Skip to content
Legal

Privacy Policy

This Privacy Policy explains how GIANT NERD AUTOMATION LTD ("we", "us", or "our") collects, uses, stores, shares, and deletes personal data, and how we access and transiently process Google user data when you use Upsearch (the "Service").

Last updated: 31st March 2026

1. Who We Are

Company name: GIANT NERD AUTOMATION LTD

Address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE

Jurisdiction: United Kingdom

Contact: info@upsearch.ai

Upsearch is a paid, web-based service that helps customers research, monitor, and analyze visibility across AI-powered search and answer engines.

2. What This Policy Covers

This policy applies to information we collect through the Upsearch website, the Upsearch web application, customer support interactions, billing, and any Google account or Google Workspace connection that you explicitly authorize.

When we request Google permissions, the exact scope and reason for the request are shown on the Google OAuth consent screen and in the in-product disclosure presented at the time you connect your account.

3. Information We Collect

3.1 Account and Contact Information

  • Name, email address, and account credentials
  • Company name, website, and account preferences you provide
  • Support requests, onboarding details, and other information you voluntarily submit

3.2 Google Account Sign-In Data

If you sign in with Google, we may receive:

  • Your name
  • Your email address
  • Your Google profile image, if available
  • A persistent Google account identifier needed to link your login to your Upsearch account

3.3 Google User Data From Connected Google Services

If you connect a Google account and approve a sensitive or restricted Google API scope, we may access the category of Google user data identified to you on the consent screen for the feature you enable. Depending on that feature, the requested data may include:

  • Gmail message metadata or message content
  • Google Drive file metadata or file content
  • Google Calendar event metadata or event content
  • Other Google Workspace data expressly described to you before you grant access

We request only the Google scopes reasonably necessary for the feature you choose to use, and we do not request access to Google user data that is unrelated to that feature.

Except for the Google sign-in and account-linking data described in Section 3.2, Upsearch accesses Google user data from connected Google services on a just-in-time basis solely to retrieve, render, and display that data back to the authorized user. We do not persistently store, archive, or maintain backup copies of that Google user data on Upsearch systems.

3.4 Operational, Billing, and Device Data

  • Session and authentication cookies
  • Usage and product analytics data, such as page views and interaction events
  • Device, browser, IP address, and log data needed to secure and operate the Service
  • Billing and subscription records processed through our payment providers

4. How We Use Information

We use information only for the purposes described below:

  • Account data: to create, authenticate, maintain, and support your Upsearch account
  • Google sign-in data: to let you log in, identify your account, and manage Google-connected access
  • Google user data from approved scopes: to access, transiently process, and display the specific Google data that you asked us to show you during your active session
  • Operational and security data: to protect the Service, detect abuse, troubleshoot issues, and improve reliability
  • Billing data: to process subscriptions, invoices, and payment-related support
  • Legal and compliance data: to comply with law, enforce our terms, and protect our rights

5. Google API Services and Limited Use

Upsearch's use of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

  • We use Google user data only to provide the user-facing feature that you explicitly request
  • Except for Google sign-in and account-linking data, we access Google user data on a non-persistent basis and do not store a lasting copy of that data on Upsearch servers
  • We do not sell Google user data
  • We do not use Google user data for advertising, remarketing, or unrelated profiling
  • We do not use Google user data to train generalized artificial intelligence or machine learning models
  • We provide an in-product disclosure and request consent at the time a Google-connected feature asks for access
  • If we need broader Google permissions or want to use Google user data for a materially different purpose, we will update this policy and obtain any additional consent required before that new use begins

6. Sharing and Disclosure

We share personal data only when needed to operate the Service, comply with law, or protect the Service.

6.1 Service Providers

  • Authentication, database, and hosting providers to run the Service and secure accounts
  • Stripe to process payments and subscriptions
  • Analytics providers to measure product performance using operational usage data and never to receive Google user data from connected Google services
  • Technical service providers may handle transient network transmission or in-memory processing only to the extent technically necessary to render the requested Google-connected feature, and only under contractual restrictions on use, confidentiality, and security

6.2 Google User Data Sharing Limits

  • We do not disclose Google user data to data brokers, advertisers, or other third parties for their own independent use
  • Any recipient of Google user data may access it only to help us provide or secure the feature you requested, or where the law requires disclosure
  • We do not permit third parties to use Google user data for advertising, resale, or unrelated secondary purposes

6.3 Legal Requirements

We may disclose information if required by law, regulation, legal process, or a valid governmental request, or if necessary to investigate fraud, security issues, or abuse of the Service.

7. Storage, Security, and Retention

  • We store account and authentication data using managed infrastructure such as Supabase Auth and related cloud systems
  • We use security measures appropriate to the sensitivity of the data, including encryption in transit, access controls, least-privilege access, and monitoring
  • We retain personal data, including Google sign-in and account-linking data, only for as long as needed to provide the Service, maintain your account, meet legal obligations, resolve disputes, or enforce our agreements
  • Except for Google sign-in and account-linking data, we do not retain Google user data from connected Google services in Upsearch databases or backups. That data is processed transiently in secure transport channels and volatile memory solely to fulfill your immediate request and is discarded after the requested display is completed
  • Because we do not persistently store Google user data from connected Google services, there is ordinarily no stored Google service content for us to delete after your session ends; revoking access instead prevents future retrieval

8. Your Choices and Rights

Depending on your location and the product feature you use, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete personal data
  • Request deletion of your account data, including stored Google sign-in data associated with your account
  • Withdraw consent for Google-connected features by disconnecting the integration or revoking access from your Google account settings
  • Object to or restrict certain processing where applicable law provides that right
  • Receive a copy of certain personal data in a portable format where applicable law provides that right

You can also request deletion by emailing info@upsearch.ai with the email address associated with your account. Because Google user data from connected Google services is not ordinarily stored by Upsearch, deletion requests for that data are generally satisfied by revoking access and ending future retrieval.

9. Cookies and Analytics

We use cookies and similar technologies for authentication, session management, security, and product analytics. We do not use Google user data or Google API data for advertising cookies or marketing campaigns.

10. Changes to This Policy and Renewed Consent

We may update this Privacy Policy from time to time. If we make a material change to how we access, use, store, or share Google user data, we will update this page and provide any additional notice or renewed consent required before the new processing takes effect.

11. Contact

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact info@upsearch.ai .