Privacy Policy

1. Introduction

Welcome to Unifybase ("we," "our," or "us"). We operate the Unifybase knowledge management platform at unifybase.io (the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy.

2. Information We Collect

We collect information in three ways:

2.1 Information You Provide to Us

• Account Information: Email, name, password (hashed with bcrypt), team/organization name
• Content You Upload: Documents (PDF, Word, text, images), audio files, chat messages
• Communications: Support requests, feedback, and correspondence

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, search queries, API usage metrics
• Device Information: IP address, browser type, operating system, device identifiers
• Performance Analytics: Service uptime, performance metrics, feature usage patterns

2.3 Information from Third Parties

• OAuth Providers: Google account email, name, profile picture (with your permission)
• Google Drive: Files you explicitly authorize us to access

3. How We Use Your Information

• Core Service: Account management, document processing, AI features, storage, collaboration
• Service Improvement: Analytics, feature development, performance optimization
• Communication: Service updates, support, administrative messages, marketing (opt-in only)
• Security: Fraud prevention, access control, legal compliance, policy enforcement

4. How We Share Your Information

We do not sell your personal information.

We share your information only in these limited circumstances:

4.1 Third-Party Service Providers

• OpenAI: AI processing for document analysis, chat, embeddings. Data retained 30 days, not used for training. OpenAI Privacy Policy
• Google: OAuth authentication, Google Drive integration. Google Privacy Policy
• Cloud Storage: Secure storage with encryption at rest and in transit

6. Data Security

We implement industry-standard security measures:

• Encryption: TLS 1.2+ for data in transit, AES-256 for data at rest
• Authentication: Bcrypt password hashing (10+ rounds), JWT session tokens
• Access Controls: Role-based access control (RBAC), rate limiting, firewall protection
• Infrastructure: Regular security updates, database backups, audit logging

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: View your data through your account dashboard
• Portability: Export your data in machine-readable formats
• Correction: Update your account information anytime
• Deletion: Request account and data deletion (30-day process)
• Marketing Opt-Out: Unsubscribe from promotional emails anytime

To exercise your rights, contact us at privacy@unifybase.io. We will respond within 30 days.

12. GDPR Compliance (EU Users)

If you're in the EU/EEA/UK, we process your data based on:

• Contract Performance: Providing the Service
• Legitimate Interests: Analytics, fraud prevention, security
• Consent: Marketing, optional features
• Legal Obligations: Compliance with laws

You have rights to access, rectification, erasure, restriction, portability, objection, and complaint to your local Data Protection Authority.

13. CCPA Compliance (California Users)

California residents have additional rights:

• Right to Know: Request categories and specific pieces of data collected
• Right to Delete: Request deletion of your data
• Right to Correct: Request correction of inaccurate data
• Right to Non-Discrimination: We won't discriminate for exercising rights

We do not sell or share your personal information for advertising.

16. Contact Us

Questions about this Privacy Policy? Contact us:

• Email: privacy@unifybase.io
• Response Time: Within 30 days