Privacy Policy

1. Overview

UNITH AI Limited ('UNITH', 'we', 'us', or 'our') is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at unith.ai, our platform at app.unith.ai, and our API services.

UNITH AI Limited is the data controller for personal data processed through our website and platform. We are registered in England and Wales. Our Data Protection Officer can be reached at dpo@unith.ai.

This policy is effective as of 1 May 2026 and complies with the UK GDPR, EU GDPR (Regulation 2016/679), and applicable data protection laws in the jurisdictions where we operate.

2. Data we collect

Account data: Name, email address, company name, job title, and billing information when you create an account or purchase a subscription.
Usage data: Log files, IP addresses, browser type, pages visited, session duration, and feature usage within the platform.
Communication data: Emails and messages sent via contact forms, support tickets, or direct email correspondence.
Conversation data: Data from digital human sessions run on our platform, subject to your data processing agreement and applicable retention settings.
Cookie data: Preference, analytics, and functionality cookies. See our Cookie Policy for full details.

3. Legal basis for processing

Contract performance: To fulfil our contractual obligations to you as a customer or user of our services.
Legitimate interests: To improve our products, prevent fraud, ensure platform security, and communicate service updates.
Legal obligation: To comply with applicable laws including tax, financial reporting, and data protection requirements.
Consent: For marketing communications and non-essential cookies, where we rely on your explicit consent.

4. How we use your data

We use personal data to: provide and maintain the UNITH platform; process payments and manage subscriptions; respond to support requests and enquiries; send transactional emails (confirmations, invoices, service notifications); improve platform features and fix bugs; comply with legal obligations; and prevent fraud and ensure platform security.

6. International data transfers

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority. EU customers can opt for EU-only data residency — contact your account manager for details.

7. Retention

Account data is retained for the duration of your subscription plus 3 years. Conversation logs are retained for 90 days by default; enterprise customers may configure custom retention periods under their DPA. Marketing data is retained until you withdraw consent. Backup copies may persist for up to 30 days following deletion.

8. Your rights

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete personal data.
Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to restriction: Request that we limit how we process your data in certain circumstances.
Right to data portability: Receive your personal data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests or direct marketing at any time.

9. Security

UNITH is SOC 2 Type II certified. We implement TLS 1.3 encryption in transit, AES-256 encryption at rest, strict access controls, and regular third-party penetration testing. In the event of a personal data breach, we will notify you and the relevant supervisory authority within 72 hours where required by law.

10. Contact and complaints

To exercise your rights, withdraw consent, or raise a data protection concern, contact our Data Protection Officer at dpo@unith.ai or write to: UNITH AI Limited, 1 Canada Square, Canary Wharf, London E14 5AB.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, or with your local supervisory authority within the EU.