Privacy

1. Information We Collect

Information you provide

• Account information (such as name, email, organization, and authentication details) when you sign up or communicate with us.
• Support communications and other messages you send to us (including attachments and metadata).
• Customer Content you submit to the Services (for example, API inputs and configurations).
• Alert destinations you configure (a destination email, Telegram chat id, or webhook URL).

Information we collect automatically

• Usage data (such as API requests, feature usage, timestamps, and response codes).
• Device and connection information (such as IP address, browser type, device identifiers, and operating system).
• Logs and diagnostics used for reliability, security, and fraud prevention.

Payment information

If you purchase paid Services, payment processing is handled by third-party payment processors. We receive limited billing details (such as payment status, last 4 digits, and invoices), but we do not store full payment card numbers.

Cookies and similar technologies

The public marketing site does not set authentication or payment cookies. Clerk cookies are set only when you sign in. Stripe cookies are set only when you check out. Those cookies are strictly necessary to provide the requested service.

We use first-party cookies and similar storage to understand how the Services are used and to improve them.

You can still block cookies and scripts through your browser settings. Doing so may disable analytics but will not prevent you from using the public pages of the Services.

2. How We Use Information

We use information to:

• Provide, maintain, secure, bill, and debug the Services.
• Authenticate users and secure accounts and API keys.
• Monitor performance, debug issues, and prevent fraud, abuse, and security incidents.
• Send service, support, and alert messages you request. We do not send marketing email without your consent.
• Bill and administer paid plans, credits, and taxes (if applicable).
• Comply with legal obligations and enforce our Terms.

We do not use Customer Content to train models.

3. How We Share Information

We may share information in the following circumstances:

• Service providers. With vendors who help us operate the Services. At the product level, these include Clerk (authentication), Stripe (payments), PostHog (analytics), Google Cloud (hosting), and Resend (email). If you choose Telegram as an alert destination, we send the alert to Telegram using the chat id you provide. They may access information only to perform services for us and must protect it.
• Legal and safety. If we believe disclosure is necessary to comply with law, protect rights and safety, investigate fraud, or respond to lawful requests.
• Business transfers. If we’re involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
• Aggregated/anonymous data. We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We do not sell personal information.

4. Data Retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and why we collected it.

5. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. International Data Transfers

Information may be processed outside Hong Kong, including in the United States. Where required, we use appropriate safeguards for international transfers.

7. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or object to certain processing of your information, and to request data portability. You may also have the right to withdraw consent where processing is based on consent.

If you are in Hong Kong, you may request access to or correction of personal data we hold about you, and you may ask us to delete it where applicable. You may also complain to the Office of the Privacy Commissioner for Personal Data (PCPD).

To exercise rights or ask questions, contact us at support@ultralayer.ai.

8. Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us so we can take appropriate action.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last Updated” date. If changes are material, we will take reasonable steps to notify you.

10. Related Terms

Your use of the Services is also governed by our Terms of Service at ultralayer.ai/terms and our Disclaimer at ultralayer.ai/disclaimer.