Last Updated: September 15, 2026
For MY UPP account and data deletion, see Request account deletion below. For connections from AI assistants, see UPP Support MCP and AI assistant connections.
At UPP App ("UPP", "we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, services, and applications (collectively, the "Services"). Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.
We may collect information about you in various ways, including:
We may collect personal information that you voluntarily provide to us when you register for an account, express an interest in obtaining information about us or our Services, or otherwise contact us. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:
When you access or use our Services, we may automatically collect certain information about your device and usage, including:
We may use the information we collect about you for various purposes, including to:
We may share your information in the following circumstances:
You have certain choices regarding the information we collect and how it's used:
To request deletion of your MY UPP account and associated personal data, email [email protected] from your account email address with the subject “MY UPP account deletion request”. You can make this request without installing or signing in to the app. Do not include passwords, Social Security numbers or bank details in your email.
In the app, open You → Security & privacy → Start a privacy request, choose Data & privacy, and request account deletion. Your support team tracks these requests and reviews records that must be retained for payroll or contractual obligations.
Account closure and deletion requests are reviewed for ownership and applicable retention requirements. Payroll, tax, employment, contractual, security and fraud prevention records may need to be retained where required by law or legitimate obligations. The privacy team can explain which records can be deleted and which retention requirements apply to your request.
This section covers the public-help tools of UPP Support, connected to an AI assistant through the Model Context Protocol (MCP). These tools search public help, answer workflow questions, return navigation links, and create a support ticket when you request human help. They do not read your private production, payroll, banking, tax, or employment records. A guest connection does not sign you in to a UPP customer account.
Your AI assistant sends UPP the fields needed for the tool you use: a help question or search query, optional module or user persona, an article identifier, or a page name. We do not request your full conversation history. To create a support ticket, we receive your contact email, optional name, subject, and message. Creating a ticket notifies UPP Support and sends a confirmation to the supplied email address. Do not include Social Security numbers, payment-card or bank details, passwords, authentication codes, health information, tax forms, or signed contracts in tool requests or support messages.
We process tool inputs to provide the requested help and use infrastructure, search, AI-processing, and email service providers to deliver these functions. UPP support staff can access submitted support requests. Your connected AI provider receives the tool results, such as help articles, answers, public links, or a ticket reference, and handles them under its own privacy policy. UPP attempts to remove common sensitive identifiers from free-text queries before AI processing and help-query analytics; this is not a guarantee that every sensitive value will be detected.
Search and generated-answer tools record help-query analytics to identify gaps in our documentation. These records include the scrubbed query, module or category, event time, and connected application's OAuth client identifier. We also process network addresses, OAuth connection records, and rate-limit counters for access control, abuse prevention, and service operation. Tool responses exclude authentication secrets and internal AI-provider diagnostics.
Guest OAuth authorization codes expire after 5 minutes, access tokens after 1 hour, and refresh tokens after 30 days; successful refresh issues a replacement token. Registered OAuth client records have a 180-day lifetime. These credential expiry periods do not delete support tickets or help-query analytics. Those records have no automatic time-based deletion period in the current service and remain until removed under an approved privacy request or an applicable retention process. Disconnecting the plugin does not delete previously submitted information.
You can stop sending new information by disconnecting UPP Support in your AI provider's connection settings. To request access, correction, deletion, or review of retained support information, contact [email protected]. We review ownership and applicable retention obligations before acting. Do not send passwords, access tokens, or sensitive documents with your request.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk.
Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete that information as quickly as possible.
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date, and the updated version will be effective as soon as it is accessible.
If you have questions or concerns about this Privacy Policy, please contact us at:
Email: [email protected]
Address: 2131 Jarrod Ct, Simi Valley, CA 93063