Privacy policy

This policy explains what personal data Updrift collects, why, and what you can do about it. Clackis Ltd, a company registered in England and Wales with company number 17432828 is the controller of that data. You can contact us about it at hello@updrift.social.

What we collect

• Your account: your email address and your ClackID identifier, which ClackID gives us when you sign in with it, your plan and its status, and your passkeys (we keep only the public key; your device keeps the private one).
• Your Bluesky accounts: each account's identifier (DID) and handle, and the access Bluesky grants Updrift when you connect it. We never see or store your Bluesky password.
• What Updrift does and finds: a record of every like, repost, follow and unfollow it makes for you, the settings you choose (keywords, hours, limits), and figures about your accounts, such as follower counts and how your posts performed.
• The Planner: the posts you write and schedule (their text, times, campaigns and labels), the images and videos you upload with their descriptions and tags, a record of which posts each file went out with, a fingerprint (a one-way code made from the file, not the file) of every file you upload and of each file that went out, with the post and the date, so the Planner can tell you when a file last went out and how many times (the fingerprints of files that went out are kept after the files are deleted, and go when your account is deleted), your sharing rules, and the posts you marked as not evergreen.
• The Inbox: the replies, mentions and quotes your accounts receive, with who sent them and their first words. If you allow messages on an account, also who each direct message conversation is with and the first 1,000 characters of their newest message; the rest of a conversation is read from Bluesky when you open it and is not stored. An answer that waits for a teammate's approval is kept until it is sent or declined, then only the fact that it was. All of this is kept for 30 days, and deleted when you turn messages off or the account goes.
• Other people's public Bluesky data: to decide what to engage with, Updrift reads public posts and profiles on Bluesky, and records the handles and identifiers of accounts it engaged with or considered. It also notes which accounts start following your accounts, and when, so it can show which of them it had engaged with first; these notes are deleted after 60 days. It uses only what anyone can see on Bluesky.
• Payments: Stripe takes and keeps your card details. We receive only your Stripe customer and subscription identifiers and the state of your subscription.
• Trials: when a trial starts, a fingerprint (a one-way code made from its identifier) of each Bluesky account you have connected, so that each Bluesky account has one trial without a card. It does not name you or the account, and it is kept after your Updrift account is deleted, to prevent a second trial without a card for the same Bluesky account.
• Emails and support: for each daily recap we send, when it was sent and whether and when it was first opened or a link in it was followed, and how many times (the logo and the links carry a code for that one email; we record nothing about your device, address or mail app, and keep this for 90 days); your daily recap preference, what you write to us, and a record of every time support opened your dashboard.
• Technical data: the cookies below, request logs our hosting provider keeps for a short time for security and troubleshooting, and cookie-free page-view counts from Cloudflare Web Analytics.
• Usage analytics: when you sign up, sign in, connect an account, move through setup, start or change a plan, pay, cancel, or create posts, campaigns and link pages, our servers send Google Analytics a record of that step with your Updrift account number, your plan and how many accounts you have connected. It never includes your email address, your Bluesky handles or anything you write. We use it to see which parts of Updrift work and where people get stuck. When you delete your Updrift account, Google Analytics is told only that an account on your plan was deleted, without your account number.
• Visits to our public pages: when someone who is not signed in opens the front page, the sign-up or sign-in page, these policies, or a referral or invite link, our servers send Google Analytics which page it was, the site they came from (its host name only) and any campaign tags in the link, the country they are in (from Cloudflare; never a region or city) and their device type, system and browser. No cookie is set and nothing is stored on their device, and their IP address is never sent. To count one person once a day, a one-way code is made from a random value that changes daily with their address and browser. If they have the Google Analytics cookie described below, the random number in it is used instead, so that they are counted once and not twice. If the visit came from another site or a campaign link, where it came from is kept under that code for two days, so that if they sign up we can record on their account where they first found Updrift.

Why we use it, and on what basis

• To provide Updrift to you under our contract: running your accounts, showing your figures, taking payment, signing you in and sending your daily recap.
• For our legitimate interests: keeping the service secure, preventing abuse, fixing problems, understanding how Updrift is used so we can improve it, and reading public Bluesky data so that Updrift can find posts and accounts in your niche. We keep the public data to what the service needs.
• To meet legal obligations, such as keeping payment records.

We do not sell your data, and we do not use it for advertising.

Link clicks

When someone follows an updrift.link short link or a link on a link page, Updrift records the time, which link it was, a rough country (from Cloudflare) and the website they came from (its host name only). It never stores their IP address or browser details. To avoid counting the same person twice within 30 minutes, it keeps a one-way code made from a random value that changes daily, together with their address and browser, for 30 minutes, then deletes it. Link previews and automated visits are not counted. These records belong to the account owner, are shown only to them, and are deleted with the account. Separately, our servers send Google Analytics an anonymous count of each link page visit and each counted click: that it was a link page or a short link, whether the link sat on a page or in a post, the site the visitor came from (its host name only), their rough location and their type of device, system and browser, under the same kind of daily one-way code as our public pages. It never includes the page's owner, its address, the link or its code, and never the visitor's IP address, and nothing is stored on their device.

