Privacy Notice

Last updated: May 27, 2026

1. Who we are

The Sales Compass service is operated by Zvi Piritz Sternfeld, an individual based in Israel ("we", "us"). We act as the data controller for personal data processed in connection with the Service.

2. Data we collect

Account & contact data: company name, contact name, email address, role.
Authentication data: hashed passwords, anonymous respondent resume codes.
Assessment data: answers submitted to the diagnostic questionnaire and resulting scores.
Support data: messages, category selections, and metadata when you contact support.
Usage data: pages visited, timestamps, IP address, approximate location (country, region, city) derived from IP, device and browser type, referring URL, and UTM campaign tags for security, analytics, and abuse prevention. Visit records are automatically deleted after 90 days.
Cookies: essential cookies required to keep you signed in.

3. Why we use it

To create and manage your account and license (contract performance).
To deliver the assessment, calculate scores, and produce AI-assisted analysis (contract performance).
To respond to support requests (contract performance / legitimate interest).
To improve the Service, prevent fraud, and ensure security (legitimate interest).
To comply with legal and tax obligations (legal obligation).

4. Who we share it with

Paddle.com Market Ltd. — our Merchant of Record, who handles payment processing, billing, tax compliance, invoicing, and refunds.
Hosting and infrastructure providers (cloud database, serverless runtime, email delivery) acting as our processors under contract.
AI model providers used to generate analytical commentary on aggregated, de-identified assessment data.
Professional advisers (legal, accounting) where strictly necessary.
Authorities where required by law.

We do not sell personal data.

5. International transfers

Some of our processors are located outside Israel, the UK, and the EEA. Where applicable, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep it

We retain account and assessment data for as long as your license is active and for a reasonable period afterwards to support reporting, dispute resolution, and legal obligations. Support messages are kept up to 24 months. You may request earlier deletion (see Section 8).

7. Security

We use appropriate technical and organizational measures including encryption in transit, hashed credentials, role-based access controls, and database-level row security policies.

8. Your rights

Subject to applicable law, you may request to: access, correct, delete, restrict, or port your personal data; object to certain processing; and withdraw consent at any time. Contact us at support@upstreamglobalapp.com. EEA/UK residents may also lodge a complaint with their local supervisory authority. We aim to respond within 30 days.

9. Children

The Service is intended for business users. We do not knowingly collect data from anyone under 16.

10. Changes

We may update this Notice from time to time. Material changes will be highlighted on this page with a new "Last updated" date.

11. Contact

Email: support@upstreamglobalapp.com