\

Privacy Policy

Last Updated: March 2026

1. Introduction

This Privacy Policy explains how UktubAI collects, uses, stores, and protects your information when you use our Professional Research Studio and drafting process.

2. Information We Collect

2.1 Account & Billing

  • Name and email (sign-up/login)
  • Authentication tokens/cookies
  • Billing identifiers and payment info (processed by our payment processor; we do not store card numbers)
  • Plan/subscription status and usage counts (generations)

2.2 Research Data

  • PDFs and documents you upload (analyzed only when you request a generation)
  • Structured representations derived from your documents for generation
  • Pipeline outputs and logs stored in your account
  • Conversation history and prompts you provide

2.3 Usage & Device Data

  • Basic device/browser info for security and debugging
  • Request and error logs (kept as non-sensitive where possible)
  • Usage counts/timings for quota enforcement and reliability

3. How We Use Your Information

  • Authenticate users and secure access to your Workspace
  • Run the multi-agent pipeline using your uploads and prompts
  • Enforce plan limits (monthly generations, refs/doc, doc-per-session)
  • Process payments and manage subscriptions
  • Improve reliability and performance via aggregated diagnostics
  • Comply with legal obligations and prevent fraud/abuse

4. Data Security

  • Encryption in transit; storage and payments are handled by vetted providers
  • Scoped access controls; artifacts are linked to your account and conversations
  • Audit/logging for critical actions (billing, pipeline runs)

5. Data Retention

Conversation data and generated artifacts are retained while your account is active. Deleting a conversation removes associated artifacts. We may remove inactive free accounts after notice. Billing records are kept as required by law. Please download important outputs for safekeeping.

6. Third-Party Services

  • Payment processors for subscriptions
  • Hosting/storage and authentication providers
  • Error/performance monitoring providers (if enabled) for diagnostics

7. Payment Information

Payments are processed by Stripe. We do not store full card numbers. Stripe's privacy policy governs their handling of payment data.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. We may require identity verification to process requests.

9. Cookies and Local Storage

We use cookies/local storage for authentication (Supabase), CSRF protection, and session continuity. We do not run third-party advertising trackers.

You can control cookies via your browser; blocking auth cookies will prevent login.

10. Children's Privacy

The service is not intended for individuals under 18. We do not knowingly collect personal information from children under 18. If we learn of such collection, we will delete it.

11. Changes to This Policy

We may update this policy. We will update the “Last Updated” date and, where required, provide notice (e.g., email or in-app).

12. Contact

For privacy questions or requests, contact: privacy@uktubai.com