Privacy

Visiting this website

• No cookies.
• No analytics, advertising or tracking scripts.
• No fonts, scripts or images loaded from other companies’ servers.
• Our own server keeps only the operational logs it needs to run the site and defend it. No visitor log is kept.

Creating your Unidy account

To create your Unidy account we keep your email address and the language you chose. With the signup we also record the line your browser sends about itself, which says whether you are on a phone, a tablet or a computer and which browser it is, and the network address (IP address) the request came from. We use them to run your Unidy and to stop abuse, and for nothing else.

If you signed up through a referral link or code that someone sent you, we also record who invited you, so the invitation counts for them. That person sees that you joined, and nothing else from your Unidy account.

We write to you about your Unidy: to confirm your email address, about signing in and the security of your account, and with the reminders you set, such as a document's expiry date. We send no marketing unless you ask for it.

Continue with Google, Microsoft or Apple

If you choose Continue with Google, Continue with Microsoft or Continue with Apple, that company tells us the identifier of your account with them and its email address, and nothing else: not your picture, your mailbox or your contacts. We keep the identifier to recognize you the next time, and treat that email address as if you had typed it, including the confirmation message we send to it.

Apple also sends your name, once, the first time you choose Continue with Apple, and lets you hide your real email address behind one of Apple's that forwards to it. When you add Continue with Apple to a Unidy account that has no name yet, the name Apple sends becomes the account's name, and you can change it; otherwise we do not keep the name Apple sends.

That company learns that you used your account with them to sign in to Unidy. It learns nothing about what you keep in your Unidy.

Signing in

Each time you sign in we record when it happened, the network address (IP address) it came from, the approximate place of that address (country, region and city, never an exact position) and the kind of device (for example: phone, iOS, Safari). You see them in your Unidy account, in the Audit section, with every change to how you sign in and anything Unidy support did with your account. We keep them to protect your Unidy, and for nothing else.

If you add a passkey, it stays on your phone or computer, unlocked by your face or fingerprint there. We keep only its public part, which cannot open anything on its own.

What you keep in your Unidy account

The information and documents you add are yours. Each Unidy is encrypted with a key of its own, kept on separate systems from your information and documents, as the security page explains.

We use what you keep only to provide Unidy to you: to show it to you, to read the details you ask Unidy to read, such as an expiry date, and to share what you authorize with the people and organizations you authorize. We never sell it, never use it for advertising, and never share it without your permission, except where the law obliges us to.

A person or organization you share with sees only the information and documents you chose, and every access is recorded so that you can see it in your Unidy account.

Banners in your Unidy account

The Home screen of your Unidy account shows banners: news from Unidy and offers from other companies. Each time you see a banner, open it, tap its button or close it, we record it in your Unidy account, with the time and the kind of device. You see each of these records in your Unidy account, in the Audit section.

We keep these records to understand how each banner works. A company with a banner in Unidy does not receive them. They are deleted with your Unidy account.

Paying with a card

Card payments are handled by Stripe, the payment company Unidy works with. You type your card details into Stripe's form: in Unidy in your web browser it appears inside Unidy's page, and in the phone app it is Stripe's own page. Your full card number and its security code go straight to Stripe; Unidy never sees or keeps them.

For each Unidy that has paid with a card in the web browser, Stripe keeps a customer record holding only a Unidy reference, and the card kept for the next payment. To show you which card is kept, Unidy asks Stripe for its brand, its last four digits and its expiry date each time, and does not store them. Of each payment we keep the amount, the currency, the date and whether it was paid.

Stripe handles this information under its own privacy policy. You can remove the kept card at any time, in Balance; from then on it is no longer kept for your Unidy.

Where your information is kept

Unidy runs on infrastructure provided by established cloud providers, including Google Cloud and Cloudflare. Encrypted documents may be stored using Cloudflare R2, while application, processing and security services may operate on Google Cloud infrastructure. Encrypted data and the cryptographic material required to access it are kept in separate systems. Our emails are delivered by Resend. No analytics, advertising or tracking company is involved.

Keeping and deleting

You can delete your Unidy account and everything in it yourself, at any time, in the Account section. We do not ask why.

Write to legal@unidy.com to ask what information we hold about you, or to correct it. We answer.

Our backup copies are replaced every day, so deleted information is gone from them within two days.

Who holds this information

The controller of the personal data described above is Unidy Inc., 5900 Balcones Drive, Suite #34347, Austin, TX 78731, United States.