Privacy Policy
Last updated: July 28, 2026
A. Alpha Release — Scope of This Policy
The Service is in an alpha state. Our security and privacy practices are still developing, have not been independently audited or certified, and may change without notice.
We make no representation that the Service meets the requirements of any privacy or security framework, including SOC 1, SOC 2, SOC 3, ISO 27001, GDPR, UK GDPR, CCPA/CPRA, HIPAA, or PCI DSS. We do not currently offer a data processing agreement, standard contractual clauses, or a business associate agreement.
Do not submit personal data of others, special-category or sensitive personal data, health data, payment card data, or any data whose handling is subject to a regulatory requirement. The Service is intended for evaluation and testing, and you should assume it is not a suitable place for such data.
This Section describes the scope of our practices. Your acceptance of risk and the allocation of liability are governed by Section A of our Terms of Service. Nothing in this policy limits any right you have under applicable data protection law, or any obligation we have under it.
1. Information We Collect
1.1. Automatically, as you use the Service:
- IP addresses
- Request timestamps and access logs
- API request parameters and URLs accessed
- API keys and associated account information
- Browser and device information from HTTP headers
- Error logs and diagnostic data
- Volume of data transferred, per account and per session, which is how usage is measured and charged
1.2. Account and profile information you provide when registering and during onboarding: your email address and name (handled by our identity provider), display name, account type, company name and website where given, the purposes for which you intend to use the Service, and a record of which version of our terms you accepted and when.
1.3. Billing information: your customer and subscription records, subscription status, payment and invoice history, prepaid balance, and records of funds added or consumed. We do not receive, process, or store your card details. Payment card information is entered directly with our payment processor and never reaches our systems.
1.4. Assistant conversations. If you use the built-in AI assistant, the messages you send and the results it produces are processed to generate a response and may be retained to operate and improve the feature. Do not include confidential or personal information in those messages.
2. How We Use Your Information
We use the collected information for:
- Providing and maintaining the service
- Measuring the data you consume, charging for it, and administering your subscription, balance, and invoices
- Operating the AI assistant when you use it
- Monitoring usage and preventing abuse
- Improving service performance and reliability
- Communicating with you about your account, including payment receipts and failures
- Enforcing our Terms of Service
- Complying with legal obligations
3. Data Retention
We retain usage logs and access data for a reasonable period necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Session data is automatically purged after periods of inactivity.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information in the following circumstances:
- Law Enforcement: We will disclose information to law enforcement agencies upon valid legal request, including subpoenas, court orders, or other lawful demands
- Legal Compliance: When required by applicable law or to protect our legal rights
- Safety: To prevent fraud, abuse, or illegal activity
5. Service Providers
We rely on third parties to operate the Service. They receive only what they need to perform their function, and they process it on our behalf:
- Identity and authentication — your email address, name, and sign-in credentials are held by our identity provider rather than by us
- Payments — our payment processor handles card details, charges, and invoices directly. We receive confirmation and status, never the card itself
- Cloud hosting and database — the Service and its data run on third-party cloud infrastructure
- Proxy and network providers — scrape requests are routed through third-party proxy networks, so the URLs you request and the traffic they carry pass through those providers
- AI model provider — if you use the AI assistant, your messages are sent to a third-party model provider to generate a response
These providers may process and store information outside your country of residence. We do not currently offer standard contractual clauses or a data processing agreement — see Section A.
6. Security
We implement reasonable security measures to protect the information we collect. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
7. Websites You Scrape
Our service may interact with third-party websites when processing scrape requests. We are not responsible for the privacy practices of websites you access through our service. The content retrieved is returned to you and not stored by us beyond temporary processing.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.
9. Contact
For questions about this Privacy Policy, contact us at hello@uelabs.ai