Privacy Policy

Effective October 20, 2026

This Privacy Policy explains how Upgrade Manufacturing, Inc. ("Upgrade Manufacturing", "we", "us") collects, uses and shares information when you use the UpgradeMFG platform at beta.upgrademfg.com and its applications (the "Service"). The Service is a closed beta for invited business users; its use is also governed by our Terms of Service.

1. Information we collect

  • Account information: your name, email address, password (stored only in hashed form by our identity server) and, if you set one up, your two-factor authenticator.
  • Organisation information: the organisations you belong to, your role, who invited you and when.
  • Customer content: data you or your colleagues enter or upload, such as work orders, routings, machines, calendars and schedules, files, and conversations with the AI assistant.
  • Technical and security information: the IP address used when you sign in, sign-in and administrative events, and server logs that record requests together with the signed-in email address.
  • Support records: when an organisation grants our staff support access, we record which staff member visited the organisation and on which days.

2. How we use information

  • to provide, operate and maintain the Service, including signing you in;
  • to send service email: invitations, password-reset links and email-address verification. We do not send marketing email;
  • to protect the Service and its users, and to investigate misuse;
  • to provide support you or your organisation request;
  • to understand and fix problems and improve the Service;
  • to comply with legal obligations.

We do not sell personal information, do not use it for advertising, and do not use customer content to train AI models.

3. AI features

When you use the AI assistant, your messages, the relevant customer content and any files you attach are sent to the AI model providers listed below so they can generate a response. We configure OpenRouter to route requests only to model hosts that do not collect the data. AI conversations and attached files are stored in the Service until you delete them or your organisation is deleted.

4. Who we share information with

  • Your organisation: owners and administrators of your organisation can see its members, their roles and the organisation's content, and owners can see support visit records.
  • Service providers that process data on our behalf:
    • Amazon Web Services (hosting, databases and storage in the US East (N. Virginia) region, and delivery of service email);
    • OpenAI and OpenRouter (AI model processing for the AI assistant).
  • Our staff: our administrators can see account and membership information to operate the Service. Staff access an organisation's production data only when an owner of that organisation grants support access, for a limited period, and each visit is recorded.
  • Legal and business reasons: when required by law or legal process, to protect the rights, property or safety of our users, us or others, or as part of a merger, acquisition or sale of assets, subject to this Policy.

5. Cookies and local storage

The Service uses only cookies that are necessary for it to work: sign-in tokens, a short-lived sign-in ticket, cookies set by our identity server, and preferences such as your colour theme, last-used organisation and board view. Your browser's local storage keeps similar interface preferences. We do not use analytics, advertising or third-party tracking cookies.

6. Retention

We keep account and organisation information while your account or organisation is active, and customer content until it is deleted by you or your organisation or the organisation is closed. When an organisation is deleted, its production data and AI conversations are deleted from our active systems; we keep a minimal record of its memberships (name, email, role) as an audit trail. Backups are kept for up to 14 days. Server logs are rotated automatically and kept only briefly.

7. Security

We protect information with encrypted connections (TLS), encrypted storage, role-based access controls, optional two-factor authentication and restricted administrative access. No system is perfectly secure; please use a strong, unique password and turn on two-factor authentication.

8. Your choices and rights

You can ask us to access, correct, export or delete your personal information, or to close your account, by writing to team@upgrademfg.com. Depending on where you live, you may have additional rights under local law, and we will honour them as required. Customer content belongs to your organisation, which decides what is kept; we may refer requests about it to your organisation's owner.

9. Location of processing

We are based in the United States, and the Service stores and processes information in the United States. By using the Service you understand that your information will be processed there.

10. Children

The Service is intended for business users and is not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new effective date and, for material changes, notify account holders by email or in the Service.

12. Contact

Upgrade Manufacturing, Inc.
2 Burlington Woods Dr, Ste 100, Unit 20, Burlington, MA 01803, United States
team@upgrademfg.com