Upenned is a private service for preserving and understanding personal and historical correspondence. This policy explains what Upenned collects, how it is used, where it is processed, how long it is kept, and the choices available to you.
Who is responsible for your information
Upenned operates the service and is responsible for the personal information described in this policy. Privacy questions and requests can be sent to privacy@upenned.com.
Information we collect
Upenned collects only the information needed to provide and protect the service:
- Account information, including your verified email address and the identifier used to keep your archive connected to your account.
- Content you choose to upload, including letter images or PDFs, titles, descriptions, dates, names, relationships, places, and other archival notes.
- Generated and corrected material, including transcripts, translations, summaries, identified people and places, historical context, confidence information, and your later corrections.
- Correspondence information when you contact support, report a security issue, or make a privacy request.
- Limited service records, such as dates and times of activity, errors, usage counts, and security events. Upenned does not need advertising profiles or precise location data to operate the service.
Upenned does not currently collect payment-card information. Historical correspondence may contain sensitive information about you or other people. Please upload only material you are entitled to preserve and process.
How we use information
Information is used to authenticate accounts; store, display, search, transcribe, translate, and organize archives; apply your corrections; provide exports and deletion controls; enforce reasonable service limits; respond to requests; prevent abuse; diagnose failures; secure and improve the service; and comply with legal obligations.
Where privacy law requires a legal basis, processing is based on providing the service you requested, protecting Upenned and its users, complying with law, and consent where consent is required. You may withdraw consent for future optional processing, but that does not undo processing already lawfully completed.
AI processing and its limits
Uploaded letters and the optional context you provide are sent securely to an AWS AI service in the United States for the analysis you request. AWS states that this content is not shared with model providers or used to train foundation models. Upenned does not use your letters, generated results, or corrections to train an AI model unless you separately and clearly give permission for that use.
AI output can be incomplete, biased, or wrong, especially with faded writing, unusual names, uncertain dates, and historical language. Generated output is a draft. Upenned shows uncertainty and provides correction tools, but you should check important details against the original and other reliable sources.
When information is disclosed
Upenned does not sell personal information, share it for cross-context behavioral advertising, or maintain a public people directory. Information may be disclosed only:
- To Amazon Web Services, which provides the secure technology used to sign you in, store and process your archive, send service emails, and help protect the service.
- When reasonably necessary to comply with law, protect a person, investigate abuse, defend legal rights, or preserve the security of the service.
- In connection with a genuine financing, reorganization, sale, or transfer of the service, subject to appropriate confidentiality and notice where required.
Cookies and browser storage
Upenned uses essential browser storage and cookies to sign you in securely, keep your archive connected to your account, and remember your privacy choice. These essential features cannot be switched off. Your original files are not placed at permanent public web addresses.
Upenned uses Google Analytics to understand visits and page views. If you continue without analytics cookies, Google receives limited cookieless measurement signals without an Analytics cookie or persistent browser identifier. If you allow analytics cookies, they also help distinguish repeat visits and navigation between pages. Page addresses are sent without query strings or fragments. Upenned does not send Google your letters, transcripts, form entries, or account email address, and does not enable advertising or personalized-ad signals. You can change your cookie choice at any time using the cookie button. Learn more about how Google processes Analytics information at Google's partner-sites privacy page.
Account and service emails are operational messages, not permission for unrelated marketing.
Retention and deletion
- Active originals, archive records, and generated material remain until you delete the applicable letter or account.
- When deletion finishes, the active copy is removed right away. An isolated backup that Upenned cannot show you is automatically destroyed within 30 days. It is not a personal undo.
- Routine service and security records are normally retained for 30 days. Messages sent to Upenned contact addresses are retained for up to one year unless they are needed longer for support, security, a dispute, or law.
Records may be retained longer when required by law, needed to investigate abuse or security incidents, or necessary to establish or defend legal claims. When possible, such records are restricted from ordinary product use.
Security and data location
Upenned uses modern AWS security and authorization practices, including strong sign-in protections, encryption, private storage, access controls, automated service alerts, and isolated backups. No internet service can promise absolute security. Production data is currently processed and backed up in AWS regions in the United States.
Your choices and rights
You can correct transcripts, export structured archive records and transcripts, delete individual letters, or delete the account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or an explanation of a privacy decision, and to appeal or complain to a regulator.
Send a request from the email associated with the account to privacy@upenned.com. Upenned may ask for reasonable verification and will not discriminate against you for exercising a privacy right.
Children and other people's information
Upenned is intended for adults aged 18 or older and is not directed to children. Do not upload current information about a minor or private material about another living person unless you have a lawful and appropriate reason to do so. Privacy, publicity, and confidentiality rights can vary by location and may continue after death.
Changes to this policy
Material changes will be dated on this page and, when appropriate, communicated through the service or account email before they take effect. Continued use after the effective date is subject to the updated policy.