Privacy Policy

“unulu™” is a trading name / brand operated by Sugarsnap Inc. (Corporate File No. 7253311). This policy applies to the Unulu™ platform at unulu.ai, including our API at api.unulu.ai and MCP server at mcp.unulu.ai.

Effective date: 14 March 2026

What we collect

When you create a bio site we store the content you provide: display name, bio text, links, and theme preference. When you claim a site we additionally collect your email address and chosen handle. We also collect technical data such as IP addresses (for rate limiting) and error and usage logs.

How we use it

We use your data to create, host, and serve your bio sites; to process claims and send verification emails; to enforce rate limits and prevent abuse; and to monitor errors and improve the service.

Public content

Bio sites are public by default. The display name, bio text, links, handle, and theme you publish may be viewed by anyone with the link and may be indexed by search engines. Do not include sensitive personal information in public site content. This includes passwords, one-time codes, API keys or access tokens, payment card data, government-issued identification numbers, health information, and other sensitive personal data.

This does not apply to credentials the service itself issues to you (such as claim codes or edit tokens) when submitted through the intended flow.

Recipients and service providers

We may disclose your data to: (a) the public, when you publish public site content; (b) service providers that help us host, secure, email, log, and monitor the service; and (c) courts, regulators, law enforcement, or other third parties where we reasonably believe disclosure is required by law or necessary to protect rights, safety, or the service.

We currently use Cloudflare (hosting & CDN), AWS (database storage), Postmark (transactional email), Sentry (error tracking), and Axiom (logging). These providers process personal data on our behalf to operate the service and may also process limited data for their own legal, security, or operational purposes as described in their terms and policies.

Cookies and analytics

We use error-tracking and logging services to collect error reports and web performance metrics. These tools may set functional cookies or use local storage for session tracking. We do not use cookies for advertising or cross-site tracking. If we introduce non-essential cookies or similar technologies in the future, we will update this policy and obtain any consent required by applicable law before doing so.

Model training

We do not use your content or usage data to train machine-learning models.

AI agent access

When you use unulu™ through a third-party AI platform, your prompts are processed by that platform before reaching us. We do not control what data those platforms transmit; we process the API requests we receive. Please refer to the respective platform’s privacy policy for how they handle your data. unulu™ is not affiliated with, endorsed by, or sponsored by any third-party AI platform.

Data retention

Unclaimed sites expire automatically after a short period (default 1 hour). Claimed sites persist until you delete them. Email addresses are retained only for claimed sites. We retain security, access, and error logs for a limited period as necessary to operate the service, prevent abuse, and debug issues. Deletion of sites or account data may not be immediate across caches, backups, and logging systems.

Security

All data is transmitted over HTTPS. We enforce access controls on API endpoints and apply rate limiting to prevent abuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data by contacting us at reveal address. We may need to verify your request and may retain limited information where required by law or for legitimate security, fraud prevention, and record-keeping purposes.

Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us at reveal address and we will take reasonable steps to delete it.

Changes to this policy

We may update this policy from time to time. Changes take effect when posted to this page. If we make material changes, we will use reasonable efforts to provide additional notice, such as a prominent notice on the service or, where reasonably practicable, notice to the email address associated with a claimed site.

Contact

Questions about this policy? Reach out at reveal address. Our mailing address is: Suite 1487, 4th FL, 1007 N Orange St, Wilmington, DE 19801.