Privacy Policy

This Privacy Policy describes how Upstreamed, Inc. (”Upstreamed”, “we”, “our”, or “us”) collects, uses, stores, shares, and protects your personal data when you access or use our websites, services, and applications (”Services”).

By using our Services, you consent to the practices described in this Policy.

1. Information We Collect

We collect the following types of data:

a. Information You Provide

• Name, email address, and optional phone number
• Professional credentials (e.g., NPI, license, academic affiliation)
• Payment and subscription data via Stripe
• Posts, articles, peer reviews, comments, and uploaded files
• Customer support inquiries and survey responses

b. Information We Automatically Collect

• IP address, device type, browser, OS
• Referral URLs and time zone
• Site behavior and usage analytics
• Cookies and similar technologies

c. Third-Party Sources

• Credential verification providers
• Stripe (for payments/payouts)

2. Legal Bases for Processing (GDPR)

We process your personal data based on:

• Contractual necessity (e.g., to provide Services)
• Consent (e.g., marketing emails, cookie preferences)
• Legitimate interest (e.g., fraud prevention, product optimization)
• Legal obligation (e.g., tax records)

3. How We Use Your Information

We use your data to:

• Provide, personalize, and maintain the Services
• Verify your identity and professional credentials
• Manage subscriptions, payments, and payouts
• Promote content (if opted in via Boost)
• Improve platform features and analytics
• Send service-related communications (e.g., updates, alerts)
• Send marketing messages (only if consented)
• Comply with laws and enforce terms

4. How We Share Your Information

We do not sell your personal data.

We share data only with:

• Service providers (e.g., Stripe, verification partners, analytics tools)
• Legal authorities, when required by law
• Other users, only when you publish content or engage in collaboration

You control whether your profile is public or private, and whether content is published under your name or anonymously (if available to your account type).

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, maintain platform security, and improve our services. These include essential cookies, which are required for core functions such as logging in and protecting user accounts; functional cookies, which remember your preferences and form inputs to streamline your workflow; analytics cookies, which help us understand how users interact with the platform so we can improve performance and usability; and marketing cookies, which are used to promote relevant content or features, but only with your consent.

6. Cookie Preferences & Consent

We honor Do Not Track and Global Privacy Control (GPC) signals.

7. Do Not Sell or Share My Personal Information (CPRA)

California residents may opt out of the sale or sharing of personal information:

• We do not sell personal data.
• We do not share personal data for cross-context behavioral advertising unless you opt in.

8. Your Rights

Under GDPR (EU Residents):

You have the right to:

• Access your data
• Correct inaccuracies
• Request deletion (“right to be forgotten”)
• Object to processing or restrict use
• Request data portability
• Withdraw consent at any time

Under CCPA/CPRA (California Residents):

You have the right to:

• Know what personal data is collected
• Access and delete your data
• Opt out of sale or sharing
• Non-discrimination for exercising these rights

To exercise any of the above, contact: [email protected]

9. Communications and Marketing

By creating an account, you agree to receive essential service-related emails. You may also opt in to receive platform updates, announcements, and occasional promotions. You can unsubscribe at any time via the link in our emails or by updating your notification settings.

If you provide your phone number, you may receive account alerts via SMS. Message rates may apply. You can opt out of non-essential texts at any time by replying STOP.

10. Data Retention

We retain your data only for as long as necessary to fulfill our purposes and comply with legal obligations. Some data (e.g., transaction history, peer review logs) may be retained even after account deletion for compliance, fraud prevention, or regulatory audits.

11. International Transfers

Your data may be stored or processed in the United States or other countries where we or our service providers operate. We use appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) where applicable.

12. Children’s Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Security

We implement industry-standard technical and organizational measures to protect your data, including encryption, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure.

14. Changes to the Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or platform banners. Continued use after the effective date constitutes acceptance.

15. Contact Us

For privacy-related inquiries or to exercise your rights, contact:

Upstreamed Inc.

Email [email protected]. We typically respond within 48 hours.