Privacy Policy

Effective: October 29, 2026

1. Data we collect

• Account data — email address and/or Telegram account, username, password hash.
• Billing data — balance transactions and payment metadata. Card payments are handled by payment processors; we do not store full card numbers. Cryptocurrency payments are recorded with the associated transaction identifiers.
• Service data — resources you create (servers, deployments, API keys), and technical logs needed to operate them (API request logs, IP addresses, timestamps, error logs).
• Support data — messages you send us by email or Telegram.
• Home page chat — messages you send to the chat on uno.place and its replies are kept for 30 days to improve the service, with email addresses and phone numbers removed and without your IP address.
• Site analytics — page views and clicks on uno.place, counted without cookies; we honor Do Not Track.

2. How we use data

We use data to provide and bill the Services, prevent abuse and fraud, comply with legal obligations, and provide support. We do not sell personal data and do not use your service content for advertising.

3. Content you host

Data you store or process on Uno infrastructure (files on your VPS, deployed sites, API traffic) is yours. We access it only as needed to operate the platform, at your request for support, or when required by law or by our Acceptable Use Policy enforcement.

4. Google user data and other connected accounts

Uno Work lets you connect your Google account (and, separately, Notion or GitHub) so that the AI agent on your Uno Work computer can work with your mail, files and calendar when you ask it to. Connecting is optional and you choose which connector to turn on.

What we access

• Google Drive — read-only access to your files (drive.readonly), so the agent can search and read the documents you ask about; and access only to files Uno creates (drive.file), so the agent can save a new file to your Drive when you ask.
• Gmail — read-only access to your messages (gmail.readonly), so the agent can search and read the emails you ask about; and access to drafts (gmail.compose), so the agent can prepare a draft reply for you. Uno never sends an email on your behalf: drafts stay in your Drafts folder until you send them yourself.
• Google Calendar — read-only access to your events (calendar.readonly), so the agent can tell you what is on your schedule and, if you turn on “Join my calls”, so your note-taker knows which meetings to join.
• Your Google account email address, to show which account is connected.

How we use it

We use Google user data only to provide the features you see in Uno Work: answering your requests about your mail, files and calendar, preparing drafts, saving files and joining your calls. We do not use Google user data for advertising, we do not sell it, we do not use it to build user profiles, and we do not use it to train or improve generalized AI or machine-learning models.

Uno’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How it flows and where it is stored

• Access tokens issued by Google are stored on our servers encrypted at rest and are never given to your computer or to the AI agent.
• Content (emails, files, events) is fetched from Google at the moment the agent needs it and passed to your Uno Work computer. Our servers do not keep a copy of it.
• On your Uno Work computer the content becomes part of your chat with the agent and may be saved in that computer’s chat history and agent logs, like anything else you work on there. That computer and its history are yours: you can delete chats or the whole computer at any time.
• Our servers keep technical records of connector requests (time, which Google API was called, including item identifiers such as message or file IDs, the result code and duration) for a limited time, normally 30 days, to operate and secure the service. These records do not contain the content of your emails, files or events.

Sharing with AI model providers

To answer your request, the content the agent reads is sent to the AI model that runs your agent. You choose that model: either your own AI account (for example Claude Code or Codex signed in with your own account, under that provider’s terms), or Uno AI. Uno AI sends requests through OpenRouter to the model you pick; for Uno AI’s built-in models we use only providers that do not store or train on prompts, and for other models we ask OpenRouter for such providers. We do not share Google user data with anyone else, except the infrastructure providers that carry our traffic and host our servers (such as Cloudflare), or where required by law.

Human access

Uno staff do not read your Google user data. The only exceptions are when you ask us to and give us permission (for example, in a support request), when needed for security purposes such as investigating abuse, or to comply with applicable law. Our support tools that let staff act on an account do not give access to connected Google, Notion or GitHub data.

Disconnecting and deletion

You can disconnect Google at any time in Uno Work (Settings → Connectors). When you disconnect, we revoke our access with Google and delete the stored tokens. You can also remove Uno’s access from your Google account at myaccount.google.com/permissions. To delete your Uno account and all associated data, write to us at the address below.

5. Sharing

We share data only with: infrastructure providers (data centers and network providers that host the underlying hardware), payment processors, and authorities where required by applicable law. Each provider receives only what is necessary to deliver its function.

6. Retention

Account and billing records are kept as long as your account exists and thereafter as required for accounting and legal purposes. Content of terminated services is deleted after a reasonable grace period. Technical logs are rotated on shorter cycles.

7. Your rights

You can access and update account data in the dashboard. You may request a copy or deletion of your personal data by contacting us; we will honor requests except where retention is legally required. Depending on your jurisdiction (e.g. the EU/EEA), you may have additional statutory rights, which we honor accordingly.

8. Security

We use industry-standard measures: encrypted transport (TLS), hashed credentials, access controls and least-privilege operations. No system is perfectly secure — keep your API keys and passwords safe and report suspected breaches to us immediately.

9. Changes

We may update this policy; material changes will be announced on the site. Continued use after changes take effect constitutes acceptance.

10. Contact