Last updated: June 10, 2026
UpDrift is built and operated in the European Union, and the General Data Protection Regulation (GDPR) is the baseline for how we handle personal data.
For data collected through this website and for the account data needed to run the service, UpDrift acts as data controller.
For personal data your organization adds to its workspace — such as applicants, contacts, and members — your organization is the controller and UpDrift processes that data on its behalf and under its instructions.
We process personal data on the lawful bases described in our Privacy Policy: performance of a contract, legitimate interests, legal obligations, and consent where required.
As a data subject in the EU, you have the right to:
Contact us using the details below and we will respond within one month, as the GDPR requires. If your data lives in an organization workspace, we may refer your request to that organization as the controller, and we will assist it in fulfilling your request.
We store data in the European Union where possible. Where a provider processes data outside the European Economic Area, the transfer is covered by appropriate safeguards such as the European Commission Standard Contractual Clauses.
We use a small number of vetted service providers — for hosting, email delivery, analytics, and payments — each bound by a data processing agreement that imposes GDPR-equivalent obligations.
You have the right to lodge a complaint with your local supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
If you have any questions about GDPR or data protection, contact us at [email protected].