Last updated: July 1, 2026

Who we are

UpperDeck (upperdeck.dev) is operated by Sim Capital LLC. UpperDeck is a subsidiary of Sim Capital LLC.

This Data policy explains how content you submit to UpperDeck is stored, processed, shared with subprocessors, and deleted. It complements our Privacy policy, which covers personal information more broadly, and our Terms of service.

You own your data

You retain full ownership of all files, text, and other content you upload or paste into UpperDeck("Your Content"). We claim no ownership over it. You grant us only the limited license needed to host, transmit, and process Your Content to deliver the features you use.

What we do with your data

Storage: uploads are stored in private object storage and a PostgreSQL database (Supabase on AWS) with row-level security. Files are never served from public URLs.
Processing: we extract text, generate embeddings for search, and — when you invoke AI features — send relevant portions of Your Content to AI subprocessors (such as OpenAI and Anthropic) to generate the response you requested. We send only what each request requires.
Security: traffic is encrypted in transit (TLS); data at rest inherits cloud-provider encryption. Provider API keys are kept server-side.

What we do not do with your data

We do not use Your Content to train our models or any third-party AI models
We do not sell Your Content or use it for advertising
We do not access Your Content for purposes beyond operating, securing, and maintaining the service
We do not share Your Content with third parties except the subprocessors needed to run the service

Your responsibilities for the data you submit

You alone decide what to upload. You are solely responsible for Your Content, including:

Having the legal right to upload, store, and process it through UpperDeck and our subprocessors
Complying with your client agreements, confidentiality obligations, professional duties, and applicable data protection laws
Identifying and redacting or excluding information you consider sensitive, confidential, regulated, or personal — before or after using the service

UpperDeck does not define what counts as sensitive on your behalf, and does not monitor, audit, or verify the sensitivity or legality of user-submitted content. To the maximum extent permitted by law, UpperDeck and Sim Capital LLC are not responsible or liable for sensitive data you choose to upload, share, or process through the platform, for how you or third parties use Your Content or AI-generated outputs, or for any disclosure, loss, or misuse of information you submit. Optional safeguards (such as organization-level PHI redaction) are assistive tools only and do not shift this responsibility to us.

Regulated data

Unless you have a separate written agreement with us that covers it (for example, an enterprise agreement with a Business Associate Agreement for HIPAA-regulated data), you must not upload data whose processing legally requires such an agreement. Contact us about enterprise plans if you need contractual coverage for regulated data.

Subprocessors

Core subprocessors used to deliver the service:

Supabase / AWS — database, authentication, and file storage
OpenAI and Anthropic — AI processing when you use AI features
Stripe — payment processing (card details never touch our servers)
Vercel — application hosting and analytics

Subprocessors process data under their own terms and enterprise API policies. We configure our integrations for service delivery, not for training on your content.

Retention & deletion

We retain Your Content only while your account is active. You can delete individual files and projects at any time from within the product. When you delete your account, we permanently erase your profile, projects, files, chat history, and related metadata. We do not keep copies for recovery or marketing. Stripe may retain minimal transaction records under its own policies and applicable law.

Data export

You may request an export of your data by contacting support@upperdeck.dev.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy: support@upperdeck.dev. Sim Capital LLC operates UpperDeck at upperdeck.dev.

Data policy