Privacy Policy
Last updated September 11, 2026
Upsurance ("we," "us") runs upsurance.co, a platform that lists self-pay healthcare prices and helps individuals, families, and employers arrange memberships with local practices. This policy explains what we collect, why, and what we don't do with it. We've written it in plain English on purpose.
The short version
- We collect only what we need to run the service: contact details, account information, and the choices you make on the platform.
- We never sell your personal information.
- Payments are handled by Stripe; we never see or store full bank or card numbers.
- We share information with the practices you choose, so they can care for you — and with nobody else except the service providers that run our platform.
- You can ask us to see, correct, or delete your information at any time at hello@upsurance.co.
What we collect
If you browse the site: standard technical data such as pages visited, device and browser type, and approximate location, collected through cookies and similar tools (see "Cookies and advertising" below). Browsing the provider database does not require an account.
If you create an individual account: your email address and, if you provide them, your name, phone number, and the practices or plans you save or select.
If you are an employer: your company name, your name and work contact details, the benefit budgets you set, your team roster (employee names and work emails), and your invoices. Bank account authorization is collected directly by Stripe; we receive only a confirmation and the last digits of the account.
If you are an employee covered through your employer: your name, work email, the doctor and dentist you choose, and — if your employer's plan includes them — the names and dates of birth of any children you add. We do not collect your medical history, diagnoses, or treatment information; that stays between you and your practice.
If you are a practice: your practice details, contact information, prices, and the terms you accept. Payout bank details are collected directly by Stripe.
If you contact us or submit a form: whatever you include, such as your name, phone, email, business name, and message.
How we use it
- To run the platform: create accounts, show you the right practices, process memberships, send invoices, and pay practices.
- To notify the practice you chose that you're a member, so they can set up your record and know not to bill you at the desk.
- To send service emails: sign-in codes, confirmations, invoices, and roster updates. We send marketing email only if you've signed up for it, and you can unsubscribe any time.
- To answer questions, fix problems, and improve the service.
- To comply with law and protect against fraud or misuse.
Who we share it with
The practices you choose. When you select a doctor or dentist, we send that practice your name, contact details, membership start date, and — for employer-sponsored members — your employer's name, so they can enroll you. We share only what's needed to set up your care.
Your employer, if you're a sponsored member: your employer can see that you're enrolled, which practice you chose, and what it costs them. Your employer cannot see anything about your visits or health.
Service providers that run the platform: Stripe (payments and payouts), Supabase (database hosting), Netlify (website hosting), Resend (transactional email), Twilio (our support phone line), and Meta (advertising measurement on our public marketing pages only). Each is bound to use your information only to provide its service to us.
Legal requirements: if required by law, subpoena, or to protect the safety and rights of people using the service.
We do not sell personal information, and we do not share it with data brokers.
Health information
Upsurance is not a healthcare provider, not an insurance company, and not a health plan. We do not receive your medical records. Where we handle limited information on behalf of a practice, we do so under a written agreement with that practice that restricts how it may be used and requires us to protect it.
Cookies and advertising
We use cookies to keep you signed in and to understand how the site is used. On our public marketing pages we use the Meta Pixel, which lets us measure the results of our advertising and show ads to people who have visited those pages. The pixel is not used on pages where members choose practices or manage their care. You can limit ad tracking through your browser and through your Meta ad preferences.
Keeping it safe
Information is stored with encrypted connections and access controls, and financial details are handled entirely by Stripe, a PCI-certified payment processor. No system is perfectly secure, but we take reasonable steps to protect what you trust us with, and we'd tell you promptly if something went wrong.
How long we keep it
For as long as your account is active and as needed afterward for invoices, tax, and legal records. If you ask us to delete your account, we remove your personal information except what we must keep for those records.
Your choices and rights
You can access, correct, or delete your personal information, opt out of marketing email, or ask us questions about this policy by emailing hello@upsurance.co or calling (516) 927-2771. We'll respond within a reasonable time and never treat you differently for asking.
Children
Our service is for adults. A parent or guardian may add a child's name and date of birth to a family membership; we collect nothing else about children, and we never market to them.
Changes
If we change this policy in a meaningful way, we'll update the date at the top and, for account holders, let you know by email.
Contact
Upsurance · hello@upsurance.co · (516) 927-2771 · upsurance.co