This policy covers Uplink, the content platform at uplinkcms.com, including its studio, its API and its connector for AI agents such as Claude. Astrion Dynamics operates Uplink. It does not cover the websites our customers build with Uplink: each of those has its own privacy policy, which the site’s owner is responsible for.
What we collect
- Account details: your name, email address and sign-in details, and which workspaces you belong to and in what role.
- Workspace content: what you and your team, or an agent acting for you, put into a workspace: lists and items, images, videos, documents, business details, theme, SEO and legal page text. Our customers control this content. We process it to run the service for them.
- Connections and keys: API keys and agent connections (including the Claude connector), stored only as one-way hashes, with the name of the app that connected, which workspaces it may reach, and when it was created, last used or revoked.
- Activity records: who or which connection changed what in a workspace, and when. These appear in the workspace’s Activity Log.
- Visits to our public pages: we count visits to Uplink’s own public pages, such as this one and the sign-in page, with Uplink Analytics, in the same cookie-free way described below. We do not count what you do inside the studio this way.
- Technical data: standard request logs kept by our hosting provider. To limit abuse of sign-in, we store a one-way hash of the IP address that registers an app, never the address itself.
What the Claude connector sees
When you connect Claude, you choose which workspaces it may reach and whether it may write there. Uplink receives the tool calls Claude makes, such as reading a list or saving a draft, and the content in them. It also receives the domain of the project Claude is working in, so the call reaches the right workspace. Uplink does not receive your conversations with Claude or anything else in your Claude account. What Claude does with the results is covered by Anthropic’s own privacy policy.
Uplink Analytics on our customers’ websites
A workspace’s owner can turn on Uplink Analytics, which counts visits to their website. For it, we process data about the people who visit that website on the owner’s behalf. The owner decides whether to use it, and their website’s privacy policy is the one that tells visitors about it.
- What a page view records: the page, the site that linked to it, campaign tags in the link, the country (from our hosting provider, never a finer location), and the type of device, browser and operating system.
- No IP address and no cookie by default: a visitor’s IP address and browser details are combined with a random value that changes every day, and only the resulting one-way hash is kept. We delete each day’s random value once the day is over, so the same person can’t be followed from one day to the next.
- Returning visitors, only with consent: if the owner turns this on, a visitor who accepts analytics in the website’s cookie banner gets a first-party cookie with a random id, kept for up to 13 months. We store a one-way hash of that id, never the id itself, with the first and last day it was seen and how many visits it made.
- AI tools: when the website reports a visit from a known AI crawler or assistant, we record the tool’s name, its purpose and the page. Nothing about a person.
How we use it
- To run the service: store and serve workspace content to its websites, and let people and agents edit it.
- To keep it secure: check permissions on every request, limit abuse, and keep the Activity Log.
- To suggest image descriptions (alt text) when an image is uploaded, using an AI model.
- To contact you about your account and about changes to the service.
We do not sell personal data, and we do not use workspace content to train AI models.
Who processes it for us
- Supabase: database, file storage and sign-in.
- Vercel: hosting, request logs, and the AI Gateway that sends an uploaded image to an AI model to suggest its alt text.
A workspace’s owner may also connect services of their own, such as analytics or a backup repository.
How long we keep it
- Workspace content stays until the workspace’s owner removes it or the workspace is closed.
- Uplink Analytics page views and AI visits are deleted after 30 days. Only daily totals are kept after that, and they say nothing about any one visitor. A returning visitor’s record is deleted 13 months after their last visit.
- Sign-in codes for connecting an app are deleted a day after they expire. An app that registered but was never approved is deleted after 30 days.
- A revoked key or connection stays on record, so the Activity Log keeps saying who made each change.
Your choices
- You can revoke any agent connection or key at any time in the workspace’s API Keys page, or in Claude.
- You can ask us for a copy of your personal data, or to correct or delete it, by writing to the address below. For content inside a customer’s workspace, we will pass your request to that customer.
Contact
Questions about this policy or your data: privacy@astriondynamics.com. If we change this policy, we will update the date at the top of this page.