Bio signals and the Prospects queue

An account owner can tell Updrift to follow only people whose public Bluesky name or bio contains certain words or link domains, grouped into segments they name, and can ask to approve each follow first. A segment can say something sensitive about a person, such as their sex life, which UK data protection law treats as special category data. So Updrift keeps as little as it can:

• It reads only the name and bio a person has made public on Bluesky, and only to check them against the words the owner chose. It stores the person's handle, identifier and name, the segment and the words that matched, never their whole bio.
• People waiting in the Prospects queue, or skipped by the owner, are deleted after 30 days. When someone is followed, the record of that follow notes which segment led to it, and is kept with the rest of the account's history as described below.
• This information is shown only to the owner of the account and their teammates. It is never exported, sold, shared or used for advertising, and it is not included in Download everything.
• We rely on our legitimate interests and the account owner's in finding people who are likely to welcome a follow, and, for anything that reveals special category data, on the person having made that information public themselves on Bluesky.
• If you are on Bluesky and would rather Updrift never followed you or kept a note about you, write to hello@updrift.social with your handle. We will remove what we hold about you and keep you out of every account's queue.

Approving a post that features you

An account owner can send a private link to someone a post features, who can approve it, ask for changes or decline. The person signs in with ClackID, and Updrift keeps their ClackID identifier and confirmed email address, the name the owner gave them, their answer and any note, when they answered, and whether they ticked that they are 18 or over. Declining deletes the post and its pictures and video. When someone approves, Updrift keeps a signed record of exactly what they approved: the words, the files as they will go out (as a fingerprint, a one-way code, not the files), the account and where it will be posted, who approved and when. Before the post goes out Updrift checks it against that record and refuses to send it if anything has changed, and once it has gone out keeps a second record of what was sent and where. The fingerprint of each record can be stamped by an outside timestamp service, which receives only that fingerprint. The person is emailed a receipt when they approve, and, once the post has gone out, a second email with a link to a certificate on their own page: the whole post as approved, where it went, the fingerprints and a QR code to the page that checks the record. The certificate is made from the records when it is opened and is not kept separately. The public check page, at updrift.social/verify, shows the fingerprints, signature, timestamp and whether the published pictures match, and shows none of the post's words and no email address. The person can see what they approved, and ask for a post to be taken down once it is out, on their own page at updrift.social/contribute. The owner sees all of this for their own posts, and the records go when the owner's account is deleted. Links made before sign-in was required could be kept to a Bluesky account instead: for those, Updrift reads who the person is and, where Bluesky has checked it, whether Bluesky treats them as an adult (never their date of birth), keeps their handle and that result with their answer, and gives back the sign-in at once, keeping nothing else of their account. If you answered a link and want what we hold removed, write to hello@updrift.social.

Sending photos through a submission link

An account owner can share a link where people send them photos, or a video, to use in a post. To send, a person signs in with ClackID. Updrift then keeps their ClackID identifier and confirmed email address, the photos (made smaller, with the camera's details such as location removed) or the video (as it was sent, with whatever details it carries), the name given and a note if given, how many days they chose to leave it with the owner (7, 14, 30 or 90), and the fact that they ticked that they are 18 or over, that they are in the photos or have the permission of everyone in them, and that the owner may post them, with the time they ticked it and which version of those words they saw. Only the account's owner sees what they sent, and the sender sees it on their own page at updrift.social/contribute. A sender is emailed a receipt with the fingerprints of what arrived. What they send is deleted on the day they chose, even if a post is waiting for it; that post is then stopped and does not go out. It is deleted at once if the owner discards it or the sender takes it back before it is used, and everything goes when the owner's account is deleted. Their email address is used only to send them that receipt and a link to approve each post that uses what they sent. The owner can look up the people who have sent them things, by name, email address, Bluesky address, and the words and #tags of the posts that used what they sent. That list is read from what is described here, so nothing more is kept for it, and it goes when those go. Each file also keeps a fingerprint (a one-way code made from it) so the owner can see when the same photo or video is sent twice; it goes with the rest when the owner's account is deleted. Before a send is accepted, Cloudflare Turnstile checks that a person is sending, from their browser and connection; Updrift keeps nothing from that check. To stop one sender filling an owner's storage, a counter keyed on a one-way code of the connecting address (never the address or your browser) is held for up to an hour and then deleted. If you sent photos and want them removed, take them back at updrift.social/contribute, or write to hello@updrift.social.

Anonymous totals across accounts

The public figures of posts from every account Updrift measures, including free Read-only ones, are combined into anonymous totals by time zone and by follower size, only ever in groups of at least 5 accounts. We use them to suggest posting times and to show how posts compare with accounts of a similar size. They are never shown for any one account, and nobody sees your posts or figures through them. They are worked out again each night, so an account that leaves drops out of them. If you would rather your accounts were left out, write to us at hello@updrift.social and we will leave them out from the next night on.

Who we share it with

• ClackID, run by Clackis, which you sign in with. It tells us your ClackID identifier and your confirmed email address. It learns that you use Updrift.
• Cloudflare, which hosts Updrift, stores its data, sends its emails and counts page views.
• Stripe, which takes payments as the merchant of record.
• Google, whose Google Analytics receives the usage records described above.
• Bluesky and the server your account lives on, when Updrift acts for you.

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK's adequacy rules or by the standard contractual clauses in our agreements with them.

How long we keep it

• While your plan runs, we keep your data for as long as your account exists.
• When your plan ends, we keep your accounts' history and settings for 90 days. An account you disconnect, or one on a plan that has ended, is deleted sooner if somebody else who holds that Bluesky account connects it to Updrift: they start with nothing of yours. After the 90 days we delete your accounts' history and settings together with your passkeys and saved keywords, and withdraw Updrift's access to your Bluesky accounts. We keep only your email address and payment identifiers after that, so that you can sign in again and so that your invoices still name someone. Your ClackID account is separate, and you can delete it in ClackID.
• Images and videos you upload to the Planner stay in your media library for 3 years from upload, or from the last time they went out, or the shorter time you choose there (as little as 90 days). You can delete one at any time; a post that used it stays on Bluesky until you delete it there.
• Payment records are kept by Stripe for as long as tax law requires.
• The fingerprints of Bluesky accounts that have had a trial are kept for as long as Updrift offers a trial without a card, including after your Updrift account is deleted.
• To have everything deleted sooner, including your email address, use Delete my Updrift account in Settings, under Safety and privacy, or write to us. It cancels any plan at once with no further charge, withdraws Updrift's access to your Bluesky accounts, and deletes what Updrift stored for you there and then: your accounts' history and settings, your posts waiting and media, your link pages and their clicks, your passkeys and your email address. Posts already on Bluesky stay on Bluesky, and Bluesky keeps its own record of the likes, reposts and follows Updrift made for you; deleting your Updrift account does not undo them.

Cookies

Updrift uses these cookies because it needs them to work, so it does not ask for consent to them:

• a sign-in cookie that keeps you signed in, for up to 30 days after you last use Updrift;
• a short-lived cookie that ties a ClackID sign-in to the browser that started it, for up to ten minutes, and while you accept an invite, one that remembers the invite for the same few minutes;
• when you choose the Free plan on the front page, one that remembers that choice through sign-up, for up to a day;
• when you arrive at sign-up from a page of ours, one that remembers which page it was, and if you typed your Bluesky handle on that page, one that carries it to the step where you connect the account, each for up to a day;
• when you arrive through a friend's referral link, one that remembers who referred you, for up to 30 days;
• on a Studio team, one that remembers whether you last worked in your own workspace or the team's;
• when you sign in to the iPhone app through the website, one that ties the two together, for up to ten minutes;
• for our support team only, a cookie that marks a support visit to a customer's dashboard, for up to an hour;
• one that remembers your analytics choice below, for 13 months.

Analytics cookies

To see how people find and use Updrift, updrift.social uses Google Analytics. It sets two cookies, _ga and one that starts _ga_, which hold a random number so that your visits can be counted together, for 13 months. On your first visit that number is the day's one-way code described above, so that the visit is not counted twice. It runs from our own address: what it collects passes through our servers first, which keep only which page of ours it was (never a code, a token or anything you typed), the site you came from (its host name only), before Google receives it. No part of your IP address is passed on: Google sees only our server's. If you are signed in, it also receives your Updrift account number and your plan. Google Signals, advertising features and Google's own use of the data are switched off.

In the European Union, the rest of the European Economic Area and Switzerland, these cookies are set only if you accept them. Everywhere else they are set when you first visit, and you can opt out at any time. Either way you can change your mind here: turn analytics cookies off or turn them on. We do not use advertising cookies. Cloudflare Web Analytics also counts page views in aggregate, without cookies.

Your rights

Under UK data protection law you can ask to see the data we hold about you, have it corrected, have it deleted, have its use restricted, object to how we use it, or receive a copy to take elsewhere. You can do two of these yourself in Settings, under Safety and privacy: Download everything makes one file of the data Updrift holds for you, which only you can download and which is kept for 7 days, and Delete my Updrift account deletes it. For anything else, or if you would rather, write to hello@updrift.social; we will reply within one month. You can turn the daily recap off in Settings or from the link in any recap. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we will tell you by email or in Updrift before the change takes effect.