Privacy Policy

This Privacy Policy describes the privacy practices of Uare.ai, Inc. (“we,” “us,” or “our”), and how we handle personal information collected through our website at https://www.uare.ai/, applications, and related services that link to this policy (the “Services”).

Uare.ai enables users to create, personalize, and interact with personal “Individual AI” systems through text or voice, generate content, share creations, and monetize their digital selves. Users who create and manage Individual AIs are “End Users.” This policy applies to website visitors, registered users, End Users, guest users, business contacts, and other interacting individuals.

Personal Information We Collect

Information You Provide

• Contact information: First and last name, email address, phone number, mailing address.
• Account information: Username, password, profile picture, age, gender, location, account preferences and settings.
• Payment and transaction information:Name, payment card information, billing address, transaction history, payout information, and tax-related information (processed by payment service providers; we don’t access full card data).
• Demographic information: Voluntarily provided biographical information in your profile.
• Visual, audio, and other user content: Photos, audio recordings, videos, documents, text notes, personality descriptions, personal memories, biographical information, avatar configurations, voice configurations, and other user-generated content used to create and customize your Individual AI.
• Biometric information: Voiceprints from voice samples and facial geometry data from images or videos (subject to Biometric Notice and Consent).
• Conversation and message information: Chat messages, voice inputs, audio transcripts, conversation metadata, message attachments, AI-generated responses, vector embeddings for search and memory, and conversation-level settings.
• Communications: Messages exchanged with us regarding questions, feedback, or other inquiries.
• Marketing information: Preferences for marketing communications, engagement details, and marketing segmentation data.
• Other information: Not specifically listed but used as described in this policy or at time of collection.

Third-party personal information:You’re responsible for informing third parties about our data processing and confirming their permission.

Automatic Data Collection

We and service providers automatically log and combine information about you, your device, and interactions over time:

• Device data: Operating system type and version, manufacturer and model, browser type, screen resolution, device type, IP address, unique identifiers, language settings, and general location information.
• Usage data: Pages and features viewed, time spent on pages, previous websites visited, navigation paths, activity information, access times, duration, and engagement with communications.

Data Collection Tools

• Local storage technologies: HTML5 and similar technologies providing cookie-equivalent functionality with larger data storage capacity.
• Web beacons: Pixel tags or clear GIFs tracking webpage access, email opens, and content viewing.

See Cookie Notice for additional information.

Information From Other Sources

• Third-party login information: Data from linked or connected third-party services, authorized through your privacy settings.
• Social media: Information from our pages on LinkedIn, Instagram, and other platforms through your visits or interactions.
• Other Uare.ai users: Personal information received from other users (e.g., when interacting with public Individual AIs).
• Other sources: Information from marketing partners, publicly available sources, and data providers.

Information From Connected Services

If you authorize your Individual AI to connect to third-party services (Connected Services)—such as email, calendar, messaging, document storage, productivity, CRM, payments, or social media—we may receive limited personal information through the Model Context Protocol and integration partner Composio, Inc.

Connected Service Data includes:

• Content you instruct your Individual AI to access, read, send, or modify (emails, calendar events, chat messages, documents, contact lists, customer records, social media posts).
• Associated metadata (senders, recipients, timestamps, subject lines, file names, channel names, labels).
• Connection metadata identifying authorized Connected Services and granted OAuth scopes.

How We Handle Connected Service Data

Connected Service Data is processed ephemerally per user interaction, truncated at 10KB per call, and not persisted in long-term storage, knowledge graphs, or used for AI model training. OAuth credentials and access tokens are held by Composio as our authorized sub-processor; Uare.ai doesn’t directly store OAuth tokens.

Third-party data subjects:Connected Service content may include personal information about third parties. You’re responsible for ensuring a lawful basis for sharing such information and compliance with applicable privacy laws and Connected Service terms.

Disconnecting a Connected Service: You may disconnect at any time through account settings, signaling Composio to revoke authorization. You may also revoke directly at the third-party provider.

How We Use Personal Information

To Provide Our Services

We process personal information as necessary to perform our contract with you:

• Creating, hosting, and operating your Individual AI, including processing uploaded content for knowledge, personality, communication style, avatar, and voice generation.
• Facilitating conversations between you and your Individual AI, between End Users and public Individual AIs, and communicating regarding your account.
• Generating AI-powered content (text, images, audio, video), serving personalized content feeds, and recommending Individual AIs or content.
• Analyzing Service usage to evaluate, maintain, and improve the Services.

For Sensitive Information

When creating or enhancing your Individual AI or communicating with public ones, you may provide sensitive information (health data, religion/beliefs, racial/ethnic origin, etc.). We process sensitive information only where permitted by law: with explicit consent, for substantial public interest reasons, or to comply with legal obligations.

For Research, Development, Benchmarking, and Improvement

Relying on legitimate business interests, we analyze and improve our Services:

• Service-usage insights identify trends and expand business activities.
• We don’t use your private data, voice, likeness, or Individual AI content to train foundational or shared AI models.
• We only process data to train your private, per-user model and embeddings powering your Individual AI.
• We may create aggregated, anonymized, or de-identified statistics for analytics, forecasting, and strategic planning.

For Marketing and Advertising

Based on consent or legitimate business interests, we process your personal information for marketing:

• Email: Direct marketing emails about promotions, offers, and events (based on legitimate interest or consent where required). Opt out as described below.
• Interest-based advertising: Advertising partners display ads across the web using cookies and similar technologies to track interactions and serve personalized ads. We may share user information with these companies to facilitate interest-based advertising. Learn more about limiting interest-based advertising below.

