Privacy Policy

This policy explains what data UpLift ("we," "us") collects through the upliftsales.web.app marketing site and the UpLift application (together, the "Service"), how it is used, and exactly which tracking technologies are in place. This is a basic policy intended to be transparent about current, actual practice — it is not a substitute for legal advice for your specific jurisdiction or regulatory obligations.

Who this covers

UpLift is provided by UpLift Technology Services, LLC (referred to below as "the Company"), organized under the laws of the State of Delaware. If you have questions about this policy or your data, use the Contact page.

Data we collect

• Account & profile data — name, email address, and role, entered by an administrator when your account is created.
• Sales, producer, and agency data — imported by carriers and agencies to run contests and calculate rewards (policy numbers, sale amounts, dates, product names, and similar). This data belongs to the carrier or agency that imports it.
• Onboarding and contracting data — submitted while a producer is being contracted: licensing and appointment details, lines of authority, states, task progress, and documents you upload such as E&O certificates, tax forms, and signed agreements. This data belongs to the carrier or agency running the onboarding.
• Contest, reward, and leaderboard activity — generated by the Service as contests run: progress toward tiers, rewards issued, and leaderboard standings.
• Contact-form submissions — the name, email address, and message you submit through the Contact page.

We do not collect payment card numbers, government ID numbers, or health information.

Cookies and tracking technologies actually in use

We keep this list to exactly what runs today, not a boilerplate list of what a typical site might use:

• Sign-in session storage (Firebase Authentication). When you sign in, Firebase Authentication stores a session token in your browser's local storage / IndexedDB (not a traditional cookie) so you stay signed in between visits. This is strictly necessary for the Service to function and cannot be disabled while remaining signed in.
• Google reCAPTCHA v3. The sign-in screen and the Contact form load Google's reCAPTCHA script to distinguish humans from bots. reCAPTCHA sets its own cookies and may consider your device and browsing behavior to compute a score; it is provided by Google and governed by Google's Privacy Policy. No CAPTCHA response text is stored by us — only whether verification passed.
• Google Fonts. This site loads the "Baloo 2" typeface from Google's font servers (fonts.googleapis.com / fonts.gstatic.com), which causes your browser to make a direct request to Google (exposing your IP address to Google as it would to any server you request a file from) to fetch that font file.

We do not run any analytics, advertising, or cross-site tracking scripts (no Google Analytics, no ad pixels, no third-party behavioral trackers) anywhere on this site or in the application, and we do not sell or rent personal data to third parties.

How we use data

Account and profile data is used to authenticate you and control what you can see. Sales, producer, and agency data is used solely to run the onboarding workflows, contests, leaderboards, and rewards a carrier or agency has configured. Documents you upload are stored to evidence the onboarding task they were submitted against, and are retained rather than overwritten so the record of what was on file remains accurate. Contact-form submissions are used only to respond to your inquiry or feature request and are not added to any marketing list.

Data sharing

Data is shared only as necessary to operate the Service: with the carrier or agency that data belongs to, with Google (as the underlying infrastructure provider — Firebase Authentication, Cloud Firestore, Cloud Functions, reCAPTCHA, and Fonts, all covered by Google's Privacy Policy), and when required by law.

Data retention and deletion

Account, sales, onboarding, and contest data is retained for as long as the associated carrier or agency relationship is active, plus a reasonable period for recordkeeping. Onboarding documents and their earlier versions are retained as compliance records for that period rather than being deleted when superseded. Contact-form submissions are retained only as long as needed to respond. To request deletion of your personal data, contact us via the Contact page.

Your choices

You may decline to load the Contact form's reCAPTCHA by not submitting the form; you may decline Google Fonts by using a browser extension that blocks third-party font requests (the page will fall back to your system font). Declining sign-in session storage is not possible while remaining signed in, since it is required for authentication itself.

Changes to this policy

We will update the "Last updated" date above whenever this policy changes. Material changes will be reflected here before they take effect.

Contact

Questions about this policy or your data can be sent through the Contact page.