Privacy Policy

Last updated October 9, 2026

This policy explains what UpsiderPro collects, why, and what you can ask us to do with it. UpsiderPro is operated by Federico Ciccarese, Via Vallere 72/6, 27029 Vigevano (PV), Italy (“we”), who is the data controller.

What we collect

• Profit scan: your name, email, company name and the fleet numbers you enter (boats, rates, occupancy and similar), plus the result we calculate.
• Your account: email, subscription status, and the fleet data you enter in the app.
• Payments: handled by Stripe. We never see or store your card number. We receive your email, plan and subscription status.
• Visit data: our own measurement of how people move through our pages, from where you arrived (the link, campaign or site you came from) to scan, checkout and sign-in. It uses a random visitor ID stored in a cookie. It holds no name, email or IP address, and we do not use it to identify you.
• Technical data: basic server logs (IP address, browser, time) kept by our hosting provider for security and troubleshooting.

Why we use it

• To run the scan and the app, and to sign you in (contract).
• To send one reminder email about your scan result about a week after you run it, only if you ticked the reminder box on the scan, which is unticked by default (consent). The email has an unsubscribe link, and we stop immediately when you use it.
• To send service emails: sign-in links, welcome, billing and account notices (contract).
• To understand which of our emails and pages lead people to the scan and to a subscription, so we can improve them (legitimate interest). We do not measure visitors from the EU, EEA, UK or Switzerland, and we respect Global Privacy Control and Do Not Track.
• To keep the service secure and fix problems (legitimate interest).

We do not sell your data and we do not use it for advertising. We use no advertising trackers and no third-party analytics: visit measurement is our own and stays on our servers.

Who processes it for us

• Supabase (database and sign-in), Cloudflare (hosting and email forwarding), Resend (sending email), Stripe (payments), Anthropic (AI).
• Google Fonts serves the typeface, so your browser contacts Google when a page loads.

These providers may process data in the United States and other countries. Where required, transfers rely on the providers’ standard contractual clauses or equivalent safeguards.

AI-generated levers

When you ask the app to generate new levers, we send a summary of your fleet, bookings and guest statistics to Anthropic’s API so its model can write them. Guest names are not sent. Anthropic does not use API data to train its models by default. You can choose not to use this feature, and the rest of the app works without it.

Cookies

Essential cookies keep you signed in. Our own measurement cookies (up_vid for 1 year, up_ft for 90 days, up_lt for 30 days, up_s for 30 minutes) store a random visitor ID and where you first arrived from. They are first-party, never shared with advertisers, and are not set if your browser sends Global Privacy Control or Do Not Track.

How long we keep it

Scan data: up to 24 months. Account and fleet data: while your subscription is active and for 12 months after, unless you ask us to delete it sooner. Billing records: as long as tax law requires.

Your rights

You can ask us to access, correct, export or delete your data, to restrict or object to its use, or to withdraw consent at any time. If you are in the EU/UK you also have the right to complain to your data protection authority; California residents have the equivalent rights under the CCPA, and we do not sell or share personal information. Write to hello@upsiderpro.com and we will reply within 30 days.

Changes

If we change this policy in a material way we will update the date above and, for customers, tell you by email.

UpsiderPro is operated by Federico Ciccarese, Via Vallere 72/6, 27029 Vigevano (PV), Italy. Contact: hello@upsiderpro.com