you would like to opt out, you may do so as outlined on the following page: Your Privacy Choices.
You may also opt out of “sharing” as it is defined in the CPRA, also known as “targeted” or “personalized” advertising, by viewing the opt-out methods in Section 4 in our main Privacy Policy, above.
d. How to exercise your access, correction and (if applicable) deletion rights
California residents may exercise their California privacy rights by sending an email to privacy@upcell.io and by submitting your request to Your Privacy Choices. You may submit a right to access request by contacting our toll-free number at (855)-525-7940; however, we recommend that you access Your Privacy Choices, as you may find it to be more efficient, and as we have tried to provide clear and comprehensive information on that page.
For security purposes (and as required under California law), we will verify your identity – in part by requesting certain information from you — when you request to exercise certain California privacy rights. For instance, if you request specific pieces of personal information we have received about you, you may need to confirm your possession of an identifier (such as your possession of an email address or your residence at a home address in order to confirm you are the person you claim to be.
Once we have verified your identity, we will respond to your request as appropriate:
Where you have requested the categories of personal information that we have collected about you, we will provide a list of those categories.
Where you have requested specific pieces of personal information, we will provide the information you have requested, to the extent required under the CCPA and provided we do not believe there is an overriding privacy or security concern to doing so.
Where you have requested that we delete personal information that we have collected from you, we will seek to confirm whether your request is for an “opt out” or a “deletion”: because “opt out” or “do not sell” rights enable us to maintain your information for “suppression” purposes – i.e., to prevent us from selling information about you in the future (which is what many consumers requesting “deletion” actually desire to occur) — we try to explain this in order to ensure we are meeting consumers’ preferences. (In addition, “deletion” rights only apply to information that we have collected “from” consumers – which does not apply to much of the information in our databases.)
Upon completion of the above process, we will send you a notice that explains the categories of personal information we were able to locate about you, whether we (1) deleted, (2) deidentified, or (3) retained the information we collected from you. Certain information may be exempt from such requests under applicable law.
If we are unable to complete your requests fully for any of the reasons above, we will provide you additional information about the reasons that we could not comply with your request.
e. Right to nondiscrimination.
We will not deny, charge different prices for, or provide a different level of quality of goods or services if you choose to exercise these rights.
f. Information about persons under 16 years of age
We do not knowingly collect personal information from minors under 16 years of age in California unless we have received legal consent to do so. If we learn that personal information from such California residents has been collected, we will take reasonable steps to remove their information from our database (or to obtain legally required consent).
g. Authorized agents
You may designate an agent to make requests to exercise your rights under the CCPA as described above. When we receive such a request, we may (as appropriate) take steps both to verify the identity of the person seeking to exercise their rights as listed above, and to verify that your agent has been authorized to make a request on your behalf through providing us with a signed written authorization or a copy of a power of attorney.
h. Data retention
We retain personal information in our commercial database for as long as it is useful or being used to provide services, such as to assist our clients in selecting offers or advertisements, or correcting and validating their own customer information.
Delete Act Information
We intend to list our consumer request statistics pursuant to California Delete Act upon the completion of this calendar year 2025. Please check back if you are interested in those figures.