GetAUP
Privacy
Last updated June 1, 2026
GetAUP is a tool for building a practical AI Acceptable Use Policy for your business. We designed it to be privacy-respecting by default: you can build a policy without signing up, and the policy builder has no backend that stores what you enter. What we do keep is covered below: an account and its saved policies if you buy a toolkit, and anything you send us through the contact form.
Accounts
You can build and preview a policy without an account: no signing up, no logging in, no email address. An account only comes into it if you buy a toolkit, and it is tied to the email address you use at checkout. Signing in is by a link we email you — there is no password to choose or for us to store.
For an account we keep your email address, what you purchased, and any policies you save to your dashboard, so they are still there when you come back.
What we collect
Nothing from the policy builder. It runs entirely in your browser. Your answers — company name, industry, selected tools, and rules — stay on your device and are never sent to a server or saved to a database. Closing or refreshing the page clears them. The contact form is the exception, and it is covered next.
Contact form
When you send us a message through the contact form, we store the name, email address, topic, and message text you entered. We also email that submission to the GetAUP support address, because a person has to read it to answer you.
If you are signed in when you send it, we attach the email address on your account and the toolkit tier you purchased. That way support has the context to help you without asking you to repeat it. Nothing else about your account is included.
We keep contact submissions for up to 12 months so we have a record of the conversation, then delete them. We do not use the address you give us for marketing, and we do not sell it or pass it to anyone beyond the email provider that delivers the message to us.
Cookies & analytics
We use Vercel Analytics to count page views and see which pages people reach. It is aggregate traffic measurement: it sets no cookies, does not follow you to other sites, and does not build a profile of you. We run no advertising scripts and sell no data to anyone.
The only cookie we set is the one that keeps you signed in after you use an emailed sign-in link, and it exists solely to hold that session. If any of this changes, this page will be updated first.
Questions
The policy builder holds nothing for us to look up, export, or delete on your behalf. Contact submissions are the exception: if you want a copy of what we hold or want it deleted sooner than the retention window above, ask us through the contact form and we will take care of it.