Privacy Policy

Last Updated: January 2025

Our Commitment to Privacy

Practicing higher security and privacy standards than required by our home state of California, Universal Informatics LLC grants you universal rights to (1) know exactly what is stored on your behalf by our services, and (2) remove any and all of that information.

Information We Collect and Store

What We Track: Nothing

Although your browser provides us with telemetry information, we discard that data. We do not track your browsing behavior, preferences, or usage patterns beyond what is strictly necessary to provide the service.

What We Store

We store only the information necessary to provide you with our AI assistant services:

• AI-Generated Analytics: Summaries and analysis of your emails to help with prioritization and management
• Contact Information: A copy of your contacts to enable scheduling and communication features
• Conversations: Your chat history with our AI agents to maintain context and continuity
• Explicit Data: Any other information you explicitly enter into our system (tasks, notes, knowledge base entries, etc.)
• Account Information: Email address, display name, and authentication credentials

What We Do NOT Store

• Your passwords - these are handled discreetly by Google Firebase Authentication
• Unnecessary telemetry or tracking data
• Third-party cookies for advertising purposes

Data Sharing

What We Share: Nothing

We do not sell or share your data in any form, anonymized or otherwise, with third parties. Your information is yours and yours alone.

Service Providers

We use trusted service providers to deliver our services:

• Google Cloud Platform: For hosting, database (Firestore), and authentication services
• OpenAI: For AI language model capabilities (we send only necessary context)
• Email/Calendar Providers: As authorized by you to access your Gmail, Outlook, or other integrated accounts

These providers are bound by strict data protection agreements and process data only as necessary to deliver the service.

Data Security

Where We Store Your Data

All data is stored in Google Firestore under the highest Google-grade security measures, including:

• Encryption at rest and in transit
• Regular security audits and monitoring
• Access controls and authentication requirements
• Compliance with industry security standards

Your Rights (California and Beyond)

California Privacy Rights (CCPA/CPRA)

As a California-based company, we comply fully with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). You have the right to:

• Know: What personal information we collect, use, and share
• Access: Request a copy of your personal information
• Delete: Request deletion of your personal information
• Correct: Request correction of inaccurate personal information
• Opt-Out: Opt out of the sale or sharing of your personal information (note: we don't sell or share)
• Non-Discrimination: Exercise your rights without discrimination

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@uniformatics.com. We will respond to your request within the timeframes required by applicable law.

Cookies and Tracking Technologies

Necessary Cookies Only

We use only strictly necessary cookies and local storage to:

• Maintain your login session
• Manage security and authentication
• Store minimal configuration preferences

No Non-Essential Tracking

We do not deploy cookies or tracking technologies for:

• Advertising or marketing
• Cross-site tracking or profiling
• Analytics beyond what's necessary for service operation

Do Not Track

We respect "Do Not Track" browser settings. Since we don't track users for advertising or analytics purposes, these settings are honored by default.

Data Protection Roles

U.S. Privacy Laws

Under U.S. privacy laws (including CCPA/CPRA), you are generally the "business" and we act as your "service provider" or "contractor," processing your data solely on your behalf.

Purpose Limitation

We process your data only to:

• Provide, secure, support, and improve the service for you
• Comply with applicable laws and regulations
• Fulfill the purposes described in this policy

Children's Privacy

Our service is not designed for or directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

Data Retention and Deletion

We retain your data only as long as necessary to provide our services or as required by law. Upon termination of your account or upon your request, we will:

• Delete your personal data from our active systems within 30 days
• Remove your data from backups according to our standard backup rotation schedule
• Retain only what is required for legal, accounting, or security purposes

International Data Transfers

Your data may be processed in the United States where our infrastructure is located. We ensure appropriate safeguards are in place for any cross-border data transfers in compliance with applicable data protection laws.

Security Incident Response

In the unlikely event of a security incident affecting your data, we will:

• Notify you without undue delay
• Provide information about the incident and affected data
• Describe the measures we're taking to address it
• Comply with all applicable breach notification laws

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: