Privacy statement

This privacy statement explains how Upsider processes personal data when you visit upsider.nl, submit a form, request a scan or contact us. The Dutch version is binding and takes precedence if the versions differ.

Who is responsible

Upsider is responsible for the processing of personal data described in this statement.

Upsider B.V.
Postlaan 7, 2101 VG Heemstede
KvK 81223722
info@upsider.nl

Services covered by this statement

Upsider helps businesses advertise on ChatGPT through scans, pilots and campaign management. We also improve operational processes with AI through process reviews, pilots and implementations.

This statement covers personal data we process through our website, forms, business follow-up and delivery of these services. Additional data processing agreements may apply to data we process on behalf of a client.

Data we process

When you submit a form, we process your name and email address. For a ChatGPT Ads scan, we ask for your business email address and website; for a process review, a description of the process causing problems; and for contact, your message. A sector or subject may be passed as a hidden field when the page supplies it. We derive the company name from your website or business email domain. We also process campaign data sent with your request, such as UTM parameters and a ChatGPT ad click ID.

We also process technical data needed to operate and secure the website and forms. With your consent, Google and Apollo may process data about your visit as described in our cookie statement.

Do not share special category personal data or confidential information unless your request requires it.

Why we process data

We use your data to:

assess and respond to your request;
prepare and deliver a scan, process review, pilot, implementation or campaign management;
make arrangements and manage the business relationship;
protect forms against misuse and spam;
measure website use and conversions and identify business visitors after you give consent.

To handle a request and carry out an assignment, we rely on the performance of a contract or the steps taken before entering into one. For appropriate business follow-up, we rely on our legitimate interest in maintaining relevant contacts. We ask for your consent through the cookie banner before activating Google tags, OpenAI’s measurement pixel and Apollo visitor identification. Reporting a request to OpenAI after a click on our ChatGPT advertisement is based on our legitimate interest in measuring whether our advertisements lead to requests.

Scan reports and shared links

A ChatGPT Ads scan is available through a unique, unindexed link with no login. Anyone with the link can view the report. You decide who to share the link with and are responsible for that choice. Upsider can revoke the link on request.

The report contains publicly observable information about your company and clearly labelled assumptions by Upsider. Contact us if any information is incorrect or you want a report link revoked.

We use service providers for parts of our website and follow-up:

Hetzner for hosting in Germany and the EU;
Resend for sending emails;
Cloudflare Turnstile for spam checks on forms;
Apollo.io for managing business lead contacts;
Google Tag Manager, Google Analytics 4 and Google Ads for measurement, only after you give consent through the cookie banner;
OpenAI for measuring our advertisements on ChatGPT, as described below.

If you reach our website through an Upsider advertisement on ChatGPT and then submit a form, we report that request to OpenAI. We only send the click ID that OpenAI attached to the ad click, the page and the time of the request. We do not share your name, email address, IP address or the content of your request with OpenAI. This report is sent from our server and does not depend on your cookie choice. OpenAI’s measurement pixel in your browser is only activated after you choose “Accept” in the cookie banner.

We only share data needed for the relevant task. Where the law requires it, we make agreements covering processing and appropriate protection. We do not sell your personal data.

How long we keep data

We keep lead data in backups for a maximum of 90 days. We keep data in our CRM while a business relationship or relevant business follow-up continues. We then delete or anonymise the data, unless a legal retention requirement or an ongoing legal claim requires a longer period.

We keep assignment data for as long as needed for delivery, administration, evidence and legal obligations.

Cookies and local storage

Without consent, we only use functional storage in your browser for your cookie preference, form support and original campaign source. That campaign source includes the click ID of a ChatGPT advertisement. Google tags, OpenAI’s measurement pixel and Apollo visitor identification are only activated after you choose “Accept” in the cookie banner. You can withdraw that choice on the cookies page.

Your rights

You can request access to, correction of or deletion of your personal data. You can also object to processing based on legitimate interest, request restriction of processing or data portability and withdraw consent you previously gave.

Send your request to info@upsider.nl. We may ask for information to verify your identity. You can also lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.

Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of storage or transfer is entirely without risk.

Changes

We may update this privacy statement if our website, services or data processing change. The date at the top shows the latest version.