Privacy Policy

Last updated: 11 November 2026 · Khatib Designs Ltd

This policy explains what personal data Uprocket uses, why, and your rights. The controller is Khatib Designs Ltd, Sofia, Bulgaria. Contact: [email protected].

What we collect

  • Account: your email address and a securely hashed password.
  • Your content: the videos, photos, audio and text you upload or make in Uprocket, and the briefs you write (name, niche, audience, voice).
  • Public profile data: when you ask for a profile score, the public posts and numbers of that Instagram profile (likes, comments, captions, dates).
  • Free Instagram or TikTok analysis: the platform, @handle and email you enter on uprocket.app/analysis. We use the handle to read that account's latest public posts or videos and the email to send you the analysis, once, and nothing else unless you tick the tips box. We keep the request (handle, email, a scrambled form of your IP address for rate limits, and the ad or link that brought you) for 12 months to prevent abuse and to count which ads lead to sign-ups; the analysis itself is kept for 30 days and reused for 7, so a repeat request doesn't read the profile again. Ask us to delete it any time.
  • Affiliate program: if you apply, your name, email, social handle and platform, audience size, how you'd promote Uprocket, and your PayPal or Wise email, to review the application and pay you. If you're approved, we keep your clicks, the accounts you referred and your commission for as long as you're an affiliate and then as long as tax law requires. Affiliates see the customers they referred only as a masked email (for example ri***@g***.com).
  • Referral links: when you open uprocket.app through an affiliate's link, we count one click for that affiliate (no IP address or device details) and set the referral cookie described below. If you then create an account or pay, we note which affiliate referred you, so they can be paid their commission.
  • Results: the views, likes and other numbers of the posts Uprocket publishes, read through your Buffer account.
  • Billing: your plan, credits and payment history. Card details are handled by Stripe and never reach us.
  • Technical: IP address and basic request logs to keep the service secure and working.
  • Ad measurement: outside the EEA, the UK and Switzerland, the free-analysis and sign-up pages load Meta's pixel, so Meta can measure whether a visit, an analysis request or a sign-up came from our ads. It sends no email, name or other details you type, and we don't use it to build ad audiences. In the EEA, the UK and Switzerland it isn't loaded.

Why we use it

To provide Uprocket to you (contract), to bill you (contract and legal obligation), to run the affiliate program and pay affiliates (contract with the affiliate, and our legitimate interest in crediting the right one), and to keep the service secure and fix problems (legitimate interest). We do not sell your data, show you ads, or use your content to train AI models.

Who we share it with

Only the processors that make Uprocket work, each for that job only:

  • Cloudflare: network, security and delivery.
  • Stripe: payments and tax calculation.
  • Anthropic: AI writing, planning and analysis.
  • ElevenLabs: voiceovers, transcription and dubbing.
  • HeyGen: AI avatar video, if you use it.
  • Crawlbase, and Bright Data when Crawlbase can't: reading public Instagram profiles for profile scores. Only the Instagram username is sent to them.
  • Bright Data and ScrapeGraphAI: reading public TikTok profiles (the profile's numbers and its latest videos) for free TikTok analyses. Only the TikTok username is sent to them.
  • Resend: sending account emails and free analyses.
  • Google (Tag Manager and Analytics): counting visits to uprocket.app and which pages and searches bring them, and, inside the app, only whether a free analysis was requested, an account was created, a checkout was started and a plan was paid (with the plan and amount, never your name, email or handle); in the EEA, the UK and Switzerland without cookies, and never for remarketing.
  • Meta: measuring which ads bring visits and sign-ups, outside the EEA, the UK and Switzerland only.
  • Buffer: publishing and post results, through your own Buffer account.

Some of these process data outside the EU; where they do, they use the European Commission's standard contractual clauses or an equivalent safeguard.

How long we keep it

While your account is open. When you close it, we delete your content within 30 days, except billing records we must keep for tax law (up to 10 years in Bulgaria).

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing [email protected]. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or your local authority.

Cookies

Uprocket uses one essential cookie to keep you signed in. If you arrive through an affiliate's link, a functional cookie (upr_ref) remembers that affiliate's code and the time of the click for 30 days, so the affiliate is credited and you get their discount at checkout; it holds nothing else, isn't shared with anyone, and isn't used for advertising. You can delete it in your browser at any time. Outside the EEA, the UK and Switzerland, Google Analytics and Meta's pixel also set their own cookies, to count visits and to measure which ads bring them (see Google and Meta above). In the EEA, the UK and Switzerland they set none. Nothing is used for remarketing.