Data and security
We care about your privacy and are committed to protecting your data, so you can feel confident about using Upside.
What do we collect?
Upside only collects data to improve its marketplace experience.
We don't sell app users' personal information or retailers' transaction data.
We use your location to match you with nearby offers and transactions you made at participating retailers.
We collect much of the information that's already on your purchase receipts to help us personalize our offers and verify your purchases with participating retailers. Our third-party card processing partners collect your full card number (PAN) and help us verify your credit card details.
We use your email address as a unique identifier for your account, as well as to communicate with you about processing activity, status updates, promotions, and support.
Information like the total amount you spend allows us to provide you with cash back offers and personalize your offers in the future.
We work with participating retailers who share price and transaction data with us, which helps us match your claimed offers with your transactions.
Upside only collects data to improve its marketplace experience. We don't sell app users' personal information or retailers' transaction data.
Security measures at Upside
We regularly audit our app, conduct employee background checks, and assess third-party partners to ensure the confidentiality, integrity, and availability of our platform.
Upside takes these measures seriously and continuously strives to ensure the highest level of security and protection.
ISO/IEC27001
Certified through the international standard on managing information security. Upside has identified and implemented key controls to ensure confidentiality, integrity, and availability of data and process.
Cryptography
Upside requires all data to be encrypted at rest and in transit using AES-256 and TLS 1.2 minimums.
Access controls
At Upside, employees and contractors are granted access based on need-to-know and least privilege. Requiring multi-factor authentication. All account activity is logged, monitored and reviewed.
Emergency
Upside regularly tests our incident response, disaster recovery, and business continuity plans to help us continue to serve you, no matter the situation.
