1. Introduction
UdinBot (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, password, and profile details
- Payment Information: Billing address and payment method details (processed by our payment provider)
- Content: Workflows, conversation data, documents, and other content you create
- Communications: Messages you send to us for support or feedback
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, and actions taken within the Service
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, and referring URLs
- Cookies: Session and preference cookies (see Section 7)
2.3 Information from Third Parties
- AI Providers: When you connect AI services, we may receive usage data from those providers
- OAuth Providers: If you sign in with Google or other OAuth providers, we receive basic profile information
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send administrative messages, updates, and security alerts
- Respond to your comments, questions, and support requests
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address technical issues and fraud
- Personalize and improve your experience
- Comply with legal obligations
4. How We Share Your Information
We may share your information in the following situations:
4.1 Service Providers
We share data with third-party vendors who perform services on our behalf, including:
- Cloud hosting providers
- Payment processors
- Analytics services
- Customer support tools
4.2 AI Providers
When you use AI features, your prompts and content may be sent to AI providers (OpenAI, Anthropic, Google, etc.) according to their terms and privacy policies.
4.3 Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4.5 With Your Consent
We may share information with third parties when you give us explicit consent to do so.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information as required by law or for legitimate business purposes.
After account deletion:
- Account data is deleted within 30 days
- Backup copies may be retained for up to 90 days
- Anonymized analytics data may be retained indefinitely
6. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Regular security assessments and audits
- Access controls and authentication
- Employee security training
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Cookies and Tracking
7.1 Types of Cookies We Use
- Essential Cookies: Required for the Service to function
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how you use the Service
7.2 Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.
8. Your Rights
Depending on your location, you may have the following rights:
8.1 Access and Portability
Request a copy of your personal data in a portable format.
8.2 Correction
Request correction of inaccurate personal data.
8.3 Deletion
Request deletion of your personal data, subject to legal retention requirements.
8.4 Restriction
Request restriction of processing of your personal data.
8.5 Objection
Object to processing of your personal data for certain purposes.
8.6 Withdraw Consent
Withdraw consent where processing is based on consent.
To exercise these rights, contact us at privacy@udinbot.com.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.
10. Children’s Privacy
The Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising privacy rights
We do not sell personal information.
12. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation:
- Legal basis for processing: consent, contract performance, legitimate interests, or legal obligation
- Right to lodge a complaint with a supervisory authority
- Data Protection Officer contact: dpo@udinbot.com
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new Privacy Policy on this page
- Updating the “Effective Date” at the top
- Sending an email notification for significant changes
14. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: privacy@udinbot.com
- Data Protection Officer: dpo@udinbot.com
- Website: https://udinbot.com/contact