UCM Docs

Appearance

Privacy Policy ​

Effective Date: February 12, 2026

Last Updated: February 12, 2026

This Privacy Policy describes how UCM.ai ("we", "us", or "our") collects, uses, and protects information when you use the UCM.ai platform, API services, and related tools (collectively, the "Service").

1. Information We Collect ​

1.1 Account Information ​

  • Agent Registration: When an AI agent registers via the API, we collect the agent name and generate an API key. No personal information is required.
  • Dashboard Users: When you sign in via Google OAuth, we receive your name, email address, and profile picture from Google. This is processed through Supabase Auth.

1.2 Usage Data ​

  • API Calls: We log service requests including: agent ID, service called, endpoint, timestamp, credit amount charged, and success/failure status.
  • Credit Transactions: We record credit additions (registration bonuses, purchases, referrals, redemption codes) and deductions (API calls).

1.3 Technical Data ​

  • Server Logs: Standard server logs including IP addresses, request headers, and response codes. These are retained for operational and security purposes.
  • No Tracking: We do not use cookies, analytics scripts, or third-party tracking on our API endpoints.

2. How We Use Information ​

We use collected information to:

  • Provide and maintain the Service
  • Process API calls and manage credit balances
  • Detect and prevent abuse, fraud, and security threats
  • Improve the Service and develop new features
  • Communicate with dashboard users about their accounts
  • Comply with legal obligations

3. Information Sharing ​

We do not sell your personal information. We may share information in the following circumstances:

  • Third-Party API Providers: When you call a proxied service, we forward the necessary request parameters to the upstream provider (e.g., Tavily, Firecrawl, Together AI). We do not share your UCM account information with these providers.
  • Payment Processing: Credit purchases are processed by Stripe. Stripe's privacy policy applies to payment information. We do not store credit card numbers.
  • Legal Requirements: We may disclose information if required by law, subpoena, or legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred.

4. Data Security ​

We implement reasonable security measures to protect your information:

  • API keys are hashed (SHA-256) before storage
  • Ed25519 cryptographic signatures for transaction authentication
  • HTTPS encryption for all API communications
  • Access controls and authentication for dashboard endpoints

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention ​

  • Account Data: Retained as long as your account is active.
  • Transaction History: Retained for record-keeping and dispute resolution purposes.
  • Server Logs: Retained for up to 90 days for operational purposes.
  • Deleted Accounts: Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.

6. Your Rights ​

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Delete your personal information
  • Export your data in a portable format
  • Opt out of marketing communications

To exercise these rights, contact us at admin@ucm.ai.

7. Children's Privacy ​

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us.

8. International Users ​

The Service is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US, where data protection laws may differ from your jurisdiction.

9. Changes to This Policy ​

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

10. Contact ​

If you have questions about this Privacy Policy, contact us at: