Privacy Policy

This privacy policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as "Data") within our online offering. We take the protection of your personal data seriously and treat your data strictly confidentially in accordance with statutory data protection regulations (GDPR, BDSG).

Controller for data processing:

Aaron Zhang / Upstream AI
Gabelsbergerstraße 6
68766 Hockenheim, Germany
Email: aaron.zhang@upstreamai.de

We host our website with Netlify.

When you visit this website, our hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: IP address, browser type and version, operating system used, referrer URL, host name of the accessing computer, and time of the server request.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. The legal basis for this processing is Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free depiction and optimization of our website.

Unsplash Images (CDN)

We use Unsplash API/CDN to load visual assets. Loading these images establishes a connection to Unsplash servers, transmitting your IP address.

Legal basis: Art. 6(1)(f) GDPR.

Google Ads API

For business clients who explicitly authorize us, we access data from their Google Ads accounts via the Google Ads API with read-only access. This includes campaign performance data such as impressions, clicks, costs, conversions and conversion values.

We use this data exclusively to display performance reports to the respective client in our reporting dashboard. We do not sell this data, do not share it with third parties, do not use it for advertising, and do not use it for any purpose other than providing the reporting service to that client. We process this data on behalf of our client (Art. 28 GDPR). Access can be revoked by the client at any time in their Google Ads account settings.

Upstream AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Meta (Facebook / Instagram) APIs

For business clients who explicitly authorize us, we access performance data of their Facebook Pages, Instagram business accounts and Meta ad accounts via the Meta Graph API and Marketing API with read-only access. This data is used exclusively to display performance reports to the respective client and is not sold or shared with third parties. Processing takes place on behalf of the client (Art. 28 GDPR).

As a data subject, you have the right to request information about your stored personal data, its origin, its recipients, and the purpose of the data processing at any time free of charge. You also have a right to request the correction, blocking, restrictions, or deletion of this data.

You also have the right to lodge a complaint with the competent supervisory authority.