Privacy policy

Effective 2026-10-26

InsightShift, LLC operates UpgradePath. This page says what we hold about you and why.

What we store

• Subscription records. Your Stripe customer id and the API key issued to it, in Cloudflare KV. We keep the record after a subscription ends so a repeat checkout restores the same key, and delete it when you ask us to.
• Checkout session id. Read once when you open the welcome page after paying, to look up your key. Not stored by us.
• Request IP addresses. Free-tier requests are counted per IP address in a rate-limit table for up to about two hours, then deleted. Support-form submissions are counted the same way.
• Request logs. Cloudflare keeps request metadata for the Worker (IP address, path, status, and when request logging is on, the tool, tier and add-on called) for its standard retention period. We use it to operate the service.
• Support messages. The support form emails us your message, reply address, optional key prefix, and your IP address and country. We keep that email in our support mailbox and store no message content on the server.

What we do not do

No analytics scripts, no advertising, no cookies of our own, no sale or sharing of personal data with anyone other than the processors below.

Payment data

Stripe collects and holds your card details under Stripe's privacy policy. We see your customer id, subscription status and the email address Stripe uses for receipts.

Processors

• Cloudflare: hosting, request logs, email routing, bot verification (Turnstile) on the support form.
• Our mailbox provider, which receives the forwarded support email.
• Stripe: payments and subscriptions.

Your rights

Email support@upgradepath.io to see or delete what we hold about you. Deleting your subscription record ends your subscription.

Changes

Changes appear on this page with a new effective date.