Draft, pending solicitor review. Not yet in force.
Privacy
Last updated 7 October 2026
Plain English, no small print games. This explains what personal data Upheld handles, why, who sees it and what you can do about it, both for the trades who use Upheld and for the homeowners who receive their quotes.
- 01
Who we are
Upheld is a product of GAD Innovations Ltd, a private limited company in the United Kingdom. In this policy “we”, “us” and “our” mean GAD Innovations Ltd.
For anything about your data, email hello@upheld.app.
- 02
Two kinds of data, two roles
Your account. When a business signs up, we decide how your account details are used, so for that data we are the controller. That covers your name, email, phone number, business name, logo, colours, price list and billing details.
Your customers. When you quote a homeowner, you decide what goes in the quote and why, so you are the controller of your customer’s data and we are your processor. We only use it to make, send and track the quotes you ask us to, and we follow your instructions under our data processing terms, which form part of our Terms.
- 03
What we collect
From trades:
- Account details: name, email, phone, business name and address, VAT status.
- Business content: price lists, markups, logo, brand colours, quote templates.
- Voice recordings and notes you make to describe a job, and the text we transcribe from them.
- Photos and files you add to a quote.
- Billing: plan, invoices and payment status. Card details are held by our payment provider, never by us.
- How you use the service: sign ins, device type, errors, so we can keep it working.
About your customers, on your behalf:
- Name, email, phone number and the job address you enter.
- What is in the quote: the work, the prices, any photos.
- What they do with the quote: when it was opened and watched, messages they send you, whether they accept, decline or ask for changes, the start date they pick and the typed name they sign with.
We do not speak or caption a customer’s email, phone number or postcode in a video quote.
- 04
Why we use it, and our lawful basis
- To provide the service you signed up for: making, sending and tracking quotes, taking your subscription. Basis: performance of our contract with you.
- To keep it secure and working, prevent misuse and fix faults. Basis: our legitimate interests.
- To meet legal duties such as keeping tax and accounting records. Basis: legal obligation.
- To tell you about product changes that affect you. Basis: legitimate interests. Marketing emails only with your consent, and you can stop them at any time.
- 05
AI and automated processing
We use AI services to turn your voice notes into text, to draft quote lines from your own price list, and to produce the narration for a video quote. Nothing is sent to a customer until you have checked it and pressed send. No decision with a legal or similarly significant effect on anyone is made by automated means alone.
We do not let our AI providers use your data, or your customers’ data, to train their models where the provider gives us that choice, and we choose providers that offer it.
- 06
Who we share it with
We do not sell personal data. We use a small number of service providers (subprocessors) to run Upheld, each under a written contract that limits what they can do with it:
- Cloud hosting and database
- Video and file storage and delivery
- Email and text message delivery
- Payments and subscription billing
- AI transcription, text and speech generation
- Error monitoring and support tools
We will publish the named list of subprocessors before launch and tell trades before we add a new one. Deposits your customers pay go through your own payment link straight to you; we never hold that money.
- 07
Transfers outside the UK
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum, so your data has the same level of protection.
- 08
How long we keep it
- Account data: for as long as your account is open, then deleted or anonymised within 90 days of closing, apart from what we must keep by law.
- Quotes, recordings, photos and customer data: kept while your account is open so you can find old quotes. You can delete any quote at any time. When you close your account, we delete it within 90 days unless you ask us to export it first.
- Billing records: six years, as UK tax law requires.
- Backups are overwritten on a rolling basis, so deleted data leaves them within a few weeks.
- 09
Your rights
Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, and take a copy to move elsewhere. Email hello@upheld.app and we will reply within one month.
If you are a homeowner who received a quote through Upheld, the trade who sent it controls your data. Contact them first. If you contact us, we will pass your request to them and help them answer it.
You can also complain to the Information Commissioner’s Office at ico.org.uk. We would like the chance to put it right first.
- 10
Security
Data is encrypted in transit and at rest. Each business’s data is kept separate from every other business’s at every query. Quote links are long and unguessable. Access by our own team is limited to what is needed to support you.
- 11
Cookies
We use only the cookies needed to keep you signed in and to make the service work. We do not use advertising cookies. If that changes, we will ask first.
- 12
Changes to this policy
If we change this policy in a way that matters, we will email account holders before it takes effect. The date at the top shows the latest version.