Privacy Policy

1. Introduction

Shanghai Logical Origin Intelligent Technology Co., Ltd (the "Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the UniFlow service (the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not use the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Email address
• Password (stored encrypted)
• Display name (optional)
• Profile picture (optional)

Payment Information:

• Payments are processed by Paddle; we do not directly store your credit card or payment information
• We may receive limited payment information from Paddle, such as transaction IDs and payment status

User Content:

• Notes, documents, and other content you upload or create
• Conversation history with the AI assistant
• Voice transcription content

2.2 Information Collected Automatically

Usage Data:

• AI request count and type
• Feature usage statistics
• Subscription status and history
• Login times and session duration

Device and Technical Information:

• Device type and operating system
• Browser type and version
• IP address (for security and fraud prevention)
• Time zone settings

2.3 Information from Third Parties

Canvas LMS Data (if you choose to connect):

• Course information (names, descriptions, schedules)
• Assignment details and due dates
• Course materials and files
• Announcements and discussions

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Maintaining the Service

• Creating and managing your account
• Processing and completing transactions
• Providing customer support
• Synchronizing and displaying your Canvas data

3.2 Improving the Service

• Analyzing usage patterns to improve features
• Identifying and fixing technical issues
• Developing new features and services

3.3 Communication

• Sending service-related notifications (such as account confirmation, security alerts)
• Responding to your inquiries and requests
• Sending product updates and marketing information (if you opt in)

3.4 Security and Compliance

• Detecting and preventing fraud and abuse
• Enforcing our Terms of Service
• Complying with legal obligations

4. AI Services and Data Processing

When you use our AI features, your input may be sent to third-party AI service providers for processing. These providers include but are not limited to:

• OpenAI (GPT models)
• Google (Gemini models)

Please note that these third-party providers have their own privacy policies and data handling practices. We recommend reviewing their privacy policies:

• OpenAI: openai.com/privacy
• Google: policies.google.com/privacy

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who help us operate the Service, including:

• Paddle (payment processing)
• Supabase (database and authentication)
• AI service providers (as mentioned above)
• Cloud hosting services

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal process, such as court orders, subpoenas, or requests from government agencies.

5.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before any such transfer and any different privacy policies that may apply.

5.4 Protection of Rights

We may disclose your information if we believe it is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to government requests.

6. Data Storage and Security

6.1 Data Storage

Your data is stored in secure databases hosted by Supabase. We use Row Level Security (RLS) policies to ensure you can only access your own data.

6.2 Security Measures

Security measures we implement include:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Access controls and permission management
• Regular security audits and updates
• Password hashing and salting

6.3 Data Retention

We retain your personal information for as long as necessary to provide the Service, or for longer periods as required or permitted by law. When you delete your account, we will delete or anonymize your personal information within a reasonable time, unless we are required by law to retain certain information.

7. Cookies and Tracking Technologies

7.1 Cookies We Use

Essential Cookies:

• Session cookies: to maintain your login status
• Security cookies: to prevent cross-site request forgery and other security threats

Analytics Cookies (if applicable):

• Help us understand how the Service is used
• Collect anonymous statistical data

7.2 Managing Cookies

Most web browsers allow you to control cookies through browser settings. However, if you disable certain cookies, some features of the Service may not function properly.

8. Your Rights

Depending on applicable law, you may have the following rights:

8.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

8.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate and complete information you believe is incomplete.

8.3 Right to Erasure

You have the right to request that we delete your personal information under certain conditions. You can delete your account through your account settings or by contacting our support team.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information under certain conditions.

8.5 Right to Data Portability

You have the right to request that we provide the data we have collected about you in a structured, commonly used, and machine-readable format.

8.6 Right to Object

You have the right to object to our processing of your personal information for certain purposes.

8.7 Right to Withdraw Consent

If we process your personal information based on your consent, you have the right to withdraw your consent at any time.

To exercise these rights, please contact us at privacy@uniflowstudy.com. We will respond to your request within 30 days of receiving it.

9. Children's Privacy

Our Service is not directed to children under 13 years of age (or a higher age as required by applicable law). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your country or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. If you are located outside China and choose to provide information to us, please note that we transfer the data, including personal data, to China and process it there.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will also update the "Last Updated" date at the top of this Privacy Policy.

For significant changes, we will provide advance notice via email or in-service notification before the changes take effect. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our data handling practices, please contact us at:

• Privacy inquiries: privacy@uniflowstudy.com
• General support: support@uniflowstudy.com
• Company: Shanghai Logical Origin Intelligent Technology Co., Ltd