Privacy Policy

Above LLC. (“Above Agency”) takes your privacy and security seriously and believes it is important for you to know how your information may be used in connection with your use of our Website and other Services (collectively referred to as “Services”) offered by Above Agency .

By using our Services or submitting any information, including personal information such as your name, email address and other non-public information, you (and, if applicable, an organization that you represent) acknowledge you are bound to the terms of this Privacy Statement. If you do not agree to this Privacy Policy, do not use our Services.

Use Of Personally Identifiable Information (PII)

We aim to record as little as of your personally identifiable information (PII) as possible.

For services that do not require extra information, we only take down a name and email.

Other personally identifiable information (PII) may be requested when requesting relevant services.

Example: Your shipping address for buying a physical product.

Your email may be used to contact you regarding your use of our Services, general coordination, inquiries, and support.

You may create aditional user accounts as part of our using our services. It is important for you to maintain the confidentiality of your account information (i.e. log-in and password), to ensure others do not gain unauthorized access to your PII.

Above Privacy Suite

The Above Privacy Suite provides our customers with private software services. These services are designed and operated to record as little data as possible, and to store data in a secure manner. Your data is never shared in any form with third parties.

This section outlines the data that is collected from use of our privacy services and how we store it.

Email

Our email service (@above.im) allows users to connect to the service using any IMAP/SMTP mail client.

Any emails you receive from our email server will be TLS encrypted in transit. Any emails sent out will be encrypted in transit if your recipient’s email server uses a supported encryption protocol.

Your emails are stored on our servers in plaintext unless you choose to encrypt them yourself (PGP). Our email server uses full disk encryption which prevents physical attackers from accessing your data. Your emails will always be on the server unless you delete them, which deletes the email from our servers immediately.

When you send emails to other external parties (non @above.im emails): the email, its content, and associated metadata will be sent to the corresponding email server. We do not have any control over other email servers. Please keep this in mind when sending email, aim to send email to users with other privacy minded email services.

We recommend choosing an open source mail client void of trackers on mobile and desktop to connect to the email service. Please see our Knowledge Base for recommendations.

Above Agency will never sell or share your email data with third parties in any way whatsoever.

Search

Our search engine acts (Searx) will search major search engines on your behalf, separating your identity and information from your queries.

As you search, we do not log any information about your computer or your queries on our servers. No IP addresses, user agents, or any other information is recorded.

VPN/DNS

Our VPN/DNS service will hide your phone’s internet usage from your Internet Service Provider. It makes requests to websites on your behalf, encrypting all internet traffic, hiding it from your network and internet service provider. Our VPN server will make DNS requests for the websites you visit.

Due to the nature of VPN, when you are actively connected to the service, we can see the IP address of your originating device. As you use the VPN, we do not log your IP, traffic or DNS requests. Once you stop using the service (turning the VPN off on your device), there is no data stored on our servers.

End To End Encrypted Chat

Our end to end encrypted chat service (XMPP) allows you to chat, send files, have calls, and video calls with other XMPP users.

We advise you use an open-source XMPP client on Desktop and Mobile. We recommend the Conversations App or Blabber.im from the F-Droid store for mobile.

You may choose to encrypt your chats and files sent with OMEMO encryption by enabling it within your app. This encrypts the data before it is sent out from your phone. There is no way for us to see the content of your messages if encryption is on. If you leave OMEMO encryption off, this data will be stored unencrypted in plain text.

We highly recommend you use OMEMO encryption when chatting on the service.

Your video & voice calls are automatically end-to-end encrypted using a Secure Real Time Transport Protocol (SRTP). No information is logged or stored on your calls.

Chat history is stored for 30 days on our server, after which chats cannot be recovered by anyone.

Video Conferencing

Our video conferencing service (Jitsi) allows multiple users to join video conferences. Users may connect to the calls using their browsers or mobile app. We recommend users use the official Jitsi mobile app available on F-Droid.

Usage of this service will generate real-time video data, which is not stored or logged after transmission.

Support

Our support application (FreeScout) retains customer information that is used to support you. This information includes email, name/username, message content (for email conversations), and IP addresses.

We never share this information with third parties.

Disclosure of PII

Generally, we will not release your PII to third parties and we limit the amount of PII collected to maximize your privacy.

Above Agency will only release PII:

(i) to protect Above Agency business interests;
(ii) to protect other users of our Services;
(iii) to enforce the terms of this Privacy Policy; and (iv) to comply with a court order (e.g. subpoena).

Above Agency will provide you with notice of the court ordered disclosure of your PII, within 10 days of receipt of such a request.

Limited Use and Duration of your PII

Above Agency and its subscontractors will only use the information you provide in connection with the delivery of Services. Above Agency will not maintain your PII longer than needed.

Children

Use of our Services is intended for adults.

Children under the age of 13 are prohibited from using our Services.

Above Agency does not intentionally collect or maintain PII from those who are under 13 years of age. If Above Agency has actual knowledge of user PII under the age of 13, Above Agency will permanently delete such PII.

By using our Services you affirm that you are at least 13 years old.

Security

Above Agency is committed to protecting the security of your PII; so Above Agency uses a variety of industry-standard security technologies and procedures to help protect your PII from unauthorized access, use, or disclosure. Even though we have taken significant steps to protect your PII, no company, including Above Agency , can fully eliminate security risks associated with PII.

Payment Processing

We provide paid products and/or services on our Website. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processor (Stripe) whose use of your personal information is governed by their Privacy Policy. This can be read here.

Contact and Revisions

Above Agency reserves the right to update this Privacy Policy from time to time. 

If you have questions or concerns about our Privacy Policy, please contact us via the contact form