Privacy Policy
Summary
- Your code is sent to our AI provider (Amazon Bedrock, part of Amazon Web Services) only to provide the Service. It is not used to train AI models.
- Code sent for processing is deleted when processing finishes. Results are kept for 30 days.
- This website sets no cookies. The dashboard uses only essential cookies. There are no analytics, advertising or tracking scripts.
- Payments are handled by the payment provider named at checkout; we never receive full card numbers.
- We do not sell your personal data.
- To access, export or delete your data, email support@unified-ai.dev.
1. Who we are
Unified Artificial Intelligence LLC, a New Mexico limited liability company (“we”, “us”), provides the Service (AI tools for software engineers) and this website, and is responsible for the personal data described here. You can reach us, including about privacy, at support@unified-ai.dev.
This policy covers our websites, the account dashboard, our software tools and the hosted service. When a business uses the Service, the business decides what code its people and tools send us. For personal data contained in that code, we process it to provide the Service to that business and on its instructions.
2. Visiting this website
This website sets no cookies and runs no scripts, analytics or tracking. When you visit, our hosting provider (Amazon Web Services) processes your IP address and request data to deliver the pages and keep them secure. If you email us, we use your message and email address to reply.
3. What we collect when you use the Service
- Account data: your email address, name (if you give one), a hashed password or your third-party sign-in identity (such as Google), email verification status, invitations, and your plan.
- Terms acceptance records: which version of the Terms you accepted, when, where (sign-up, dashboard or checkout), your IP address and your browser or client (user agent).
- API keys: we store keys only in hashed form, with their name, creation time and last use.
- Customer Content: the code and other material you or your tools send to the Service, with related identifiers (such as project and change names), and the results we return, which may quote your code.
- Messages and settings you store in the Service, with information your tools report about themselves (such as their name and version).
- Usage and billing data: usage counts, cost, latency, allowance use, subscription status and invoices. Card details are handled by the payment provider; we do not receive full card numbers.
- Request and response content: only if you turn on the setting that allows us to store it (see section 6).
- Technical data: IP address, user agent, software version, timestamps, request ids, errors, and security events such as sign-in attempts and rate-limit hits.
- Messages you send us, for example support requests.
4. How we use it
| Purpose | Legal basis |
|---|---|
| Providing the Service, the dashboard and your account | Performing our contract with you |
| Billing, invoicing, tax and accounting | Contract; legal obligation |
| Recording that you accepted the Terms | Legal obligation and our legitimate interest in proving the agreement |
| Security, preventing abuse and fraud, enforcing usage limits and our policies | Legitimate interests (keeping the Service safe) |
| Service emails (verification, password reset, billing, security and policy notices) | Contract; legitimate interests |
| Improving the Service using usage metadata (never the content of your code) | Legitimate interests |
| Complying with law and responding to lawful requests | Legal obligation |
We do not sell personal data, share it for cross-context behavioural advertising, or use it to make decisions about you that have legal or similarly significant effects. We do not use Customer Content to train AI models.
Our emails come from hello@unified-ai.dev. To reply or ask a question, write to support@unified-ai.dev.
5. AI processing
- Output is generated with AI running on Amazon Bedrock, a service of Amazon Web Services (AWS).
- Customer Content is sent to Amazon Bedrock only to provide the Service. It is not used to train AI models, by us or (according to AWS documentation) by AWS or the model developers.
- Content sent for processing is deleted when the processing finishes (if that deletion fails, 30 days after it finishes).
- AWS may keep traffic that its automated abuse detection flags for up to 30 days, to investigate possible misuse.
- Requests may be processed in any AWS commercial region worldwide (global routing), not only in the country where you are.
6. The content storage setting
Your dashboard has a setting that controls whether we may store the content of AI requests and responses. By default we do not: we store only usage, cost and latency metadata about them. If you allow storage, we may keep redacted request and response content for up to 30 days. This setting controls only what we store; it does not change what our model provider keeps (see section 5).
