Upcube — Privacy Policy

Who we are

Upcube Inc. (“Upcube,” “we,” “our,” or “us”) is headquartered in New York, NY 10005, USA. This Policy explains how we handle personal data (“Personal Data”) when you use our websites, applications, and services— including chatbot, search, voice, and image generation (the “Services”).

This Policy does not apply to data we process on behalf of business customers under separate contracts (e.g., enterprise plans or APIs).

1) Personal Data we collect

A. Data you provide

• Account Information: name, contact details, login credentials, payment details, transaction history.
• User Content (“Content”): inputs you provide and outputs you receive (prompts, files, images, audio/transcripts), depending on features used.
• Communications: emails, support requests, social messages, and related metadata.
• Other Submissions: events, surveys, identity/age verification where required.

B. Data from your use of the Services (Technical Information)

• Log Data: IP address, browser type/settings, timestamps, pages/features used.
• Usage Data: feature usage, actions taken, time zone, country, device/OS, app version, user agent.
• Device Info: device identifiers, OS, browser.
• Location Info: general location from IP for security/fraud prevention and service quality; some features may request precise location with your permission.
• Cookies & Similar Tech: sessions, preferences, analytics, security (see Cookies).

C. Data from other sources

• Security & fraud partners (to prevent abuse).
• Marketing partners (prospect info for B2B outreach).
• Publicly available information used to improve Services (subject to law and our data controls).

2) How we use Personal Data

• Provide & operate the Services (responses, search, voice, image features).
• Improve & develop (quality, reliability, safety, research/testing).
• Communicate (product updates, transactional messages, security notices, events).
• Protect the Services and users (fraud, abuse, security incidents, policy enforcement).
• Comply with law and protect rights, privacy, safety, and property.

We may aggregate or de-identify Personal Data for analytics, research, and service improvement. We will not re-identify de-identified data unless required by law.

Use of your Content to improve the Services

We may use your Content (inputs/outputs) to maintain, develop, and improve the Services. You may opt out of improvement uses (where available) via account data controls or by emailing upcubeco@gmail.com. Opting out may reduce personalization or feature quality.

3) Disclosure of Personal Data

• Vendors / Service Providers (hosting, support, safety monitoring, communications, analytics, payments, CDN, IT)—bound to process per our instructions.
• Affiliates under common ownership/control (consistent with this Policy).
• Business Accounts (admins may access/manage accounts and Content when you use an organization email or join an org space).
• Legal / Safety (as required by law or to protect rights, safety, and security; investigate misuse).
• Business Transactions (mergers, acquisitions, financing, or asset transfers with protections).
• With Your Direction (integrations you use; links/outputs you share).

We do not sell Personal Data or share it for cross-context behavioral advertising, and we do not process sensitive Personal Data to infer characteristics (as defined by certain U.S. state laws).

4) Retention

We retain Personal Data only as long as needed to provide the Services and for legitimate business purposes (e.g., security, dispute resolution, legal obligations). Retention depends on purpose, sensitivity, risk, and legal requirements. Some retention can be controlled by you via settings or by contacting upcubeco@gmail.com.

5) Your rights

Depending on your location, you may have rights to access, delete, correct, port, restrict/object, withdraw consent (where applicable), and complain to a supervisory authority.

You can exercise many rights via your account settings or by emailing upcubeco@gmail.com. We may need to verify your identity. Authorized-agent requests may require proof of authority and additional verification.

About accuracy of outputs

Outputs may be incomplete or inaccurate and should not be your sole source of truth or a substitute for professional advice. If output includes information about you that you believe is inaccurate and you want it corrected/removed, email upcubeco@gmail.com; we’ll assess under applicable law and technical feasibility.

International transfers

Personal Data may be processed in the U.S. and other countries. We apply the protections in this Policy regardless of where data is processed and use lawful transfer mechanisms where required.

6) Children

The Services are not directed to children under 13. We do not knowingly collect Personal Data from children under 13. If you believe a child under 13 has provided Personal Data, contact upcubeco@gmail.com; we will investigate and delete where appropriate. Users under 18 must have parental/guardian permission.

7) Security

We implement administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, loss, or misuse. No system is perfectly secure; use strong passwords, enable MFA, and consider the sensitivity of what you share.

8) Additional U.S. state disclosures

Exercising rights / appeals: email upcubeco@gmail.com. Verification may be required.

9) Cookies & similar technologies

We use cookies and similar tech for sessions, preferences, analytics, and security. Manage preferences in your browser and (where provided) via our Cookie Settings. See our Cookie Notice for details.

10) Changes to this Policy

We may update this Policy periodically. If we make material changes, we’ll provide notice (e.g., in-product or email) and update the effective date. Continued use after the effective date means you accept the updated Policy.

11) How to contact us

Not legal advice. Please have counsel review before publishing.

Regional Privacy Notice (EEA/UK/CH) — summary

• Controller: Upcube Inc. (and any appointed EU/UK representative).
• Lawful bases: contract; legitimate interests (security, fraud prevention, improvement); consent (where required, e.g., marketing or precise location); legal obligations.
• Rights: access, deletion, correction, portability, restriction/objection, complaint to DPA/ICO.
• Transfers: standard contractual clauses or other lawful mechanisms.
• Retention: based on purpose, sensitivity, risk, and law.
• Contact: upcubeco@gmail.com