Privacy Policy
Effective Date: March 20, 2026 | Last Updated: March 2026
Your privacy matters to us. This policy explains, in plain language, what information we collect when you visit our website or work with us, why we collect it, how we keep it safe, and the choices and rights you have.
1. Introduction & Scope
Upstair Tech Solutions Inc. (“Upstair,” “we,” “us,” or “our”) operates this corporate website and delivers technology engineering, AI development, mobile and web application consulting, and cloud infrastructure services. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable international privacy frameworks.
2. Information We Collect
We collect information that you voluntarily provide to us when interacting with our services:
- Contact & Inquiry Data: Name, work email address, telephone number, company name, project details, and budget parameters submitted via our contact and proposal forms.
- Client Collaboration Data: Architectural specifications, code repositories, schema files, and business logic shared under formal Non-Disclosure Agreements (NDAs).
- Automated Device & Usage Information: IP addresses, browser types, operating systems, referring URLs, and engagement duration gathered via secure server logs.
3. How We Use and Protect Your Information
We strictly utilize your data for legitimate business interests, including:
- Analyzing and scoping your software engineering and consulting proposals.
- Delivering contractually agreed IT, mobile app, cloud, and AI engineering services.
- Ensuring enterprise platform security, preventing fraudulent activity, and complying with legal obligations.
Zero Model Training Notice: We do NOT train public machine learning or large language models on client-provided proprietary source code, intellectual property, or confidential datasets without explicit written consent.
4. Data Retention & Security Architecture
We implement enterprise-grade technical and organizational security controls, including AES-256 encryption at rest, TLS 1.3 transit encryption, zero-trust network access controls, and periodic vulnerability penetration testing. Client project data is retained only for the duration required to execute contractual obligations or satisfy regulatory audit mandates.
5. Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction, you hold legal rights regarding your personal information:
- The right to access, rectify, or delete your stored personal data.
- The right to restrict or object to automated data processing.
- The right to data portability in a structured, machine-readable format.
- The right to opt out of marketing communications at any time.
6. Data Protection Officer & Contact Information
If you have any questions, inquiries, or requests regarding this Privacy Policy or our security practices, please contact our Data Protection Officer at: