Privacy policy

This policy explains what UpAll collects, why, and what happens to it. The short version: we collect what running a monitoring service requires, we sell nothing, and your workspace's data is isolated from every other.

Who we are

UpAll is a monitoring platform for IT service providers, operated from the Kingdom of Saudi Arabia. For the account and billing data described below, UpAll is the data controller.

What we collect

Three kinds of data, all of it entered or generated by your use of the service: account details (name, email address, language); workspace configuration (your clients, sites, monitors and alert settings); and monitoring output (check results, incident history, and the reports built from them). Billing produces its own records: plan, amount, VAT and invoice number.

What we never hold

Card numbers. Payments are processed by Moyasar, a licensed Saudi payment provider; we receive a confirmation and a renewal token, never the card itself.

Cookies and analytics

Signed-in use of the product relies on session cookies only — they keep you logged in and are not used to profile you. Our public marketing pages (the upall.app landing site and its sign-up pages) load Google Analytics and Google Ads tags so we can measure visits and advertising. These tags run only there: they are never loaded inside workspaces, on client portals, or on any status page.

Sub-processors

We use a small set of providers to run the service, each receiving only what its job requires: Moyasar (payment processing), Amazon Web Services (email delivery), Meta's WhatsApp Business platform (alert messages, where you enable them), and Google (generating the AI incident summaries from incident metadata). Our infrastructure is hosted in the Kingdom of Saudi Arabia.

Where data lives

Your data is stored on our servers in Saudi Arabia. Our distributed probe nodes, which confirm outages from more than one vantage point, hold no personal data — they check reachability and report the result home.

Your clients' data

The client names, sites and contacts you enter belong to your relationship with your clients: there, you are the controller and UpAll is a processor acting on your instructions. What a client sees on a status page or report is decided by you.

Retention and deletion

Monitoring history is kept for the periods your plan states, then pruned. If you close your account we delete your workspace's data, except records the law requires us to keep — tax invoices, chiefly. To request deletion or a copy of your data, contact us.

Security

Each workspace's data is isolated from every other tenant's. Traffic is encrypted in transit, access to production systems is restricted to those who operate them, and backups are stored securely.

Your rights

In line with the Saudi Personal Data Protection Law (PDPL), you may ask what personal data we hold about you, have it corrected, or have it deleted within the limits described above. Write to us through the contact page and we will respond promptly.

Changes to this policy

If we change this policy in a way that matters, we will notify workspace owners by email or in the product. The date at the top always tells you when it last changed.