Privacy Policy

Last updated: June 13, 2026

Who we are

Upshot (upshot.masmstudios.com) is a product feedback platform operated by MASM Studios (“we”). This policy covers the Upshot web app, public feedback boards, and the embeddable widget.

What we collect

From workspace admins (our customers)

• Account details: email address, password hash (or your Google account ID if you sign in with Google), workspace name.
• Billing status. Payments are processed by Polar as merchant of record — we never see or store card numbers.
• Optional integration credentials you provide (e.g. a restricted, read-only Stripe API key for revenue sync, a Slack webhook URL). These are stored to provide the feature and used for nothing else.

From voters on public boards

• The content you submit: requests, votes, and comments.
• An anonymous identifier to prevent duplicate votes: a random cookie, plus a one-way hash derived from your IP address and browser characteristics. We do not store your raw IP address with your votes.
• Your email address, only if you choose to leave it to get notified when a request ships. Every notification email contains a one-click unsubscribe link.

From revenue sync (Stripe)

When a workspace connects Stripe, we read customer emails and subscription amounts from their Stripe account to weight votes by revenue. This data belongs to that workspace, is only matched against voters on their boards, and is never shared across workspaces.

What we don't do

• We don't sell or rent personal data to anyone.
• We don't use advertising trackers or third-party analytics cookies on public boards.
• We don't train AI models on your data.

Cookies

• upshot_voter — anonymous voter ID for vote dedupe (public boards and the widget). The widget's copy is partitioned per embedding site.
• Session cookies for signed-in admins.

That's the list — no marketing or cross-site tracking cookies.

Who processes data for us

We use a small set of subprocessors to run the service:

• Vercel — application hosting
• Neon — database hosting (PostgreSQL)
• Polar — payments, as merchant of record
• Resend — transactional email delivery
• Anthropic — AI triage features (request titles/bodies are sent for categorization and drafting only when a workspace uses an AI feature)

Retention & deletion

Board content lives as long as the workspace that owns it. If you're a voter and want your email or contributions removed, or you're an admin and want your workspace deleted, email support@masmstudios.com and we'll complete the deletion within 30 days.

Changes

If this policy changes materially, we'll note it here with a new date and inform workspace admins by email.