Last updated: June 28, 2026

Overview

Sim Capital LLC operates UpperDeck (upperdeck.dev) and is responsible for the processing described in this policy. UpperDeck is a subsidiary of Sim Capital LLC.

This policy describes what information we collect, how we use it, and the choices you have when you use UpperDeck. For how uploaded project content is stored, processed, and deleted, see our Data policy. Usage rules are in our Acceptable use policy.

Information we collect

Account information: email address, name, and authentication credentials you provide when signing up.
Project content: files, text, and metadata you upload or paste into projects, including meeting notes, emails, decks, and transcripts.
Usage data: basic logs such as feature usage, errors, and performance metrics to operate and improve the service.
Billing data: subscription status and Stripe customer identifiers. Payment card details are processed by Stripe, not stored on our servers.

How we use information

We use your information solely to:

Provide, secure, and maintain the UpperDeck service
Process files and generate AI-assisted briefs, search, and chat responses you request
Authenticate users and enforce access controls
Process subscriptions and communicate about your account
Comply with legal obligations

We do not use your project content for advertising, unrelated product development, or to train machine learning or AI models. Your content remains yours.

Your data & model training

You retain ownership of the files, text, and other content you submit to UpperDeck. We do not claim ownership over your project content. We process it only to deliver the features you use.

We do not use your project content to train our own models or third-party foundation models. We do not sell your project content. We do not access your content for our own independent business purposes beyond operating, securing, and maintaining the service.

AI processing

When you use AI-powered features, relevant portions of your project content may be sent to third-party AI providers (such as OpenAI and Anthropic) to generate responses. We send only what is required for each request. These providers process data under their own terms and enterprise API policies; we configure our integrations for service delivery, not model training on your content.

Do not upload information you are not permitted to share with subprocessors under your client agreements or applicable law.

Sensitive information

You alone decide what information is sensitive, confidential, regulated, or personal. UpperDeck does not define sensitivity on your behalf. You are solely responsible for reviewing your content and redacting or excluding anything you consider sensitive before or after using the service.

Optional safeguards (such as organization-level PHI redaction) are assistive tools only. UpperDeck is not responsible for sensitive information you choose to upload or for how you or others use your content or AI-generated outputs. We do not monitor or verify the sensitivity or legality of user-submitted content.

Data storage & security

Data is stored in Supabase (PostgreSQL and private object storage on AWS) with row-level security policies. Original uploads live in a private bucket, not a public URL. Traffic is encrypted in transit (TLS). Data at rest inherits cloud-provider encryption from our infrastructure partners.

API keys for AI and payment providers are kept server-side. Organization tenants may enable additional safeguards such as PHI redaction during file processing. All workspaces use the same private storage foundation; uploads stay scoped to your projects.

Data retention & account deletion

We retain account and project data only while your account is active. You may delete individual projects and files within the product at any time.

When you delete your UpperDeck account, we permanently erase your personal information, project content, uploaded files, chat history, and related metadata from our databases and storage. We do not keep copies for recovery or marketing. Deleted accounts are treated as if they never existed.

Stripe may retain payment transaction records separately under its own privacy policy. We do not retain your project content or account profile after deletion.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. Contact us at support@upperdeck.dev for requests.

Contact

Questions about this policy: support@upperdeck.dev. Sim Capital LLC operates UpperDeck at upperdeck.dev.

Privacy policy