Privacy Policy

Last updated: August 18, 2026 · Applies to uppervox.com
The short version: this site sets no cookies, runs no analytics, and shows no ads. The only personal data we ever receive is what you type into a contact form or a booking — and it goes straight to our email, nowhere else. We never sell or share your data.

1. Who is responsible

This website is operated by Alexander Costa, an independent professional doing business as Uppervox (Boston, MA, United States — serving clients worldwide). For anything in this policy, write to hello@uppervox.com. We answer privacy requests within 30 days, usually much faster.

2. What we collect — and what we don't

We don't collect anything automatically. No cookies, no analytics scripts, no tracking pixels, no fingerprinting, no advertising tags. You can verify this: the site's Content-Security-Policy blocks requests to anything except the three services named below.

We receive personal data in exactly three situations:

Separately, our hosting provider (Cloudflare) keeps standard, short-lived server logs — IP address, browser type, pages requested — for security and delivery. We don't access or analyze these.

3. How we use it

To answer you, deliver the work you asked about, and keep normal business records. That’s the whole list. We use your email to reply to you — not to add you to a mailing list. We never sell personal data, never share it for advertising, and never use it to train AI models.

Legal bases (GDPR Art. 6): answering your enquiry and delivering work — contract / pre-contractual steps (6(1)(b)); keeping business and tax records — legal obligation (6(1)(c)); site security via hosting logs and the outreach described in §4 — legitimate interest (6(1)(f)), which you can object to at any time by emailing us.

4. If we emailed you first

Uppervox occasionally sends individual, hand-written introductions to businesses, using contact details published on their own websites — never purchased lists. Legal basis: legitimate interest in reaching businesses that may benefit from our services (GDPR Art. 6(1)(f)); every such email complies with CAN-SPAM. If you reply "no thanks" — or ask in any form — we delete your details from our records and never contact you again.

5. Who processes data on our behalf

Each of these processes data under its own terms and safeguards, including for transfers between the EU and the US. We share nothing with anyone else, except if a law compels us.

6. How long we keep it

Correspondence is kept as ordinary business records for as long as it stays relevant — typically up to 3 years after our last exchange, longer only where bookkeeping or tax rules require it. Opt-out requests are kept permanently, because that's how we make sure we honor them. Ask us to delete your data sooner and we will, unless a legal obligation says otherwise.

7. Your rights

Wherever you are, you can ask us to: show you the data we hold about you, correct it, delete it, stop using it, or hand it over in a portable format. One email to hello@uppervox.com does it — no forms, no fee. If you're in the EU/EEA or UK you additionally have the right to complain to your data-protection authority; if you're in California, we don't sell or share personal information as defined by the CCPA/CPRA, and we don't discriminate against anyone for exercising privacy rights.

8. Security

The site is static — there is no database of user accounts to breach. Everything is served over HTTPS with strict security headers, and access to our email is protected by two-factor authentication. No system is perfectly secure, but our best protection is structural: we simply hold very little.

9. Children

Uppervox is a business-to-business service and not directed at children under 16. We don't knowingly collect children's data; if you believe a child has sent us personal information, tell us and we'll delete it.

10. Changes

If we ever add a tool that collects data — analytics, a newsletter, anything — we'll update this page first and change the date at the top. A policy that doesn't match what the site actually does is worthless; this one is checked against the site's real behavior.

Legal Notice

Site operator & publisher

Uppervox is the trading name of Alexander Costa, an independent digital-services professional — not an agency, not an incorporated company. Boston, MA, United States · hello@uppervox.com · governing law and full engagement terms: Terms of Service.

All content, design, and brand assets on this site © Alexander Costa. Third-party names and marks (including Smith.ai, Ruby, Rosie, Otterly, Peec, Scrunch, Profound, Storyzee and others referenced in comparisons) belong to their respective owners; comparisons are editorial, based on cited public sources, and imply no affiliation or endorsement.

Plain-English summary: we collect almost nothing, we track nothing, and what you send us stays between us. This page is a general statement, not legal advice — and like our terms, it gets a professional legal pass as the practice grows.