1. Scope and operator
UpYonder LLC (“UpYonder,” “we,” “us,” or “our”) operates UpYonder, an independent brand providing real-time locations for businesses on the move. This Privacy Policy applies to our public website, Business Portal, UpYonder Business mobile app, and related support and invitation services (collectively, the “Service”).
This policy covers information about visitors, business account owners and managers, location operators, invitees, and people who contact us. A business administrator may provide information about its workers or invitees; the administrator is responsible for having authority to do so.
2. Information we process
Information you or a business administrator provides
- Account and authentication information: email address, password handled by our authentication provider, account identifiers, confirmation and recovery activity, and session information.
- Profile information: full name and an optional avatar.
- Business information: business and listing names, descriptions, categories, phone numbers, websites and social links, base city, region and postal code, timezone, hours, logos, cover images, and other listing content.
- Team information: account memberships, roles, listing assignments, invitee email and optional name, inviter, invitation status, and acceptance or revocation activity.
- Subscription information: plan, status, start and access-end dates, capacity limits, and current usage. Online payment collection is not currently part of the Service.
- Communications: information you include when asking for support, reporting a listing, or making a privacy or data request. Please do not send passwords, authentication codes, invitation links, or device credentials.
Information collected automatically or from a device
- Sessions and technical records: authentication cookies or mobile session records needed to keep you signed in and protect access. Our infrastructure providers may also create ordinary service, security, and diagnostic logs. The precise log fields and retention can vary by provider and operational need.
- Registered-device information: a device name derived from manufacturer and model information, iOS or Android platform, user and account association, registration, last-active and revocation timestamps, and a server-side hash of an installation credential.
- Current business location: foreground latitude and longitude collected only after an authorized mobile user explicitly confirms Post Up, as described below.
- Preferences: theme and selected business or account preferences stored locally to restore your experience.
The raw installation credential is generated and kept in secure device storage. It is transmitted to trusted Service operations to authenticate device actions, but the server stores a hash rather than the raw credential.
3. Location information
Post Up and LIVE location
The mobile app requests foreground location permission when an authorized user chooses to Post Up and permission is needed. It then requests a high-accuracy current fix. The app rejects simulated, invalid, or stale location results and rounds accepted coordinates to six decimal places before submission.
Once Post Up succeeds, the current latitude, longitude, posting time, and any optional location name or address fields become publicly visible for that published listing. UpYonder does not use background location, continuous location tracking, or a location-history table. The active record represents current LIVE state, not a trail of prior positions.
Roll Out removes the current LIVE record. Current LIVE state is also removed by implemented events such as unpublishing or archiving the listing, qualifying device replacement or revocation, loss of relevant access, subscription expiration, or account suspension or closure.
Public visitor “near me” location
When a public visitor chooses the “near me” feature and grants browser permission, the visitor's latitude and longitude are used to calculate distance from listings. The UpYonder search procedure uses those coordinates for the request and does not store them. Browser or infrastructure providers may handle technical data under their own practices.
4. Public listing information
Business administrators decide whether to publish a listing. Published listing content may include the business name, slug, description, category, images, phone, websites and social links, base location, hours, timezone, current LIVE status and location, and posting time. This information can be viewed without signing in and may be shared or indexed by others.
Draft, unpublished, archived, or otherwise ineligible listings are excluded from UpYonder's public listing results. Internal account, subscription, member, invitation, actor, and device identifiers are not part of the public listing projection.
5. How we use information
- Provide, operate, maintain, authenticate, and secure the Service.
- Create and manage accounts, listings, hours, images, memberships, roles, assignments, invitations, and registered devices.
- Publish eligible business content and current LIVE locations and provide external directions.
- Apply account and subscription status, capacity, and access limits.
- Process password recovery and other account-access requests.
- Provide support, investigate reports, communicate about the Service, and respond to privacy or legal requests.
- Detect, investigate, and prevent fraud, abuse, unauthorized access, simulated-location misuse, and other security threats.
- Debug, maintain, evaluate, and improve reliability, accessibility, usability, and safety.
- Comply with law, enforce agreements, resolve disputes, and protect UpYonder, businesses, users, and the public.
8. Retention
We retain information for as long as reasonably needed to provide and secure the Service, administer accounts and business relationships, resolve disputes, enforce agreements, prevent fraud and abuse, meet legal or recordkeeping obligations, and preserve records that cannot safely or lawfully be deleted. Retention therefore varies by the information and context.
Active LIVE rows represent current state and are removed by Roll Out and other implemented lifecycle events described above. Closed-account information, invitation records, subscription records, and revoked-device history may be retained for legitimate operational, security, dispute, or legal purposes. Closing an account does not currently cause automatic deletion of every related record.
9. Your choices and requests
Depending on your role and authority, the Service allows you to:
- Edit business profiles, listings, contact details, hours, images, and account-timezone information.
- Unpublish or archive listings and Roll Out a current LIVE location.
- Manage memberships, invitations, assignments, and registered-device access where authorized.
- Revoke mobile foreground-location permission through device settings. Doing so prevents new Post Up location collection until permission is granted again.
- Request access, correction, export, or deletion by emailing support@onupyonder.com or using our Contact & Support page.
We may need to verify your identity, account relationship, and authority before acting. Requests may be limited where necessary for security, legal or contractual obligations, fraud prevention, dispute resolution, recordkeeping, another person's rights, or technical deletion feasibility. UpYonder does not currently offer a self-service tool that automatically deletes every account or record.
10. Security
We use safeguards designed to protect information, including role- and assignment-based access controls, database row-level security, limited data grants, server-side authorization checks, hashed invitation and installation credentials, protected mobile credential storage, encrypted invitation and account-selection cookies, location validation, and secure session handling.
No system, transmission, or storage method is completely secure. You are responsible for protecting your password, email account, invitation links, devices, and access to authenticated sessions.
11. Processing locations
UpYonder and its providers may process information in the United States and other locations where they operate or maintain infrastructure. Those locations may have data-protection rules different from those where you live. We use providers and safeguards appropriate to the Service and applicable requirements, without representing that all processing occurs in a single country.
12. Adults only
Authenticated UpYonder accounts are for people who are at least 18 years old and authorized to act for a business. The Service is not directed to children, and we do not knowingly offer accounts to anyone under 18. If you believe a person under 18 has provided account information, contact us so we can review the situation.
13. Third-party services and links
UpYonder may link to business websites, social profiles, Google Maps, app stores, and other external services. Their privacy practices and content are governed by their own terms and policies. Following an external link may disclose technical or location-related information directly to that third party under its practices.
14. Changes to this policy
We may update this Privacy Policy as the Service, our practices, or legal requirements change. We will post the updated policy with a new effective date and provide additional notice when reasonably appropriate for a material change. Your continued use after an updated policy takes effect is subject to applicable law.
15. Contact us
For privacy questions or requests, contact UpYonder LLC at support@onupyonder.com. You can also review support options on our Contact & Support page.