Privacy Policy

1. Scope and controller

UPLY is operated by Oliver Enoc Castro Rodriguez, an individual business based in Iowa, United States. UPLY operates the platform infrastructure. Each creator administers their academy and may have separate responsibilities for course content, students, communications, and sales.

2. Information we process

• Account data: name, email, access codes, sessions, and academy relationship.
• Academy data: branding, courses, files, prices, permissions, and settings.
• Learning data: enrollment, progress, playback, challenges, comments, and community activity.
• Commerce data: offer, amount, currency, billing type, order and subscription state, Stripe identifiers, and checkout source. UPLY does not store full card numbers.
• Legal evidence: policy versions, consent choices, offer and price snapshot, time, country and age self-attestation, and protected hashes of network/device signals used for security and proof of acceptance.

3. Uses and legal purposes

We use data to authenticate users, provide requested platform services, activate verified purchases, maintain progress and community features, process transactions, deliver operational messages, prevent fraud, document consent, comply with law, resolve disputes, and improve reliability.

4. Providers

UPLY uses Cloudflare for infrastructure and storage, Stripe for payments, Resend for transactional email, Google/YouTube when a creator connects a channel, and OpenAI only for creator-requested AI features. Providers receive only data needed for their services. UPLY does not sell personal data. Stripe processes payment data under its Privacy Policy.

5. Google and YouTube data

With creator authorization, UPLY requests read-only access to channel, playlist, and video metadata to build an editable private course draft. UPLY cannot modify, publish, or delete YouTube content, does not use Google data for advertising or model training, encrypts stored tokens, and lets creators disconnect and revoke access.

6. Retention and security

We retain account and academy data while active and retain transaction, consent, security, tax, and dispute records as reasonably required by law and legitimate operations. We use academy isolation, server-side permissions, credential encryption, protected hashes, audit logs, and reasonable safeguards. No online service can guarantee absolute security.

7. Rights and choices

You may request access, correction, or deletion, unsubscribe from optional messages, cancel future membership renewals, or disconnect providers. Some requests belong to the creator and others to UPLY. Required transaction, consent, security, and legal records may be retained.

8. Age, location, and changes

The initial commercial beta is for adults age 18 or older in the United States. UPLY does not knowingly offer this beta to children. Material changes will be published with a new policy version and may require renewed consent.

9. Contact

Email soporte@uplylearn.com and identify the relevant academy. Do not send passwords, access codes, or full card information.