Version history

Upwork's Privacy Policy and related governing documents were updated in an update detected on July 21, 2026, with version increments to the User Agreement (8.1 to 8.2), Fixed Price Escrow Instructions (4.8 to 4.9), and Fee and ACH Authorization Agreement (12.7 to 12.8). The updated documents formalize escrow company name changes from Upwork Escrow Inc. to Payment Escrow Inc., introduce explicit rules governing bulk payment actions and bidirectional offer acceptance mechanics, clarify that bulk milestone funding and release instructions constitute separate independent transactions with distinct transaction identifiers and dispute rights, and add language regarding dormant ACH payment method inactivation after 24 months of non-use. These changes establish more granular procedures for how multi-transaction payment sessions are recorded, authorized, and subject to dispute assistance, and introduce proactive notification requirements for ACH inactivation.

Upwork added a new Upwork Now Beta Addendum effective July 8, 2026, governing a pilot program that allows clients and freelancers to signal real-time interest and availability using automated matching and faster session-based workflows. The addendum permits Upwork to use AI and machine learning to automatically invite freelancers, conduct A/B testing, and collect feature usage and diagnostic data to improve the beta experience. The updated privacy policy now discloses these data practices and clarifies that due dates are not legally binding unless explicitly agreed in the contract, and that clients must maintain a positive account balance to send unsolicited offers.

Upwork updated its MCP Beta Participation Terms from version 1.1 to 1.2, effective July 7, 2026. The document was reformatted with added section numbering (1-9 visible in the diff), and some language was reorganized. The substantive scope appears consistent: the terms govern participation in Upwork's Model Context Protocol beta, establish that certain financial and autonomous actions remain out of scope, require users to attribute Agent-generated content, and clarify ownership of materials produced by the Agent during beta participation.

Upwork introduced new terms governing access to its Model Context Protocol (MCP) Beta, a limited invitation-only feature that allows third-party AI agents to perform certain actions on the platform on a user's behalf. The MCP Beta establishes three tiers of agent capabilities: Read Actions (search, view information, draft content without confirmation), Draft-Confirm Actions (agent prepares actions like submitting proposals or posting jobs, user confirms before execution), and Binding Actions (contract creation and money movement, which remain restricted to authenticated user action only). Users who connect an AI agent to Upwork authorize the agent to act within these defined limits and are responsible for all agent actions; agent-generated communications must carry a mandatory disclosure label, and users cannot represent agent-generated content as human-created.

Upwork removed detailed language about its compliance with the U.S. Data Privacy Framework (a legal mechanism for transferring personal data from Europe and Switzerland to the U.S.) but kept a single sentence stating you can request copies of data transfer documents. This means the policy no longer explicitly commits to Data Privacy Framework protections or acknowledges regulatory oversight, which may create uncertainty about how your data is legally protected if you are in the EU, UK, or Switzerland.