Last Revised: June 12th, 2018

Upshift collects certain types of data from you when you use our website and Service. A “data controller” refers to the person or organization that decides the purposes for which and the way in which any collected personal data is processed. This privacy policy applies when Upshift is the data controller with regards to the collected data referenced in this policy. Upshift’s address is: Upshift, 981 Mission St, San Francisco, CA 94103 USA.

Data Collected

You provide personal data about yourself, such as your name, e-mail address, mobile phone number/carrier, etc., when you register for an account. When using the Service, you also provide certain additional personal data, which may include your driver’s license number and information, zip code, date of birth, credit card information, billing address/zip code, and any addresses used for vehicle deliveries. When you log in to Upshift’s website, you also provide your device’s IP address. Upshift also may collect certain data about your website usage and interaction. In some cases, we collect this data through pixel tags, cookies, and similar technologies.

When you use the Service, Upshift also collects vehicle location tracking information to coordinate vehicle return logistics.

We may collect background check data. This may include data such as your driving record. A third party may collect this information on Upshift’s behalf.

Data Processors

In some cases, Upshift uses third-party service providers as data processors to process personal data. Data is collected and/or shared to the extent necessary to enable such processing. These data processors include Mailchimp, Stripe, Checkr, HubSpot, Front, Twilio, Google Sheets, Google Analytics, insurance providers and their agents, and other service providers that facilitate processing of data to enable the Service to function.

Upshift’s Use of Your Data

We use the personal data you submit to operate, maintain, and provide you with the Service. The legal bases for the processing of your data are our legitimate interests, namely the management of our customer relationships and the administration of our website and business and, in some cases, your consent.

By providing Upshift your email address, you consent to our use of the email address to send you Service-related email, including any notices required by law, in lieu of communication by postal mail. By providing Upshift your cell phone number, you consent to our using of the phone number to send you Service-related SMS messages. BY SIGNING UP FOR AN ACCOUNT ON UPSHIFT AND PROVIDING YOUR PHONE NUMBER, YOU AGREE TO RECEIVE TEXT MESSAGES FROM US.

You may opt out of Service-related emails or SMS messages by sending us an email at Please be aware, however, that service-related emails and SMS messages are necessary for Upshift’s communication with customers using the Service, and, should you choose to opt out, your access to the Service may be restricted or discontinued.

We may also use your email address and/or cell phone number to send you optional messages, such as updates, improvements, or offers. If you do not want to receive the optional messages, you may opt out or change your preferences for email by clicking “unsubscribe” in the email and you can opt out of optional SMS messages at any time by texting “STOP” to 415-319-8774. After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have been unsubscribed from the optional messages. After this, you will no longer receive optional SMS messages from us. If you want to receive optional messages again, just text us and we will start sending SMS messages to you again. You can also contact Upshift at Opting out of optional messages may prevent you from receiving messages regarding updates, improvements, or offers.

As always, message and data rates may apply for any messages sent to you from us and to us from you. If you have any questions about your text plan or data plan, it is best to contact your wireless provider. For all questions about the services provided, you can send an email to

Your Upshift account gives you access to the services and functionality that we may establish and maintain from time to time and in our sole discretion. We may maintain different types of accounts for different types of Users. If you open an Upshift account on behalf of a company, organization, or other entity, then (a) “you” includes you and that entity, and (b) you represent and warrant that you are an authorized representative of the entity with the authority to bind the entity to this Agreement, and that you agree to this Agreement on the entity’s behalf.

Privacy of Persons Under the Age of 16

Upshift will not knowingly allow persons under the age of 16 to register for the Service or collect personal data from anyone under the age of 16. If you are under 16, please do not send any data about yourself to us, including your name, address, telephone number, or email address. In the event that we learn that we have collected personal data from a person under the age of 16 without verification of parental consent, we will delete that data as quickly as possible. If you believe that we might have any data from or about a person under the age of 16, please contact us at

Protection of Your Data

We use commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your personal data. Once we receive your transmission of data, we make commercially reasonable efforts to ensure the security of Upshift’s systems. This is not a guarantee that such data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

To protect your privacy and security, we take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your account. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications, at all times.

Collected personal data will be retained for no longer than is necessary to fulfill the purposes for which it was collected or as required by applicable laws or regulations. Personal data processed by Google Analytics will be retained for a maximum of fifty (50) months after the date of collection, or as required by applicable laws or regulations.

Transfer of Data

Your data may be transferred, stored or processed on servers outside of your home country. Where this is the case, we transfer data on the basis of mechanisms approved under applicable laws, and will take steps to make sure the right security measures are taken so that your privacy rights continue to be protected as outlined in this privacy policy. By submitting your personal data, you’re agreeing to this transfer, storing or processing.

Your Rights and Choices About Your Data

You may decline to submit personal data to Upshift, in which case Upshift may not be able to provide certain services. You may update or correct your account information and email preferences at any time by logging in to your account or ask us to remove data you think is inaccurate.

Please be aware that you have the following additional rights with regards to your personal data:

Access to personal data: This is your right to request a copy of the personal data that we hold about you. If you would like a copy of some or all of your personal data, please email us at or write to us at the following address: Upshift, 981 Mission St, San Francisco, CA 94103 USA.

Deletion of personal data: Should you wish for Upshift to delete your personal data, please email us at or write to us at the above mailing address. Please be aware that data may be retained despite a request for deletion in certain situations, including where processing is required for Upshift’s compliance with a legal obligation or Upshift’s establishment, exercise or defense of legal claims.

Restrict/suspend/object to processing of personal data: In certain circumstances, you have the right to restrict or suspend processing of your personal data, as well as the right to object to the processing of your personal data. You also have the right to object the processing of your personal data for direct marketing purposes.

Complaining to an authority: If you feel that your personal data has been processed in a way that does not meet the requirements of the law, you may lodge a complaint with a relevant supervisory or regulatory authority.

Data Portability: When processing of personal data is based on consent or contract, and carried out by automated means, you have the right to receive the personal data which you have provided to Upshift in a structured, commonly used and machine-readable format, and have the right to transmit that data to another controller without delay.

Withdrawal of consent: When processing of personal data is based on consent, you may withdraw your consent at any time by emailing us at

Changes to Upshift’s Privacy Policy and Questions

If we change Upshift’s privacy policies and procedures, we will post those changes on our website to keep you aware of what data we collect, how we use it and under what circumstances we may disclose it. Changes are effective when they are posted on this page. We encourage you to periodically review this policy for the latest information on our privacy policies.

If you have any questions about our privacy polices, please contact us at