Introduction
Welcome to Umiplex. We're committed to protecting your privacy and being transparent about how we handle your data. This policy explains everything you need to know about the information we collect and how we use it.
By using Umiplex, you agree to this Privacy Policy and our Terms of Service.
Key Definitions
Before we dive in, here are some terms we'll use throughout this policy:
| Term | What It Means |
|---|
| Service | The Umiplex.com website, dashboard, and all related applications |
| Personal Data | Any information that can identify you as an individual |
| Usage Data | Information automatically collected when you use our Service |
| Cookies | Small files stored on your device to remember your preferences |
| Data Controller | Umiplex, which decides how and why to process your data |
| Data Processor | Third party processing data on behalf of Umiplex |
| User | You – the person using our Service |
What Information We Collect
Personal Information You Provide
- Name – To personalize your experience
- Email address – For account management and communications
- Profile image – Optional, to customize your workspace
- Workspace/team information – To organize your projects
- Billing details – If you subscribe to a paid plan
Information We Collect Automatically
- IP address – For security and analytics
- Browser type – For compatibility
- Device information – To optimize experience
- Pages visited – Usage analytics
- Time spent on pages – Product improvement
- Diagnostic logs – Debugging and stability
Cookies and Similar Technologies
We use only first-party cookies to keep you logged in, remember preferences, and improve security. We do not use third-party tracking cookies.
Chatbot and End-User Data
If you deploy chatbots, we may process messages, conversation context, and metadata. You are responsible for obtaining end-user consent.
How We Use Your Data
- Provide and improve our Service
- Communicate with you
- Customer support
- Performance analysis
- Security and fraud prevention
- Payment processing
- Marketing (optional opt-out)
How Long We Keep Your Data
We retain data only as long as necessary for service delivery, legal compliance, dispute resolution, and enforcement of agreements.
You can request deletion anytime at support@umiplex.com.
Where Your Data Goes
Your data may be processed outside your country. We ensure appropriate safeguards are in place for all transfers.
When We Share Your Data
- Legal requirements
- Business transactions (mergers, acquisitions)
- Service providers (hosting, payments, analytics)
- Protecting rights and preventing abuse
We never sell your personal data.
How We Protect Your Data
- Encryption in transit and at rest
- Security audits
- Access control
- Secure infrastructure
Your Rights (GDPR – EU/EEA Users)
- Access, correction, deletion
- Restriction and objection
- Data portability
- Withdraw consent
Your Rights (CCPA – California Users)
- Know what data we collect
- Access and delete data
- Opt-out of data selling (we do not sell data)
- Non-discrimination
Third-Party Service Providers
Umiplex shares data with the sub-processors below to operate the Service. Each receives only what its function requires, and we keep this list current as our providers change.
- Vercel – application hosting and the AI Gateway that routes model requests. Receives all request traffic.
- Google (Gemini) – the large language model that generates chatbot replies. Receives the end user's message, the retrieved knowledge-base passages, and the agent's instructions, routed through the Vercel AI Gateway.
- Firecrawl – website crawling and scraping for knowledge-base training. Receives the URLs a customer submits and fetches their content.
- Amazon S3 (or an S3-compatible provider) – object storage for uploaded files, logos, and branding assets.
- Dodo Payments – subscription billing and checkout. Receives billing identity and payment details; card data is handled by Dodo and never reaches Umiplex servers.
- Inngest – background job orchestration for training and webhook processing. Receives job payloads referencing customer records.
- Google OAuth – optional social sign-in. Receives an authentication request and returns profile identity.
- Sentry – error tracking. Receives stack traces and request context when an error occurs.
- Telegram – internal operations alerts to the Umiplex team. Depending on the event (billing, account-provisioning, or an internal operational alert), a notification message may contain the account email address, the account holder's name, the organization identifier, the payment amount, and/or the subscription status.
- Our transactional email provider – delivery of account, billing, and notification email. Receives recipient addresses and message content.
End-user conversation content is processed by the model provider named above — see "Chatbot and End-User Data" for what we collect from your chatbots.
Links to Other Websites
We are not responsible for third-party websites linked from our Service.
Children's Privacy
Umiplex is not intended for users under 18. We do not knowingly collect data from minors.
Changes to This Privacy Policy
We may update this policy. Significant changes will be communicated via email or in-app notifications.