Privacy Policy
Welcome to Un8id. We are committed to protecting your business and personal data with the highest standards of security and transparency, in full compliance with the GDPR and applicable international data protection laws.
Last Updated: June 2026
1. Who we are (Data Controller)
The Data Controller responsible for your personal data collected via the website and during account registration is the publishing company of Un8id, located in Toulon, France.
- Contact Email: privacy@un8id.com
Note on Roles: When you upload your company's operational or business data into our platform to generate indicators, you act as the Data Controller, and Un8id acts as a Data Processor governed strictly by our Data Processing Agreement (DPA).
2. Data we collect and why
We only collect personal data that is necessary to provide, secure, and improve our SaaS platform. We never sell your data.
A. Account & Profile Data
- What we collect: Name, professional email address, company name, and password.
- Purpose: To create and manage your account, authenticate your login, and provide customer support.
- Legal Basis: Performance of a contract.
B. Billing & Transaction Data
- What we collect: Billing address, tax ID (VAT number), and payment metadata (processed securely via our payment partners).
- Purpose: To process subscriptions, model marketplace purchases, AI credit packs, and payouts for Creators.
- Legal Basis: Performance of a contract and compliance with legal obligations.
C. Technical & Usage Data
- What we collect: IP address, browser type, device information, operating system, and log data about how you interact with our platform (e.g., features used, templates opened).
- Purpose: To monitor platform performance, prevent fraudulent concurrent logins (account sharing), and optimize the user interface.
- Legal Basis: Legitimate business interests.
3. Third-party subprocessors & data sharing
To deliver our services seamlessly, we partner with trusted, specialized third-party infrastructure and service providers.
| Subprocessor | Country | Purpose | Privacy Safeguard |
|---|---|---|---|
| Fly.io | European Union / EEA | Cloud Infrastructure & SaaS Hosting | Data securely stored locally within the EU economic zone. |
| Stripe Payments Europe, Ltd. | Ireland / EU | Payment gateway and subscription management | Bank-grade encryption; PCI-DSS compliant. |
| Paddle Payments Ltd. | United Kingdom / EU | Merchant of Record for international sales | Fully compliant with local tax/GDPR frameworks. |
| Google Ireland Limited | Ireland / EU | Execution of core Artificial Intelligence (Gemini API) and predictive modeling features | Zero-Training Guarantee: Enterprise API terms ensure data is not used to train public AI models. |
| DeepL SE | Germany / EU | Automated text and translation services within the platform | Enterprise data is deleted immediately after translation. |
4. International data transfers
Un8id prioritizes hosting and processing your data within the European Economic Area (EEA). In cases where data must be transferred outside the EEA (for example, through international transactions via Paddle or global cloud routing), we ensure that appropriate safeguards are in place. This includes utilizing the European Commission's Standard Contractual Clauses (SCCs) to guarantee your data receives an equivalent level of protection.
5. Data retention policy
We keep your personal data only as long as necessary to fulfill the purposes outlined in this policy:
- Active Accounts: Account and usage data are retained for the duration of your active subscription or until you request account deletion.
- Inactivity: Inactive accounts and associated logs are permanently deleted or anonymized after 24 months of continuous inactivity.
- Financial Records: Invoices and transactional history are archived for 10 years to meet legal and tax obligations under French law.
- AI Credits: Records of purchased and consumed AI credits are kept for a minimum of 12 months from purchase to handle expiration and accounting.
6. Your GDPR data rights
Since we operate under European jurisdiction, you possess the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data under certain conditions.
- Right to Restrict or Object to Processing: You can object to data processing based on legitimate interests (e.g., marketing).
- Right to Data Portability: You can request that we transfer your account data to another provider in a structured, machine-readable format.
To exercise any of these rights, please contact our team at privacy@un8id.com. If you believe your rights have not been respected, you have the legal right to lodge a complaint with a supervisory authority, such as the CNIL in France.
7. Security measures
We implement industry-standard technical and organizational measures to safeguard your business information. This includes data encryption in transit (HTTPS/TLS) and at rest, automated vulnerability scanning, strict internal access controls for our staff, and rigorous enterprise data protocols for all integrated AI workflows.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our SaaS architecture, legal requirements, or partner ecosystem. Any updates will be posted on this page with a revised “Last Updated” date. For significant changes, we will notify our Enterprise and Standard tier subscribers via email or platform notification.