Privacy Policy
Last Updated: February 11, 2026 Effective Date: February 11, 2026
Ubik, Inc., a Delaware corporation headquartered in New York, New York ("Ubik," "we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Ubik web platform (app.ubik.studio), the Ubik desktop application, our marketing website (ubik.studio), and all related services (collectively, the "Service").
1. Information We Collect
1.1 Information You Provide
Account Information. When you register, we collect your name, email address, and encrypted password. You may optionally provide an organization name, profile information, or phone number for two-factor authentication.
Content and Data. We collect datasets, research projects, documents, files, AI generation parameters, annotations, notes, and search queries that you create or upload through the Service.
Payment Information. Billing name, address, and payment method details are collected and processed securely by our payment processor, Stripe. We do not store full payment card numbers on our servers.
Communications. We collect the content of support requests, feedback, survey responses, and other correspondence you send to us.
1.2 Information Collected Automatically
Usage Data. We collect information about your interactions with the Service, including pages visited, features used, click patterns, session duration, and frequency of use.
Device and Technical Data. We collect IP address (anonymized for analytics), browser type and version, operating system, device type, screen resolution, language preferences, error logs, crash reports, and performance metrics.
Cookies and Similar Technologies. We use cookies, local storage, and similar technologies as described in our Cookies Policy.
1.3 Information from Third Parties
We may receive limited information from authentication providers (such as Clerk), payment processors (such as Stripe), and analytics services, as necessary to provide and improve the Service.
2. How We Use Your Information
We use personal information for the following purposes:
Service Operation. To create and manage your account, process transactions, deliver features and functionality, provide customer support, and send service-related notifications.
Improvement and Development. To analyze usage patterns, fix bugs, optimize performance, develop new features, and conduct internal research.
AI Features. To generate AI-powered content and recommendations, personalize your experience, and improve our AI systems using anonymized, aggregated data. We do not use your private content to train publicly available AI models without your explicit opt-in consent. You may opt out of the AI improvement program in your account settings.
Communications. With your consent, to send product updates, newsletters, educational content, and marketing materials. You may opt out of marketing communications at any time.
Legal and Safety. To comply with legal obligations, enforce our Terms of Service, prevent fraud and abuse, protect our rights and safety, and respond to lawful requests from authorities.
3. Legal Basis for Processing (EEA, UK, and Switzerland)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases: contract performance (account management, service provision, payment processing); legitimate interests (service improvement, security, fraud prevention); consent (marketing communications, optional analytics); and legal obligation (compliance with applicable laws).
4. How We Share Your Information
We do not sell your personal information.
Service Providers. We share data with trusted service providers who assist in operating the Service, including Clerk (authentication), Stripe (payment processing), Vercel (web hosting), AWS (cloud infrastructure), PostHog (analytics, anonymized data), and email delivery services. All service providers are bound by data processing agreements that restrict their use of your data to the purposes we specify.
Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy and provide you the option to delete your account.
Legal Requirements. We may disclose information when required by law, subpoena, court order, or government request, or when necessary to enforce our Terms of Service, protect our rights, or prevent imminent harm.
With Your Consent. We share information with third parties when you explicitly direct us to do so, such as when exporting data or connecting integrations.
5. Data Retention
We retain your account data and content for the duration of your account plus 30 days after deletion. Payment records are retained for seven years as required by law. Support tickets are retained for three years. Anonymized analytics data is retained for up to two years. Server logs are retained for 90 days. Backup data is purged within 90 days of account deletion.
You may request deletion of specific data without deleting your account by contacting info@ubik.studio.
6. Data Security
We implement industry-standard security measures, including TLS 1.3 encryption for all data in transit, AES-256 encryption for data at rest, role-based access controls, multi-factor authentication support, continuous security monitoring, regular security assessments, and documented incident response procedures.
No system is completely secure. We cannot guarantee the absolute security of your data. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.
7. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
Access. You may request access to the personal data we hold about you and obtain a copy in a portable format.
Correction. You may correct inaccurate personal data through your account settings or by contacting us.
Deletion. You may delete your account and request erasure of your personal data, subject to our legal retention obligations.
Objection and Restriction. You may object to certain processing activities or request that we restrict how we use your data.
Withdrawal of Consent. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
Opt-Out. You may opt out of marketing communications, optional analytics cookies, and the AI improvement program through your account settings.
To exercise your rights, use your account settings or email info@ubik.studio. We will respond within 30 days and may extend by an additional 60 days for complex requests. We may verify your identity before processing a request.
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, request correction of inaccurate information, and opt out of the sale or sharing of personal information. We do not sell personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CPRA. We will not discriminate against you for exercising your privacy rights. You may designate an authorized agent to make requests on your behalf with proper verification.
9. European Privacy Rights (GDPR)
If you are in the EEA, UK, or Switzerland, you have the rights described in Section 7, as well as the right to lodge a complaint with your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu. For GDPR-related inquiries, contact info@ubik.studio.
10. Other United States State Privacy Rights
We comply with the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and other applicable state privacy laws. Residents of these states may exercise rights similar to those described in Section 7 by contacting us at info@ubik.studio.
11. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. For transfers from the EEA or UK to countries without an adequacy decision, we use Standard Contractual Clauses approved by the European Commission, supplemented by appropriate technical and organizational safeguards.
12. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, contact us immediately at info@ubik.studio and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before the changes take effect. Your continued use after the effective date constitutes acceptance.
14. Contact
For privacy questions or to exercise your rights:
Ubik, Inc. Email: info@ubik.studio Website: https://www.ubik.studio Response Time: Within 30 days.
This Privacy Policy is effective as of February 11, 2026.