Privacy Policy

Last updated: 2026-10-20

1. Introduction

This Privacy Policy explains how Futurove, LLC processes personal data globally when you use UniDeck.ai. While we offer our services worldwide, we model our data protection standards on the GDPR (EU/EEA/UK) to provide a high level of privacy to all users, regardless of their location.

By using UniDeck.ai, you acknowledge the data processing practices described in this policy.

2. Data Controller

  • Company: Futurove, LLC
  • Address: 651 N Broad St, Suite 201, Middletown, Delaware 19709, USA
  • Email: info@unideck.ai

3. Scope

This policy applies to UniDeck.ai web services, including account/session management, AI chat features, document uploads and RAG workflows, payment processes, and support operations.

4. What Data We Collect

We process the following categories of data:

  1. Account and identity data: name, email, user/organization info, session and authentication records.
  2. User content: prompts, chat messages, uploaded files, and document content processed in RAG workflows.
  3. Technical and usage data: device/connection details, error logs, security logs, usage metrics, product analytics events, and, with your consent, session recordings of our sign-up and checkout pages (see Section 8).
  4. Payment and billing event data: subscription status, transaction IDs, customer/subscription references.
  5. Communication data: data submitted through contact and transactional email workflows.
  6. Marketing attribution data: the ad click identifier and campaign parameters of the link you arrived through, the referring site, and your country; with your consent, also a hashed (SHA-256) version of your email address used to match sign-ups and payments to ad clicks.

5. Why We Use Data

We process personal data to:

  1. Provide, maintain, and secure the service.
  2. Handle authentication, authorization, and account management.
  3. Generate AI responses, process files, and run search/RAG features.
  4. Debug issues, monitor performance, and prevent abuse/fraud.
  5. Manage billing, subscriptions, and customer support.
  6. Improve the product and service quality.
  7. Comply with legal obligations and protect legal rights.

6. GDPR Legal Bases

Our processing relies on:

  • Art. 6(1)(b): Performance of a contract
  • Art. 6(1)(c): Compliance with legal obligations
  • Art. 6(1)(f): Legitimate interests (security, abuse prevention, service improvement, and learning which marketing channels bring customers)
  • Art. 6(1)(a): Consent (for example, non-essential analytics cookies and session recordings)

7. AI Processing and Model Training

UniDeck.ai uses third-party model providers to generate outputs. User inputs (text/files) may be processed for response generation.

Our commitment: user data, chat history, and uploaded content processed in UniDeck.ai are not used for model training.

8. Cookies and Analytics

The service may use essential cookies and analytics technologies. Some analytics providers may rely on cookies (for example Google Analytics), while others may collect aggregated or event-based telemetry without setting client-side cookies (for example Vercel Analytics). Non-essential analytics/tracking is controlled based on user preference where required.

Product analytics. We use PostHog to understand how the service is used, for example which steps of sign-up people complete. In your browser, PostHog collects data only after you accept analytics cookies. It identifies you by an internal account ID, not by your name or email address. Some events are recorded by our servers as part of running the service (for example account creation, subscription changes, and the AI models used); these never include the content of your prompts, chats, or files.

Session recordings. If you accept analytics cookies, we may record your visits to these pages only: the home and pricing pages, sign-up, sign-in, email verification, plan selection, and the pages before and after checkout. A recording shows the page layout, mouse movements, clicks, scrolling, and page changes, and helps us see where people get stuck. We limit recordings as follows:

  • The signed-in workspace is never recorded: chats, prompts, uploaded files, documents, and workspace content are excluded.
  • Everything typed into form fields (such as your email address and password) is masked in your browser before anything is sent.
  • Email addresses shown on the page and sensitive values in the page address (such as email addresses, tokens, and codes) are masked.
  • Payment details are entered on our payment provider's page and are never recorded.
  • Recordings are kept for 30 days and are used only to improve sign-up and checkout.

If you decline analytics cookies, no recording takes place.

Marketing attribution and advertising measurement (Google Ads and Google Analytics). We measure which channels bring customers and whether our Google ads lead to sign-ups and paid subscriptions.

  • When you start checkout, we store the ad click identifier of the link you arrived through (such as gclid), its campaign parameters, the referring site, and your country with your account and with your checkout at our payment provider. Ad click identifiers are deleted from our database after 90 days.
  • Only if you accept analytics and advertising cookies:
    • when you sign up, the Google tag receives a hashed (SHA-256) version of your email address so that Google can match the sign-up to the ad click;
    • when you pay, our servers send Google Ads the order ID, amount, currency, the ad click identifier, and your hashed email address through Google's Data Manager API, and a refund updates that record;
    • our servers report paid orders and trial starts to Google Analytics, linked only to the Google Analytics identifier stored in your browser.

Payments made after you decline are not sent to Google.

Changing your choice. Use the Cookie settings link at the bottom of our pages to accept or decline again at any time. Declining stops analytics, session recordings, and sending data to Google from that point on. You can also contact us at info@unideck.ai.

9. How We Share Data

To operate the service securely and reliably, we share data only as needed with limited categories of providers:

  1. AI and model routing services
  2. Cloud storage and database infrastructure
  3. Identity/authentication providers
  4. Payment infrastructure providers
  5. Transactional communication providers
  6. Search and data processing services
  7. Analytics and session recording providers

For the current list, see: Sub-processors

We apply appropriate contractual safeguards with sub-processors (DPA/SCC or equivalent mechanisms).

We do not sell your personal information.

10. International Data Transfers

Data may be transferred to and processed in countries outside the EU/EEA/UK. For such transfers, appropriate safeguards (for example Standard Contractual Clauses) and contractual protections are applied.

11. Retention and Deletion

We keep data only as long as necessary for the stated purposes.

  • Users can manually delete their chat histories, workspaces, and uploaded documents directly within the application.
  • Deleted personal data is removed from active systems.
  • After user-initiated deletion, files and associated index/vector data are removed from active systems immediately and from backups within approximately 24 to 72 hours, subject to technical constraints.
  • Data subject to deletion requests is permanently deleted or irreversibly anonymized as soon as technically feasible and no later than 30 days.
  • Limited records may be retained where legally required (for example accounting/tax compliance), only for the required period.
  • Ad click identifiers are deleted from our database after 90 days, and session recordings after 30 days.

12. Security

We implement technical and organizational safeguards (access controls, encryption in transit, infrastructure security, logging, least-privilege access). No system can be guaranteed 100% secure.

13. Your GDPR Rights

If you are in the EU/EEA/UK, you may have the right to:

  1. Access
  2. Rectification
  3. Erasure
  4. Restriction of processing
  5. Object to processing
  6. Data portability
  7. Lodge a complaint with a supervisory authority

To exercise rights, contact: info@unideck.ai. Identity verification may be required.

14. Children's Privacy

The service is not intended for children under 13. We do not knowingly collect personal data from children under 13.

15. AI Output Disclaimer

AI outputs are probabilistic and may be inaccurate, incomplete, or outdated. They should not be used as the sole basis for legal, medical, financial, or other critical decisions.

16. Changes to This Policy

We may update this policy from time to time. Material updates will be published in the service, with additional notice when required.

17. Contact

For privacy requests:

  • Email: info@unideck.ai
  • Address: Futurove, LLC, 651 N Broad St, Suite 201, Middletown, Delaware 19709, USA