For Surveys and Reviews

Using legitimate interests, we process survey and review information to understand satisfaction, improve Services, and monitor quality.

For Supplier and Partner Relationships

For suppliers, partners, or representatives, we process information as necessary to perform contracts or manage business relationships using legitimate interests.

For Compliance and Protection

Relying on legal compliance obligations and legitimate interests in protecting rights, we process information to:

• Comply with legal and regulatory requirements.
• Enforce terms and conditions.
• Initiate, defend, or resolve legal claims or disputes.
• Protect Services security and integrity.
• Identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity.

How We Disclose Personal Information

Other End Users

According to your Individual AI settings, we make information available to other users. If your Individual AI is public, End Users may interact with it and view profile information. You control uploaded information; exercise care in what you share.

Affiliates

We may share personal information with affiliates (entities controlling, controlled by, or under common control with Uare.ai).

Service Providers

Companies and individuals providing services or helping us operate the Services or business (hosting, IT, customer support, email delivery, advertising, analytics).

Professional Advisors

Lawyers, auditors, bankers, and insurers providing professional services as necessary.

Authorities and Others

Law enforcement, government authorities, and private parties as we believe in good faith necessary or appropriate for compliance and protection purposes.

Business Transferees

Acquirers and participants in business transactions (or negotiations) involving corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or disposition of business/assets/equity interests (including bankruptcy proceedings).

Your Instruction or Permission

Other third parties where you give permission during your relationship with us.

International Data Transfers

You provide personal information directly to us in the United States. We may transfer personal information to affiliates and service providers in the United States and other jurisdictions, which may not provide equivalent protections as your home country’s data protection laws.

For cross-border transfers, we implement relevant safeguards to afford adequate protection and comply with applicable data protection laws, relying on contractual protections. Contact us (see “How to Contact Us”) for more information.

Your Privacy Rights and Choices

Access or Update Your Information

If registered, you may review and update certain personal information in your account profile by logging in.

Opt Out of Marketing Communications

You may opt out of marketing emails and texts by following opt-out/unsubscribe instructions in our communications or contacting us (see “How to Contact Us”). You may continue receiving Services-related and non-marketing communications.

Personal Information Requests

Depending on your location and Service interaction nature, you may request:

• Informationabout how we’ve collected and used personal information (provided in this Privacy Policy).
• Access to a copy of collected personal information; where applicable, portability (in portable, machine-readable, readily usable format to you or another designated third party).
• Correction of inaccurate or outdated personal information.
• Deletion of information we no longer need.
• Object to processing where we rely on legitimate business interest.
• Additional rights including restricting our use of personal information and withdrawing consentwhere applicable (doesn’t affect prior usage).
• Appeal our denial of requests.

Email or write as provided in “How to Contact Us.” We may request identifying information to confirm your identity. Depending on jurisdiction, you may designate an authorized agent. You’re entitled to exercise these rights free from discrimination.

Limits on Privacy Rights and Choices

In some cases, choices are limited where fulfilling requests would impair others’ rights, your requested service, or our legal compliance/enforcement ability. Contact us (see “How to Contact Us”) if unsatisfied.

Right to Complain

You may lodge a complaint with your country’s data protection regulator regarding our handling or processing of your personal information.

Right Not to Share Personal Information

Where we must collect or need information to provide services, refusing to provide it may prevent service delivery. We’ll indicate what’s necessary at collection or through appropriate means.

Other Sites and Services

Our Services may contain links to third-party websites and online services. Our content may be integrated into non-affiliated web pages. These links and integrations don’t constitute endorsement or affiliation representation. We don’t control third-party operations and aren’t responsible for their actions. This Privacy Policy doesn’t apply to third-party sites or services.

Security

We use reasonable organizational, technical, and administrative measures against unauthorized access, misuse, loss, disclosure, alteration, and destruction. Internet data transmission cannot be guaranteed completely secure; while we protect personal information, we cannot guarantee security.

Retention of Personal Information

We retain personal information only as long as necessary to fulfill purposes described in this policy, including providing Services and where we have legitimate business need (legal/regulatory requirements, terms enforcement/violation prevention, legal claim defense).

Determining appropriate retention considers personal information amount, nature, and sensitivity; unauthorized use/disclosure risk; purpose achievement; and applicable legal/regulatory requirements. Biometric information is retained per our Biometric Notice and Consent.

Children’s Privacy

Our Services aren’t intended for users under 18. If we learn we’ve collected personal information from children under 13 without required parental/guardian consent, we’ll delete it.

Changes to This Privacy Policy

We reserve modification rights. We’ll update the date and post changes. Material changes will be communicated to you.

How to Contact Us

Contact Us

For questions, comments, privacy practice inquiries, or to exercise personal information rights, email privacy@uare.ai.

EU and UK Representatives

We’ve appointed:

• European Data Protection Office (EDPO): Avenue Huart Hamoir 71, 1030 Brussels, Belgium (EU representative).
• EDPO UK Ltd:Unit 33, Waterside, Schooner Court, 44–48 Wharf Road, London, N1 7UX, United Kingdom (UK representative).

GDPR matters (Article 27): Contact EDPO using their online form at edpo.com/gdpr-data-request or write to Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

UK GDPR matters (Article 27): Contact EDPO UK using their online form at edpo.com/uk-gdpr-data-request or write to Unit 33, Waterside, Schooner Court, 44–48 Wharf Road, London, N1 7UX, United Kingdom.