Upcells is a product of Captivated Ltd ("we", "us", "our"), a company registered in England and Wales (company number 15936109), registered office Electric Works, C/O Captivated Ltd, 3 Concourse Way, Sheffield, S1 2BJ, United Kingdom. We are registered with the UK Information Commissioner's Office (registration ZC010118). This policy explains what personal data we handle, why, and the choices and rights you have. It covers four different situations, which are deliberately kept separate because they involve very different data:
- Using the Upcells desktop app
- Visiting this website
- Buying and licensing Upcells
- Receiving marketing from us (including if we contacted you cold)
If you only want to know why you received an email from us and how to stop it, jump to Receiving marketing from us.
1. Using the Upcells desktop app
Upcells is a local-first desktop application. This is the most important thing to understand about how it handles data:
- Your Salesforce data flows directly between your own computer and your Salesforce org. It does not pass through, and is not stored on, any Captivated Ltd server. We run no backend that receives your CRM records.
- The AI features (on the Accelerator tier and above) run on a model on your own machine. Your data is never sent to Upcells, or to OpenAI, or to any other cloud AI service, for these features to work.
- Your Salesforce credentials (OAuth tokens) are stored only in your operating system's keychain on your device. We never see or store your password; Upcells connects using OAuth and can only do what your own Salesforce permissions allow.
Because of this design, we do not collect, hold, or have access to the Salesforce data you work with in Upcells. You (and your organisation) remain in control of it, under your own agreement with Salesforce.
2. Visiting this website
We keep this site light on tracking. We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personal or identifiable data. It records aggregate, non-identifying figures such as page views, referring sites, and country-level location, so we can understand what is useful. We do not build advertising profiles and we do not sell any data.
The site uses only the essential cookies needed for it to function, if any. If we ever add non-essential cookies, we will ask for your consent first.
3. Buying and licensing Upcells
When you purchase or licence Upcells, two specialist providers act on our behalf:
- Polar is our merchant of record. It handles payment, billing, invoices, and sales tax or VAT. Your card details are handled by Polar, not by us. See Polar's privacy policy.
- Keygen handles licence validation (checking that a licence key is valid and which device it is activated on). See Keygen's privacy policy.
We process the resulting order and licence information (such as your name, email, and licence status) to provide the product you bought, to support you, and to meet our legal and accounting obligations. The lawful bases are performance of our contract with you and our legal obligations.
4. Receiving marketing from us
If you received an email from us about Upcells and had not previously contacted us, this section is the one that explains it. We are transparent about this because the law (in particular Article 14 of the UK GDPR) requires us to tell you when we hold your data without having collected it from you directly.
What data we hold
For business-to-business marketing we hold limited business contact details: your name, your business email address, your job title, your employer's name and website, and general professional location (for example, country). We do not seek out special-category data, and we target business roles, not private individuals.
Where we got it
We obtained your business contact details from ZoomInfo, a third-party business-information provider, under our subscription with them. We use their data to identify professionals whose role is relevant to Upcells (for example, sales leaders at companies that use Salesforce).
Why we contact you, and our lawful basis
We contact a small, relevant set of business professionals to tell them about Upcells, a product directly relevant to their work. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): promoting a relevant business product to the business roles it is built for. We have weighed this against your interests and rights and keep the contact limited, relevant, and easy to stop. Where the UK Privacy and Electronic Communications Regulations (PECR) apply, we rely on the business-to-business (corporate-subscriber) basis and include an opt-out in every message. Recipients in the United States are handled in line with the CAN-SPAM Act.
How to stop it (opt out)
You can opt out at any time, and we will act on it promptly:
- Reply to any marketing email from us with the word "unsubscribe", or
- Email [email protected] asking to be removed.
When you opt out, we add your details to a suppression list whose only purpose is to make sure we do not contact you again, including if your details appear in a future data refresh. You have an absolute right to object to direct marketing (Article 21(2) UK GDPR), and we honour it.
How long we keep it
We keep prospect data only for as long as it is useful for the outreach described above. If you opt out or object, we stop marketing to you and retain only the minimum needed to keep honouring that choice (your email on the suppression list). Otherwise we review and remove stale prospect data periodically.
Your rights
Wherever we process your personal data, you have the right to: be informed; access a copy of your data; have inaccurate data corrected; have your data erased; restrict or object to our processing (including an absolute right to object to direct marketing); and, where relevant, data portability. To exercise any of these, email [email protected].
If you are in the UK or EU and are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. We would appreciate the chance to put things right first.
Who we share data with
We do not sell your personal data. We share it only with the service providers that make Upcells work, each acting under contract as our processor:
- Cloudflare - hosts this website and stores our marketing and mailing data (in its Western Europe region)
- Mailgun (a Sinch company) - delivers our emails (EU region)
- Plausible - privacy-friendly website analytics
- Polar - payments and billing
- Keygen - licence validation
- ZoomInfo - the source of the business prospect data described above
Our storage and email providers are configured to keep data in the EU/UK region. Some providers are US-incorporated; where personal data is transferred internationally, we rely on appropriate safeguards, principally the standard contractual clauses in each provider's data-processing agreement.
Changes to this policy
We may update this policy as Upcells and our practices evolve. When we make a material change, we will update the date at the top of this page.
Contact
Questions about this policy or your data? Email [email protected], or write to Captivated Ltd, Electric Works, C/O Captivated Ltd, 3 Concourse Way, Sheffield, S1 2BJ, United Kingdom.