Effective Date: Jan 1, 2025

At Universal AI ("we", "us", "our"), your privacy is a priority. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our AI-powered SaaS platform and related services.

1. Data Controller and Contact

Universal AI is the data controller for your personal data.
Contact: support@universal.ai

2. Information We Collect

  • Account Information: Name, email, password, organization, and other identifiers provided during registration.

  • Usage Data: IP address, device/browser type, access times, session logs, and feature usage.

  • Content Data: Text, images, code, chat, and other data you submit or generate using Universal AI.

  • Payment Data: Processed securely by third-party payment processors; we do not store full payment card details.

  • Cookies & Tracking: We use cookies and similar technologies for authentication, analytics, and personalization. Consent is obtained for non-essential cookies as required by law.

  • Support Data: Communications with our support team, including emails and chat logs.

3. How We Use Your Information

Purpose Legal Basis (GDPR/CCPA/Other)
Account creation and management Contractual necessity, legitimate interest
Service provision and improvement Contractual necessity, legitimate interest
Customer support Contractual necessity, legitimate interest
Marketing communications Consent (opt-in, with withdrawal rights)
Analytics and product enhancement Legitimate interest, consent (where required)
Legal compliance and security Legal obligation, legitimate interest
AI model operation and improvement Consent, legitimate interest (never for personal data without explicit consent)
 
  • No sale of personal data: We do not sell your personal information, as defined under CCPA and similar laws.

  • No use of customer data for AI training without explicit consent: Your data is not used to train underlying AI models unless you have explicitly opted in.

4. Data Sharing and International Transfers

  • Subprocessors: We share data with trusted vendors (e.g., cloud hosting, payment processors, analytics) under strict data processing agreements.

  • International transfers: Data may be processed outside your country. For EU/UK residents, we use Standard Contractual Clauses or equivalent safeguards for transfers outside the EEA/UK.

  • Third-party APIs: If you connect to external APIs, data is transmitted securely and only as necessary for requested operations.

5. Data Security

  • Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256 or equivalent).

  • Access Controls: Role-based access, multi-factor authentication, and principle of least privilege.

  • Security Audits: Regular penetration testing, vulnerability scans, and compliance audits (e.g., SOC 2, ISO 27001).

  • Incident Response: Breach notification within 72 hours as required by law.

6. Data Retention

  • Data is retained only as long as necessary for the purposes stated above, or as required by law.

  • Users may request deletion of their data at any time; we will comply unless legal or contractual obligations require retention.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Right (GDPR/CCPA/Other) Description
Access Obtain a copy of your personal data
Rectification Correct inaccurate or incomplete data
Erasure (“Right to be Forgotten”) Request deletion of your data
Restriction Limit processing of your data
Portability Receive your data in a structured, machine-readable format
Objection Object to processing based on legitimate interests or direct marketing
Opt-Out (CCPA) Opt out of sale or sharing of personal data
Withdraw Consent Withdraw consent at any time (without affecting prior processing)
Non-Discrimination (CCPA) You will not be discriminated against for exercising your privacy rights
 

To exercise your rights, contact support@univeral.ai. We respond within 30 days.

8. Children’s Privacy

Universal AI is not intended for children under 16 (or 13 in the US). We do not knowingly collect data from children.

9. Automated Decision-Making and AI

  • Universal AI uses AI models for content, image, code, and chat generation.

  • No fully automated decisions with legal or similarly significant effects are made.

  • Users may request human review of outputs or decisions.

10. Data Governance and Compliance

  • Privacy by Design: Data protection is integrated into our development and operational processes.

  • Data Protection Officer: [Contact Email/Officer Name], responsible for privacy governance.

  • Documentation: Records of processing activities, consents, and data processing agreements are maintained.

11. Changes to This Policy

We may update this Privacy Policy. Significant changes will be communicated via email or platform notice.

This website uses cookies to improve your web experience.