Privacy policy

Who we are

Upvale is operated by KOD DIVAJN DOO Skopje, trading as Code Divine. We are responsible for personal data used to run our website, manage accounts, and communicate with you.

This policy covers the public website and the Upvale dashboard. It does not replace the privacy policy you provide to users of your own applications.

Information we handle

• Website visits: our hosting and security providers may process your IP address, browser information, requested pages, and request times to deliver and protect the website.
• Account details: your name, email address, password hash, account preferences, organization memberships, and authentication records. If you enable two-factor authentication, we also store the information needed to support it.
• Service data: server addresses, cluster and project settings, deployment configuration, credentials you provide, logs, metrics, alerts, and audit records. Logs and configuration may contain personal data depending on what you deploy.
• Messages: information you send us by email or through a working support channel.

Information can come from you, administrators who invite you to an organization, or the servers and services you connect. The website’s package signup and contact forms are currently placeholders; they do not submit information or collect payments.

How and why we use it

We use account and service information to provide Upvale: authenticate users, manage deployments, run requested operations, send account emails, and provide support. The legal basis is performing our agreement with you or taking steps you request before entering an agreement.

We use security and operational records to prevent abuse, investigate incidents, and keep the service working. Our legitimate interests are protecting accounts, customer systems, and the service. We may also retain information to meet legal obligations or handle legal claims.

Where a use requires consent, we will ask for it separately. You can withdraw that consent without affecting earlier processing. We do not sell personal data or use it for targeted advertising.

You need to provide the account and connection information required to use the relevant features. If you do not provide it, we may be unable to create your account or manage the services you request.

Your applications and databases

Your workloads run on the servers you connect, and database backups use the storage destination you configure. The Upvale control plane stores configuration and operational information and can process workload data when carrying out actions you request, such as viewing logs, opening a terminal, or managing backups.

You decide what personal data your applications collect and how it is used. Where we process that data only on your behalf, we act as a processor under your instructions. Contact us to arrange any data processing agreement required for your use of Upvale.

Cookies and browser storage

The website saves your light or dark theme preference in your browser’s local storage. The dashboard uses cookies for sign-in and request security. Hosting and security providers may also use cookies to protect the website against automated abuse.

We have not added advertising or analytics trackers to the website. You can clear cookies and local storage in your browser; clearing authentication cookies signs you out.

Who can receive information

We use providers for hosting, content delivery, security, and email delivery. They may process information needed to provide those services. The current public website is hosted through OpenAI Sites and delivered through Cloudflare. Your chosen server, storage, and registry providers also process data under their own terms.

People with access to your Upvale organization may see information according to their permissions. We may disclose information when legally required or when necessary to protect people, investigate abuse, or establish or defend legal claims.

Where information is processed

Code Divine is based in North Macedonia. Providers and the infrastructure you choose may process information in other countries. Where the law requires safeguards for an international transfer, those safeguards must be in place before the transfer. Contact us for details about the providers, locations, and transfer arrangements relevant to your use of Upvale.

How long we keep information

We keep account and configuration records while they are needed to provide the service. Operational logs, alerts, and audit records are retained according to the retention settings and operational needs that apply to them. Records required for active operations or recovery may need to be kept longer.

When information is no longer needed, we delete or anonymize it, subject to legal obligations and the need to resolve disputes or investigate incidents. Copies may remain in backups until those backups expire. Backups in your own storage are also subject to your retention settings and provider’s policies.

Security

Upvale uses access controls, password hashing, and encryption for stored service secrets. Security also depends on your account settings, permissions, servers, and providers. No system can guarantee complete protection against every threat.

Your rights

Depending on the law that applies, you may have rights to access, correct, delete, or obtain a copy of your personal data, restrict its use, or object to processing. You may also withdraw consent where processing relies on it. Contact us using the details above; we may need to verify your identity before responding.

If your request concerns data held by an application using Upvale, contact that application’s operator first. They decide how that data is used.

You may complain to the Personal Data Protection Agency of North Macedonia or another data protection authority competent to handle your complaint.

Changes to this policy

We will update this page when our data practices change. The date above shows the latest revision. Where required, we will also notify affected users of material changes.