Privacy
Last updated: 5 October 2026
This notice explains what personal data the upstrm.ai Vaca Muerta Atlas (atlas.upstrm.ai) collects, what it is used for, who it is shared with and how long it is kept. The atlas data itself (wells, production, map layers) comes from public registries and holds no personal data about you.
What we collect
- Account: your email, your name if your sign-in provider gives it (Google, Microsoft, or email and password), your access (plan, team, invitations, expiry) and your atlas preferences (language, units, saved views).
- Data requests: each request that returns data (API, MCP, the assistant or the atlas) is logged with your email, the request, the number of rows and the time, to enforce your plan's limits and for security.
- Usage analytics: while you use the atlas we record, tied to your account, what you search for (the text, up to 60 characters), the filters, layers, panes and views you use, the wells or operators you click, the buttons, tabs and sections you open, your screen size and page errors. We do not record keystrokes, the text of your questions to the assistant, or your IP address. Only administrators see it, to improve the product.
- AI assistant: your questions, the answers, your rating and comment if you give one, and the page context (version, language, what you have selected on the map, the view, layers, filters and map extent, and in support mode your browser and screen size). Briefs from a card's Ask button are kept without anything about you and reused for anyone who asks for the same brief.
- Support: the messages you send us, with any context you choose to attach.
- The Cancel a purchase and Cancel the service forms (botón de arrepentimiento and botón de baja): the email, name and note you enter, the request's code and what was done with it (kept with the payment records).
- Two-step sign-in (if you turn it on or your team requires it): your authenticator app's secret key; a hash of each recovery code; the browsers you chose to trust (up to 30 days); and, in the security log, when you added, used or removed a method and whether an administrator reset it. We never store the codes you type or write them to any log. We don't ask for your phone number.
- API and MCP tokens: we keep only a hash of each token, with its name, scope, and last-used and expiry dates.
- Payments: card details are collected by Stripe or Mercado Pago, never by us. We keep your email, the plan, the amounts, the payment status and the processor's customer and subscription ids.
- Pad feedback: the labels and notes you leave on satellite pads.
What we use it for
- To give you access to the atlas under your plan or team, and to bill subscriptions.
- To answer your questions to the assistant and your support requests.
- To apply usage limits, prevent abuse, and keep the service secure and running.
- To understand how the atlas is used so we can improve it. We do not sell your data or use it for advertising.
Who we share it with
Only with the providers that run the service for us, each for its own part:
- Google Cloud and Firebase (USA): hosting, database, sign-in and the verification email.
- Anthropic (USA): processes questions to the AI assistant to produce the answers.
- Stripe and Mercado Pago: process payments.
- Google or Microsoft, if you sign in with them.
- Your browser loads fonts from Google Fonts and satellite imagery from Esri and Microsoft Planetary Computer; those services see your IP address when they serve it.
If your account belongs to a team plan, the plan owner sees who holds a seat. We may disclose data where the law requires it. Because these providers are outside Argentina, your data is transferred internationally to provide the service.
How long we keep it
- Usage analytics: 90 days.
- Assistant questions: 180 days, or up to two years if you rated them.
- Support requests: 180 days after they are closed.
- Two-step sign-in: your methods and numbers while you keep them on (deleted when you remove them); trusted browsers, 30 days.
- Account, preferences, request logs and payments: while you have an account, and payment records for as long as the law requires.
Browser storage
The atlas sets no advertising cookies. Its one cookie of its own, __session, appears only if you use two-step sign-in: it remembers that this browser already entered the code (until you close the browser, or 30 days if you chose to trust it). It keeps your settings (language, units, views) in the browser's local storage, along with a cache of atlas data. Firebase keeps your signed-in session in the browser.
Your rights
You can ask for access to your data, its correction, or its deletion (which removes your account) by writing to the address below or using Contact support in the atlas. We answer within the time limits of Argentina's Personal Data Protection Law 25.326. The Agency for Access to Public Information (Agencia de Acceso a la Información Pública), which oversees that law, handles complaints about breaches of the personal data protection rules.
Data credits
Some atlas layers use open data or services whose licences ask for this acknowledgement:
- Secretaría de Energía de la Nación, open data (CC BY 4.0).
- Contains modified Copernicus Sentinel data (2026).
- NASA FIRMS, VIIRS (NASA and NOAA).
- SEGEMAR, 1:250,000 geological sheets (CC BY).
- Imagery: Esri, Maxar, Earthstar Geographics and the GIS User Community.
Changes and contact
If we change this notice we will update the date above. For any privacy question: