UpCodes presents moderate risk for professional use. While the platform provides valuable building code research tools, it explicitly collects and shares user data with third parties including Building Product Manufacturers, lacks clear opt-out mechanisms for AI training, and disclaims liability for AI-generated advice. The service offers reasonable data ownership terms but requires careful consideration for sensitive or proprietary use cases.

AI Transparency Facts

Input Data Ownership

Low Risk

Users retain ownership of their input data. UpCodes receives only a license to use the data for providing and improving their services, not ownership rights.

Confidence

90%

Output Data Ownership

Low Risk

The policies do not claim ownership over AI-generated outputs or user-created content. Users appear to retain rights to any outputs generated through the service.

Confidence

70%

Training Data Usage

Moderate Risk

UpCodes can use all user data to 'improve' their products and services, which likely includes AI model training. No explicit opt-out for training use is provided.

Confidence

85%

Data Retention & Deletion

Moderate Risk

Data is retained for as long as necessary for business purposes with no specific deletion timelines. Users can presumably delete their accounts, but the irrevocable license grant suggests data may persist.

Confidence

80%

Third-Party Data Sharing

Moderate Risk

UpCodes shares user data with Building Product Manufacturers when users interact with their content, which is integral to the service. They also share with analytics and advertising partners. The sharing appears disclosed and limited to service purposes.

Confidence

90%

Opt-Out Rights

Moderate Risk

Limited opt-out rights are available for marketing communications and cookie tracking. Nevada residents can opt-out of data sales. No explicit opt-out for AI training or general data collection is provided.

Confidence

85%

Compliance & Certifications

Moderate Risk

UpCodes mentions CCPA compliance and provides California and Nevada privacy rights. No security certifications like SOC 2 or ISO 27001 are mentioned. GDPR is not explicitly addressed.

Confidence

80%

Model Explainability & Auditability

High Risk

No transparency into AI model behavior or enterprise auditing capabilities are provided. The service explicitly warns about AI limitations without offering explainability features.

Confidence

90%

Security Practices & Breach History

Moderate Risk

Generic security measures are described without specific controls or certifications. No breach history is disclosed, and no dedicated security page is referenced.

Confidence

75%

Enterprise vs. Consumer Risk Delta

Low Risk

Enterprise accounts have additional payment options and potentially different service levels, but data handling practices appear consistent across tiers with no material disadvantages for either tier.

Confidence

80%

Human Review of User Inputs

Moderate Risk

UpCodes reserves broad rights to access user data for support and service improvement purposes. No explicit human review policy is stated, but the data license suggests potential access.

Confidence

70%

Regulatory & Litigation Exposure

Low Risk

Standard legal cooperation language is included. No specific litigation or regulatory issues are disclosed. DMCA compliance procedures are in place.

Confidence

85%

PII & SPI Data Inventory

Moderate Risk

UpCodes collects standard PII including names, emails, device IDs, and IP addresses. They also collect financial data for payments. No highly sensitive data like health information or biometrics is mentioned.

Confidence

90%

You've read all 15 risk ratings for UpCodes. Create a free account to see the exact policy wording behind each rating.