Privacy policy

This policy explains what personal data Updrift collects, why, and what you can do about it. Clackis Ltd, a company registered in England and Wales with company number 17432828 is the controller of that data. You can contact us about it at hello@updrift.social.

What we collect

• Your account: your email address, your plan and its status, and your passkeys (we keep only the public key; your device keeps the private one).
• Your Bluesky accounts: each account's identifier (DID) and handle, and the access Bluesky grants Updrift when you connect it. We never see or store your Bluesky password.
• What Updrift does and finds: a record of every like, repost, follow and unfollow it makes for you, the settings you choose (keywords, hours, limits), and figures about your accounts, such as follower counts and how your posts performed.
• Other people's public Bluesky data: to decide what to engage with, Updrift reads public posts and profiles on Bluesky, and records the handles and identifiers of accounts it engaged with or considered. It uses only what anyone can see on Bluesky.
• Payments: Stripe takes and keeps your card details. We receive only your Stripe customer and subscription identifiers and the state of your subscription.
• CW+ membership: if you link a CW+ membership, we receive only whether it is active, so that the discount applies. Nothing else about you in CW+ is shared.
• Emails and support: sign-in links (stored only as a one-way hash, and valid for 15 minutes), your daily recap preference, what you write to us, and a record of every time support opened your dashboard.
• Technical data: the cookies below, request logs our hosting provider keeps for a short time for security and troubleshooting, and cookie-free page-view counts from Cloudflare Web Analytics.

Why we use it, and on what basis

• To provide Updrift to you under our contract: running your accounts, showing your figures, taking payment, signing you in and sending your daily recap.
• For our legitimate interests: keeping the service secure, preventing abuse, fixing problems, and reading public Bluesky data so that Updrift can find posts and accounts in your niche. We keep the public data to what the service needs.
• To meet legal obligations, such as keeping payment records.

We do not sell your data, and we do not use it for advertising.

Who we share it with

• Cloudflare, which hosts Updrift, stores its data, sends its emails and counts page views.
• Stripe, which takes payments as the merchant of record.
• Bluesky and the server your account lives on, when Updrift acts for you.

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK's adequacy rules or by the standard contractual clauses in our agreements with them.

How long we keep it

• While your plan runs, we keep your data for as long as your account exists.
• When your plan ends, we keep your accounts' history and settings for 90 days, then delete them, together with your passkeys and saved keywords, and withdraw Updrift's access to your Bluesky accounts. We keep only your email address and payment identifiers after that, so that you can sign in again and so that your invoices still name someone.
• Payment records are kept by Stripe for as long as tax law requires.
• To have everything deleted sooner, including your email address, write to us.

Cookies

Updrift uses only cookies it needs to work, so it does not ask for consent to them:

• a sign-in cookie that keeps you signed in, for up to 30 days after you last use Updrift;
• a short-lived cookie that remembers a CW+ link you opened before signing in;
• for our support team only, a cookie that marks a support visit to a customer's dashboard, for up to an hour.

We do not use advertising or tracking cookies. To see how many people visit updrift.social and which pages they read, we use Cloudflare Web Analytics, which sets no cookies, stores nothing on your device and does not identify you or follow you across other sites: it counts page views in aggregate.

Your rights

Under UK data protection law you can ask to see the data we hold about you, have it corrected, have it deleted, have its use restricted, object to how we use it, or receive a copy to take elsewhere. Write to hello@updrift.social; we will reply within one month. You can turn the daily recap off in Settings or from the link in any recap. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this policy in a way that matters, we will tell you by email or in Updrift before the change takes effect.