Privacy policy
Effective 21 August 2026 · Version 2026-08-21
This policy explains what personal data Upatr AG processes when you visit this website or use the Upatr services (Atlas, Meridian and related tools), why we process it, who receives it and what rights you have. We keep it deliberately short, because we deliberately collect little: there is no advertising, no tracking, no profiling and no analytics software on this site, and no payment card data ever reaches our systems.
1. Who is responsible
The controller for the processing described here is Upatr AG, Switzerland. The full provider details are set out in our legal notice. For any question about your data, or to exercise any of the rights described below, write to info@upatr.com.
2. What we process
Account data: the name, email address and password you provide when creating an account (the password is stored only as a cryptographic hash, never in readable form), and optionally the user type you select so that we can price fairly. Consent record: the date, version and language of the Terms of Service you accepted. Subscription and billing data: your subscriptions, their status and periods, the prices applied, your account balance and every credit or charge booked to it. Usage data: how many searches you have used against your allowance, and the queries you run in the products together with the results generated for you. Technical data: a session cookie that keeps you signed in, and standard server records created when your browser requests a page. We do not process any special categories of personal data, and we do not knowingly collect data from children.
3. Why we process it, and on what basis
We process your account and billing data to provide the services, to give you access to what you have paid for, to bill correctly and to keep the accounting records the law requires of us. We process usage data and queries to operate the services, to enforce fair-use allowances, to keep the platform secure, and to analyse and improve how our search and analysis work. The legal basis is the performance of our contract with you, our legitimate interest in operating and improving a secure service, and — where they apply — our statutory obligations. Where the law requires your consent, we ask for it and you may withdraw it at any time.
4. Payments — no card data with us
Card payments are handled entirely by Stripe. Payment pages are served by Stripe, card numbers are entered on Stripe's systems, and Upatr never receives, sees or stores your card details. What we store is the identifier Stripe assigns to your customer and subscription, plus the amounts and dates needed for your account and our books. To create a payment, your email address is passed to Stripe.
5. Cookies
We use only cookies that are strictly necessary: a session cookie that keeps you signed in after you log in, and the technical cookies our framework needs to serve pages correctly. We do not use advertising, tracking, profiling or analytics cookies, so there is nothing here for you to consent to or opt out of.
6. Who receives your data
Stripe (Stripe Payments Europe and its group companies) as our payment processor. Our own services Atlas and Meridian, which receive your name, email address, user type and access rights so that a single sign-in works across the platform. Our hosting provider, which operates the servers on which the platform and its backups run. When a page displays a map, your browser requests the map tiles directly from the Swiss federal geoportal (swisstopo), which therefore receives your IP address. This happens on the home page even if you never create an account. We do not sell personal data, and we do not pass it to third parties for their own marketing.
7. Where your data is stored
The platform runs on servers located in Germany, within the European Union, as do its backups. Stripe processes payment data within the EU and, for its group operations, may transfer data to the United States under the safeguards its data-processing terms provide. Switzerland and the EU recognise each other's data-protection regimes as adequate, so no additional transfer instrument is required between them.
8. How long we keep it
We keep your account data for as long as your account exists. Accounting and billing records are retained for ten years, as Swiss commercial law requires. Queries and their results are kept for as long as they are needed for the purposes described above; where we use them for longer-term analysis of how our search performs, we do so in a form that no longer identifies you wherever that is possible. When you ask us to delete your account, we delete or anonymise what is not covered by a statutory retention duty.
9. Security
We protect your data with appropriate technical and organisational measures: encrypted transport (HTTPS) for every connection, passwords stored only as salted hashes, access to production systems restricted to the people who need it, and regular backups. No system can be guaranteed absolutely secure, but we treat the loss or exposure of your data as the failure it would be.
10. Automated processing
Our services generate search results, rankings, scores and AI-assisted answers. These are informational outputs about land, not decisions about you: we take no automated decision that produces a legal effect for you or similarly significantly affects you. All results can be wrong or incomplete and must be verified before you rely on them.
11. Your rights
You may ask us for a copy of the personal data we hold about you, have inaccurate data corrected, ask for deletion, object to processing based on our legitimate interests, and — where it applies — receive your data in a portable form. Write to info@upatr.com and we will respond within the periods the law sets. If you believe we handle your data unlawfully, you may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU, to your national supervisory authority.
12. Changes to this policy
We may update this policy as the services develop or the law changes. The version published on this page applies; the date at the top tells you when it last changed. For material changes affecting how we use your data, we will notify you in an appropriate way.
See also our Terms of Service · Legal notice