Privacy Policy
Effective as of 20 may 2026.
Please click here to view the previous version of our Privacy Policy.
This Privacy Policy describes how Unify AI Ltd, a company registered in England and Wales, and its subsidiaries and affiliates ("Unify", "we", "us" or "our") process personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our website, software, social media pages, marketing activities, and other activities described in this Privacy Policy (collectively, the "Service")).
NOTICE TO EUROPEAN USERS: Please see the Notice to European Users section for additional information for individuals located in the EEA or UK (which we refer to as "Europe", and "European" should be understood accordingly) below.
Index
- Personal information we collect
- How we use your personal information
- Retention
- How we share your personal information
- Sub-processors and Records of Processing Activities
- Your choices
- Other sites and services
- Security
- International data transfers
- Children
- Changes to this Privacy Policy
- How to contact us
- Notice to European users
Personal information we collect
Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:
- Contact data, such as your first and last name, salutation, email address, mailing addresses, and phone number.
- Profile data, such as the username and password that you may set to establish an online account on the Service, organization, department, team size, years of experience, job title, and any other information that you add to your account profile.
- Communications data, based on our exchanges with you, including when you contact us through the Service, community feature, social media, email or otherwise.
- Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
- User-generated content data, such as comments, questions, messages, works of authorship, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
- Payment data, needed to complete transactions, including payment card information or bank account number.
- Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:
⦁ Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
⦁ Private sources, such as data providers, social media platforms and data licensors.
⦁ Third-party services, such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.
Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:
- Device data, such as your computer or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
- Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
- Communication interaction data, such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Cookies. Some of our automatic data collection is facilitated by cookies and similar technologies. For more information, see our Cookie Notice. We will also store a record of your preferences in respect of the use of these technologies in connection with the Service.
How we use your personal information
We may use your personal information for the following purposes or as otherwise described at the time of collection:
Service delivery and operations. We may use your personal information to:
- provide, operate and improve the Service and our business;
- personalizing the service, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Service;
- establish and maintain your user profile on the Service;
- facilitate social features of the Service, such as by identifying and suggesting connections with other users of the Service;
- enable security features of the Service, such as by sending you security codes via email, and remembering devices from which you have previously logged in;
- communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;
- communicate with you about events in which you participate;
- understand your needs and interests, and personalize your experience with the Service and our communications; and
- provide support for the Service, and respond to your requests, questions and feedback.
Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal information we collect. We make personal information into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business and will not attempt to reidentify any such data.
Software improvement and analytics. We may use your personal information to analyze your usage of the software, improve the software, improve the rest of our business, help us understand user activity on the software, and to develop new products and services. See more details in our Telemetry Policy.
Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:
- Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the respective marketing communications.
- Interest-based advertising. Our third-party advertising partners may use cookies and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time, and use that information to serve online ads that they think will interest you. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. You can learn more about your choices for limiting interest-based advertising in the Cookie Notice.
Compliance and protection. We may use your personal information to:
- comply with applicable laws, lawful requests, and legal processes, such as to respond to subpoenas, investigations or requests from government authorities;
- protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
- audit our internal processes for compliance with legal and contractual requirements or our internal policies;
- enforce the terms and conditions that govern the Service; and
- prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
Business interactions. If you communicate with us as an employee or representative of a service provider, business partner or other company we do business with, in addition to the other uses included in this section, we may use personal information about you to administer our relationship, maintain contractual relations and to operate our business.
Retention
We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for compliance and protection purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. When we no longer require the personal information, we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize your personal information (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.
Sub-processors and Records of Processing Activities
Sub-processors. We engage a limited set of vendors as sub-processors to deliver the Service. These currently include providers of cloud infrastructure and platform services, large-language-model APIs, product analytics and observability tooling, and customer-support and CRM tooling. Each sub-processor is bound by a written data-processing agreement and is restricted to the personal data necessary for the service we receive from them. Where a sub-processor processes data outside the United Kingdom or the EEA, the transfer is governed by the safeguards described in the International data transfers section below.
Our current sub-processor list — including each provider's role, processing location and applicable transfer safeguard — is maintained at unify.ai/sub-processors. Enterprise customers can subscribe to advance-notice updates of changes to the sub-processor list under their Data Processing Agreement.
Records of Processing Activities (Article 30). We maintain structured Records of Processing Activities under UK GDPR Article 30 and EU GDPR Article 30, covering each processing activity, its purpose, categories of personal data and data subjects, recipients, international transfers, retention periods, and the technical and organisational security measures applied. These records are held in our compliance management platform and are available to supervisory authorities on request. Data subjects who wish to understand how their personal data is processed by a specific activity can request the relevant excerpt by emailing privacy@unify.ai.
Other sites and services
The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.
Security
We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.
International data transfers
Unify AI Ltd is established in the United Kingdom and operates the Service from the European Union: our production data plane runs in Google Cloud europe-west3 (Frankfurt, Germany), and customer data is stored and processed in the EU by default. Some of our sub-processors operate in other jurisdictions, including the United States. Where transfers of personal data outside the United Kingdom or the EEA take place, we rely on appropriate safeguards under UK GDPR and EU GDPR — primarily the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses, supplemented by transfer impact assessments where required. Users in Europe should read the important information provided below about cross-border transfers of personal information.
Children
The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.
How to contact us
Email: privacy@unify.ai
Mail: 71-75 Shelton Street, Covent Garden, London WC2H9JQ
Notice to European users
General
Where this Notice to European users applies. The information provided in this "Notice to European users" section applies only to individuals in the United Kingdom and the European Economic Area (i.e., "Europe" as defined at the top of this Privacy Policy).
Personal information. References to "personal information" in this Privacy Policy should be understood to include a reference to "personal data" (as defined in the GDPR) – i.e., information about individuals from which they are either directly identified or can be identified.
Controller. Unify is the controller in respect of the processing of your personal information covered by this Privacy Policy for purposes of European data protection legislation (i.e., the EU GDPR and the so-called 'UK GDPR' (as and where applicable, the "GDPR"). See the 'How to contact us' section above for our contact details.
EU Representative. Unify is established in the United Kingdom and does not currently offer the Service to data subjects established in the European Union or the European Economic Area. EU GDPR Article 27 is therefore not currently triggered and no EU Representative is appointed at this time. If our scope changes such that we begin offering the Service to data subjects in the EU/EEA, we will appoint an Article 27 Representative and update this Privacy Policy accordingly. For all UK GDPR and general privacy enquiries, please contact us by email at privacy@unify.ai or by postal mail to: 71-75 Shelton Street, Covent Garden, London, WC2H9JQ.
Our legal bases for processing
In respect of each of the purposes for which we use your personal information, the GDPR requires us to ensure that we have a "legal basis" for that use.
Our legal bases for processing your personal information described in this Privacy Policy are listed below.
- Where we need to perform a contract, we are about to enter into or have entered into with you (Contractual Necessity).
- Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (Legitimate Interests).
- More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
- Where we need to comply with a legal or regulatory obligation (Compliance with Law).
- Where we have your specific consent to carry out the processing for the Purpose in question (Consent).
- Contact data
- Profile Data
- Communications data
- User-generated content data
- Payment Data
- Data from Third Party Services
- Device data
Legitimate Interests. In all other cases - our legitimate interests to develop and communicate about our business.
Legitimate Interests. We have a legitimate interest in ensuring the ongoing security and proper operation of our Service and associated IT services, systems, and networks.
- Contact data
- Communications data
- Marketing data
- Device data
- Online activity data
Consent, in circumstances or in jurisdictions where consent is required under applicable laws for providing any given marketing communications.
Legitimate interests. Where Compliance with Law is not applicable, we and any relevant third parties have legitimate interests in participating in, supporting, and following legal process and requests, including through cooperation with authorities. We and any relevant third parties may also have legitimate interests of ensuring the protection, maintenance, and enforcement of our and their rights, property, and/or safety.
Consent, in circumstances or in jurisdictions where consent is required under applicable laws for service improvement and analytics.
Consent, in circumstances or in jurisdictions where consent is required under applicable laws to improve our software.
Consent, if the relevant further use is not compatible with the initial purpose for which the personal information was collected.
Other info
No sensitive personal information. We ask that you not provide us with any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the services, or otherwise to us. If you provide us with any sensitive personal information to us when you use the services, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our services.
No Automated Decision-Making and Profiling. As part of the Service, we do not engage in automated decision-making and/or profiling, which produces legal or similarly significant effects.
Your rights
General. European data protection laws give you certain rights regarding your personal information. If you are located in Europe, you may ask us to take the following actions in relation to your personal information that we hold:
- Access. Provide you with information about our processing of your personal information and give you access to your personal information.
- Correct. Update or correct inaccuracies in your personal information.
- Delete. Delete your personal information where there is no good reason for us to continue to process it - you also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
- Restrict. Restrict the processing of your personal information, for example if you want us to establish its accuracy or the reason for processing it.
- Object. Object to our processing of your personal information where we are relying on Legitimate Interests – you also have the right to object where we are processing your personal information for direct marketing purposes.
- Withdraw Consent. When we use your personal information based on your consent, you have the right to withdraw that consent at any time.
Exercising These Rights. You may submit these requests by email to privacy@unify.ai or our postal address provided above. We may request specific information from you to help us confirm your identity and process your request. Whether or not we are required to fulfill any request you make will depend on a number of factors (e.g., why and how we are processing your personal information), if we reject any request you may make (whether in whole or in part) we will let you know our grounds for doing so at the time, subject to any legal restrictions.
Your Right to Lodge a Complaint with your Supervisory Authority. In addition to your rights outlined above, if you are not satisfied with our response to a request you make, or how we process your personal information, you can make a complaint to the data protection regulator in your habitual place of residence.
⦁ For users in the European Economic Area – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
⦁ For users in the UK – the contact information for the UK data protection regulator is below:
The Information Commissioner's Office
Water Lane, Wycliffe House
Wilmslow - Cheshire SK9 5AF
Tel. +44 303 123 1113
Website: https://ico.org.uk/make-a-complaint/
Cross-border data transfers
Unify AI Ltd is established in the United Kingdom and operates the Service from the European Union. Customer data and most personal data we process are therefore stored and processed in the EU by default. Some of our sub-processors, advisers and partners are established outside the United Kingdom and the EEA — most commonly in the United States — which means that, where applicable, your personal information may be accessed or processed in those countries as part of delivering the Service.
Where we transfer personal information out of the United Kingdom or the EEA to a country that has not been designated by the UK or the European Commission as providing an adequate level of protection, we rely on appropriate safeguards under UK GDPR and EU GDPR — principally the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses — and we conduct transfer impact assessments where required. The list of sub-processors and the safeguards we rely on for each are described in the Sub-processors and Records of Processing Activities section above.
You may contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the United Kingdom or the EEA. You may have the right to receive a copy of the appropriate safeguards under which your personal information is transferred by contacting us at privacy@unify.ai.