UMANS CODE PRIVACY POLICY
Effective date: February 1, 2026
This policy explains how UMANS AI processes personal data when you use Umans Code.
1. Controller
UMANS AI (SAS), SIREN 943 333 708, RCS Nanterre
Registered office: 14 Rue de Sévigné, 92120 Montrouge, France
Contact for privacy requests: contact@umans.ai
2. Personal data we process
A) Account data
- email, name (if provided), organization (if provided)
- authentication events and account settings
B) Billing data (via Stripe)
- subscription status and billing events
- Stripe identifiers (for example customer, subscription, and invoice IDs)
- We do not receive or store payment card details.
C) Usage, security, and reliability metadata
- timestamps, token counts, request size, model identifier, latency
- IP address and security logs for abuse prevention
- error logs and diagnostics (status codes, traces)
D) Support
- messages and information you choose to share with support
E) Analytics (PostHog)
- product analytics events and usage measurement
- technical identifiers stored in cookies and/or localStorage depending on your cookie choices
3. Customer Content (prompts, code, files)
We process the content you submit to generate responses. By default, we do not store request payloads (prompts, code, files) as product data. If you contact support, you may choose to share content for troubleshooting.
4. Purposes and legal bases
We process personal data to:
- provide the Service, authenticate users, manage accounts (contract)
- manage subscriptions and billing events (contract, legal obligations)
- ensure security, prevent abuse, maintain reliability (legitimate interests)
- provide customer support (contract, legitimate interests)
- measure usage and improve the product with analytics (legitimate interests and/or consent for cookies where required)
5. Cookies and similar technologies
We use essential cookies for core functionality and security. We use analytics cookies and/or localStorage (PostHog) for usage measurement and product improvement. Where required by law (including in France), analytics is enabled only after you consent via our cookie preferences.
6. Recipients
We share personal data only with:
- payment processor: Stripe
- infrastructure and hosting providers
- analytics provider: PostHog
- monitoring and error tracking providers (if used)
- third-party inference providers used for service continuity routing during high load or incidents
We do not sell personal data.
7. Service continuity routing and subprocessors
During high load or incidents, we may route some requests to third-party inference providers to ensure continuity. When routed, Customer Content is transmitted to the provider only to generate the response. For competitive and security reasons, we do not publish provider names publicly. Details are available on request.
8. International transfers
Because we serve customers globally and may route requests to third parties, personal data may be processed outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions. You can request more details at contact@umans.ai.
9. Retention
We keep personal data only as long as needed:
- account data: for the life of the account, then up to 12 months
- usage and security logs: up to 12 months
- error logs: up to 90 days
- support communications: up to 24 months
- billing records: as required by law
10. Your rights
Depending on your location, you may have rights of access, rectification, erasure, restriction, objection, and portability. To exercise rights, contact contact@umans.ai. You may lodge a complaint with your data protection authority (in France: CNIL).
11. Changes
We may update this policy and will provide reasonable notice for material changes.