7. Who we share data with
| Provider | What for | Data | Where |
|---|---|---|---|
| Amazon Web Services (AWS): Amazon Bedrock | AI processing | Customer Content sent for processing, and the results | Any AWS commercial Region (global cross-Region inference) |
| Amazon Web Services (AWS): EC2, RDS, S3 and CloudFront | Hosting the Service and this website, our database, and temporary storage of Customer Content | All data described in this policy | United States (us-east-1); CloudFront edge locations for the website |
| Amazon Web Services (AWS): Amazon SES | Sending service emails from hello@unified-ai.dev | Email address and message content | United States (us-east-1) |
| Cloudflare | Content delivery, software downloads, and storage of encrypted backups (R2) | IP address and request data for downloads; encrypted backups of our database | Global network |
| The payment provider named at checkout: Paddle, Lemon Squeezy or Dodo Payments as our online reseller and merchant of record | Checkout, payments, invoices, taxes, billing corrections and refunds | Billing details, email address, plan and transaction data | See the provider’s privacy policy |
| GitHub (or another code host you connect) | Only if you use features that work with your code host using your own access: details are read from or sent to it with your credentials | Project and change details | See the code host’s privacy statement |
If you choose to sign in with Google, Google shares your Google account email and basic profile with us under its own privacy policy.
A reseller acting as merchant of record processes your payment data under its own privacy policy. We may also disclose data to professional advisers, to a buyer or successor if our business is sold or reorganised (subject to this policy), or where the law requires it or it is needed to protect people’s safety or our rights. We will tell you about a legal demand for your data where we lawfully can.
8. International transfers
We are based in the United States. Our service providers process data in the US (AWS us-east-1), on global networks (website delivery, downloads and encrypted backups) and, for AI processing, in any AWS commercial Region. When we transfer personal data from the EEA, the UK or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum) in our agreements with service providers, or the EU-US Data Privacy Framework where the recipient is certified. You can ask us for more information about these safeguards.
9. How long we keep data
| Data | How long |
|---|---|
| Customer Content sent for processing (code and context) | Deleted when processing finishes; if that deletion fails, 30 days after it finishes |
| Results (which may quote code) and the related identifiers sent with your content | 30 days after the processing finishes |
| Reports your tools send us about their work | 30 days |
| Redacted request and response content (only when you allow storage) | Up to 30 days |
| Traffic flagged by the AI provider’s abuse detection (kept by AWS) | Up to 30 days |
| Messages and settings you store in the Service | Until you delete them, they expire or your account is deleted; expired ones are deleted 30 days after they expire |
| Usage and billing metadata, and the details kept with it (project and change identifiers, status and timestamps) | As long as needed for billing, tax and accounting obligations |
| Terms acceptance records | For the life of your account and afterwards for as long as we may need to prove the agreement |
| Account data | While your account exists; deleted within 30 days of a deletion request, except records we must keep by law |
| Technical and security logs | For a limited period, for security and troubleshooting |
| Encrypted database backups | Deleted data may remain in encrypted backups for a limited period until those backups are rotated |
10. Security
We protect data with encryption in transit, encrypted backups, hashed passwords and API keys, access controls and the principle of least privilege. No system is perfectly secure. If a security incident affects your personal data or your content, we will notify affected customers without undue delay, and notify regulators where the law requires (for example, within 72 hours under the GDPR).
11. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy in a portable format;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing, including processing based on legitimate interests;
- withdraw consent where we rely on consent;
- opt out of the sale or sharing of personal data (we do not sell or share it);
- not be treated differently for exercising your rights.
If you are in the EEA or the UK, you can also complain to your data protection authority. We would appreciate the chance to address your concern first.
12. How to exercise your rights
Email support@unified-ai.dev from the email address on your account. We may need to verify your identity. We reply within the time the law requires (usually one month). To delete your account, email us and we will complete the deletion within 30 days. An authorised agent may make a request for you where the law allows, with proof of authority.
13. Cookies and browser storage
This website uses no cookies. The account dashboard uses only essential cookies: the session cookie that keeps you signed in, and short-lived security cookies used during sign-in and invitations. It also keeps a few small items in your browser’s storage so sign-up works. We do not use analytics, advertising or tracking cookies, pixels or scripts, so there is nothing to opt out of.
14. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you think a child has given us personal data, contact support@unified-ai.dev and we will delete it.
15. Changes to this policy
We will post any update here with a new date. If a change is material, we will also email you before it takes effect.
16. Contact
Questions or requests about privacy: support@unified-ai.dev. See also our Contact page.
Unified Artificial Intelligence