Who we are

Mindantic LLC, doing business as UpLayer is a design and software studio that builds software and AI features for business clients. We are the controller of the personal data described in this policy, except where we process data on behalf of clients (see "Data we process on behalf of clients" below), in which case our client is the controller and we act as a processor.

Our registered address is 117 S Lexington St, Ste 100, Harrisonville, MO 64701, United States. You can contact us about this policy at hello@uplayer.agency.

What data we collect

We collect different categories of personal data depending on how you interact with us.

Website visitors. When you visit our website, we may collect technical and usage data, such as your IP address, browser type and version, device information, operating system, the pages you view, the links you click, the date and time of your visit, and referring website addresses. Some of this data is collected through cookies and similar technologies (see "Cookies and analytics").

Prospects and clients. When you contact us, request information, book a call, or enter into an engagement with us, we may collect identity and contact data (such as your name, job title, employer, email address, telephone number, and postal address), correspondence and communications you send us, and information relevant to a potential or active engagement (such as project requirements, business goals, and commercial terms). For clients, we may also collect billing and payment information.

Data we process on behalf of clients. In the course of delivering our services, we may access, store, or process personal data contained within a client's systems, datasets, or product environments. The type of data depends entirely on the client and the project, and may include the personal data of the client's own customers, users, or employees. We process this data only on the documented instructions of the client and in accordance with the agreement between us and that client. The client, not us, decides what data is processed and for what purpose.

We do not intentionally collect special categories of personal data (such as data revealing health, racial or ethnic origin, religious beliefs, or biometric data) about website visitors or prospects. Where such data may appear within data we process on behalf of a client, it is handled under our agreement with that client.

How we collect it

We collect personal data in the following ways:

• Directly from you: when you fill in a form, email or call us, book a meeting, sign an agreement, or otherwise communicate with us.
• Automatically: through cookies, analytics tools, and server logs when you use our website.
• From our clients: when a client grants us access to their systems or provides us with data in order for us to perform the services.
• From third parties: we may receive limited business contact data from publicly available sources, referrals, or business information providers.

How we use it

We use personal data for the following purposes:

• to operate, maintain, and improve our website;
• to respond to enquiries and communicate with you;
• to provide quotes, proposals, and statements of work;
• to deliver our services and manage our engagements;
• to process payments and manage billing;
• to send service-related and, where permitted, marketing communications;
• to understand how our website is used and to improve it;
• to maintain the security and integrity of our systems;
• to comply with our legal, regulatory, and contractual obligations; and
• to establish, exercise, or defend legal claims.

Where we process personal data on behalf of a client, we use it only to provide the agreed services and only as instructed by that client.

Legal bases

Where applicable data protection law (such as the GDPR or equivalent) requires a legal basis for processing, we rely on one or more of the following:

• Consent: for example, where you opt in to marketing communications or accept non-essential cookies. You may withdraw consent at any time.
• Performance of a contract: to take steps at your request before entering into a contract and to perform our obligations under an engagement.
• Legitimate interests: to run, protect, and grow our business, to communicate with prospects and clients, and to keep our website and systems secure, provided these interests are not overridden by your rights and freedoms.
• Legal obligation: to comply with laws that apply to us, such as tax, accounting, and record-keeping requirements.

For data we process on behalf of a client, the legal basis is the responsibility of the client as controller.

Cookies and analytics

Our website uses cookies and similar technologies. Cookies are small files placed on your device that help the website function and help us understand how it is used.

We use:

• Strictly necessary cookies, which are required for the website to operate; and
• Analytics and performance cookies, which help us measure and improve how the website is used.

We may use third-party analytics providers to collect aggregated usage statistics. Where required by law, we will request your consent before setting non-essential cookies. You can manage or disable cookies through your browser settings, although some features of the website may not work properly if you do.

We do not currently use analytics, advertising, or tracking cookies, and the website itself does not set cookies. When you open the booking calendar, our scheduling provider, Cal.com, may set cookies that are strictly necessary for choosing and confirming a meeting time. If we add analytics in the future, we will update this policy and ask for your consent where the law requires it.

Sharing and third-party processors

We do not sell your personal data. We may share personal data with:

• Service providers and processors who perform functions on our behalf, such as hosting, cloud infrastructure, email, analytics, payment processing, scheduling, and customer relationship management. These providers process data only on our instructions and under appropriate contractual safeguards.
• Professional advisers, such as lawyers, accountants, and auditors, where necessary.
• Authorities or other parties where required by law, regulation, legal process, or to protect our rights, property, or safety.
• A successor entity in connection with a merger, acquisition, reorganization, or sale of assets.

The key processors we use today are:

• Vercel Inc. (United States), which hosts this website and processes the technical data your browser sends when you visit it.
• Brevo (France), which delivers the messages you send through our contact form to our inbox.
• Cal.com, Inc. (United States), which runs the booking calendar and processes the details you enter to book a call.
• Google LLC (United States), which serves the fonts used on this website and receives your IP address when your browser loads them.

International transfers

We may transfer personal data to, and store it in, countries outside the country in which it was collected, including countries that may not provide the same level of data protection as your home country. Where we make such transfers, we put in place appropriate safeguards required by applicable law, such as standard contractual clauses or transfers to countries recognized as providing adequate protection.

For data we process on behalf of a client, any international transfers are governed by our agreement with that client.

Data retention

We retain personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting, tax, or reporting requirements, and to establish, exercise, or defend legal claims. The retention period depends on the type of data and the context.

When personal data is no longer required, we will delete it or anonymize it. Data we process on behalf of a client is retained and deleted in accordance with our agreement with that client.

Security

We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These may include access controls, encryption where appropriate, secure development practices, and staff confidentiality obligations.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping any credentials we provide to you confidential.

Your rights

Depending on your location and applicable law, you may have some or all of the following rights in relation to your personal data:

• the right to access the personal data we hold about you;
• the right to request correction of inaccurate or incomplete data;
• the right to request erasure of your data;
• the right to restrict or object to certain processing;
• the right to data portability;
• the right to withdraw consent at any time, where processing is based on consent; and
• the right to lodge a complaint with a supervisory or data protection authority.

To exercise any of these rights, please contact us at hello@uplayer.agency. We will respond within the time required by applicable law. We may need to verify your identity before acting on a request.

If your request relates to data we process on behalf of a client, we will refer you to that client, who is the controller of that data, or act on the client's instructions.

Children's data

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date at the top of this page. Where changes are material, we will take reasonable steps to notify you. We encourage you to review this policy periodically.

How to contact us

If you have any questions, concerns, or requests regarding this policy or your personal data, please contact:

Mindantic LLC, doing business as UpLayer
117 S Lexington St, Ste 100, Harrisonville, MO 64701, United States
hello@uplayer.agency

If you are not satisfied with our response, you have the right to contact the relevant data protection or supervisory authority in your jurisdiction.