Privacy Policy
“unulu™” is a trading name / brand operated by Sugarsnap Inc. (Corporate File No. 7253311). This policy applies to the Unulu™ platform at unulu.ai, including our API at api.unulu.ai and MCP server at mcp.unulu.ai.
Effective date: 22 February 2026
What we collect
When you create a bio site we store the content you provide: display name, bio text, links, and theme preference. When you claim a site we additionally collect your email address and chosen handle. We also collect technical data such as IP addresses (for rate limiting) and error and usage logs.
How we use it
We use your data to create, host, and serve your bio sites; to process claims and send verification emails; to enforce rate limits and prevent abuse; and to monitor errors and improve the service.
Public content
Bio sites are public by default. The display name, bio text, links, handle, and theme you publish may be viewed by anyone with the link and may be indexed by search engines. Do not include sensitive personal information in public site content.
Third-party services
Your data may be processed by the following services, each operating under their own privacy policies: Cloudflare (hosting & CDN), AWS DynamoDB (database storage), Postmark (transactional email), Sentry (error tracking), and Axiom (logging).
Cookies and analytics
We use Sentry and Axiom to collect error reports and web performance metrics. These tools may set functional cookies or use local storage for session tracking. We do not use cookies for advertising or cross-site tracking.
Model training
We do not use your content or usage data to train machine-learning models.
AI agent access
When you use unulu™ through a third-party AI platform, your prompts are processed by that platform before reaching us. We do not control what data those platforms transmit; we process the API requests we receive. Please refer to the respective platform’s privacy policy for how they handle your data. unulu™ is not affiliated with, endorsed by, or sponsored by any third-party AI platform.
Data retention
Unclaimed sites expire automatically after a short period (default 3 hours). Claimed sites persist until you delete them. Email addresses are retained only for claimed sites. We retain security, access, and error logs for a limited period as necessary to operate the service, prevent abuse, and debug issues. Deletion of sites or account data may not be immediate across caches, backups, and logging systems.
Security
All data is transmitted over HTTPS. We enforce access controls on API endpoints and apply rate limiting to prevent abuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
You may request deletion of your data by contacting us at legal@unulu.ai. We will use commercially reasonable efforts to process deletion requests promptly, subject to any legal obligations to retain certain data.
Children
The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us at legal@unulu.ai and we will take reasonable steps to delete it.
Changes to this policy
We may update this policy from time to time. Changes take effect when posted to this page.
Contact
Questions about this policy? Reach out at legal@unulu.ai. Our mailing address is: Suite 1487, 4th FL, 1007 N Orange St, Wilmington, DE 19801.