Upstage

Upstage · Model API · KR · www.upstage.ai

Last verified 2026-09-16
Entry services/upstage.yaml
Training on your data (default tier)
User-input data is masked for personal information on storage and may be used for AI model training
Retention
Membership data until withdrawal; non-member data one year; editing text three months
Data residency
Korean company; personal information transferred overseas to cloud servers, with the United States and France named; refusing the transfer may restrict service use

Vendor data-handling terms

Training on your data (default tier)
User-input data is masked for personal information on storage and may be used for AI model training

The statement sits in the service-provision section of a Korean-law policy that covers the console, Solar Chat and the API. Enterprise deployments via AWS, Azure or Snowflake marketplaces run under those platforms' terms.

“※ User-input data is subject to personal information masking upon storage and may be used for AI model training.”
checked 2026-09-16
Upstage Privacy Policy
Retention
Membership data until withdrawal; non-member data one year; editing text three months
“Non-member services: Information collected through non-member services will be retained for one year and deleted thereafter in accordance with our Privacy Policy. / However, editing text is retained for 3 months.”
checked 2026-09-16
Upstage Privacy Policy
Data residency
Korean company; personal information transferred overseas to cloud servers, with the United States and France named; refusing the transfer may restrict service use
“Personal information may be transferred via network transmission when processed on cloud servers managed by the company at the time of collection. / Refusing the overseas transfer of personal information may result in restrictions on the use of the Upstage service.”
checked 2026-09-16
Upstage Privacy Policy, Transfer of Personal Information Overseas

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
api.upstage.aiapiobserved

Assessment

Console, Solar Chat and self-serve API: high

Reasoning: A Korean LLM and document-AI vendor. The policy states that user inputs may be used for model training after masking, which is a weaker protection than an exclusion, and data moves to overseas cloud servers. Document-parsing inputs are exactly the kind of content that should not train a vendor model. Marketplace deployments are a separate question.

Flags: User inputs may be used for model training after masking · Overseas transfers with named destinations only in the policy table · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training, retention and transfer terms verified against the Upstage privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Spotted something wrong or out of date? Send it with the source. Changes are checked and recorded in the changelog.

Goes to info@unseensecurity.ai