UMANS CODE PRIVACY POLICY

Effective date: February 1, 2026

This policy explains how UMANS AI processes personal data when you use Umans Code.

1. Controller

UMANS AI (SAS), SIREN 943 333 708, RCS Nanterre
Registered office: 14 Rue de Sévigné, 92120 Montrouge, France
Contact for privacy requests: contact@umans.ai

2. Personal data we process

A) Account data

  • email, name (if provided), organization (if provided)
  • authentication events and account settings

B) Billing data (via Stripe)

  • subscription status and billing events
  • Stripe identifiers (for example customer, subscription, and invoice IDs)
  • We do not receive or store payment card details.

C) Usage, security, and reliability metadata

  • timestamps, token counts, request size, model identifier, latency
  • IP address and security logs for abuse prevention
  • error logs and diagnostics (status codes, traces)

D) Support

  • messages and information you choose to share with support

E) Analytics (PostHog)

  • product analytics events and usage measurement
  • technical identifiers stored in cookies and/or localStorage depending on your cookie choices

3. Customer Content (prompts, code, files)

We process the content you submit to generate responses. By default, we do not store request payloads (prompts, code, files) as product data. If you contact support, you may choose to share content for troubleshooting.

4. Purposes and legal bases

We process personal data to:

  • provide the Service, authenticate users, manage accounts (contract)
  • manage subscriptions and billing events (contract, legal obligations)
  • ensure security, prevent abuse, maintain reliability (legitimate interests)
  • provide customer support (contract, legitimate interests)
  • measure usage and improve the product with analytics (legitimate interests and/or consent for cookies where required)

5. Cookies and similar technologies

We use essential cookies for core functionality and security. We use analytics cookies and/or localStorage (PostHog) for usage measurement and product improvement. Where required by law (including in France), analytics is enabled only after you consent via our cookie preferences.

6. Recipients

We share personal data only with:

  • payment processor: Stripe
  • infrastructure and hosting providers
  • analytics provider: PostHog
  • monitoring and error tracking providers (if used)
  • third-party inference providers used for service continuity routing during high load or incidents

We do not sell personal data.

7. Service continuity routing and subprocessors

During high load or incidents, we may route some requests to third-party inference providers to ensure continuity. When routed, Customer Content is transmitted to the provider only to generate the response. For competitive and security reasons, we do not publish provider names publicly. Details are available on request.

8. International transfers

Because we serve customers globally and may route requests to third parties, personal data may be processed outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions. You can request more details at contact@umans.ai.

9. Retention

We keep personal data only as long as needed:

  • account data: for the life of the account, then up to 12 months
  • usage and security logs: up to 12 months
  • error logs: up to 90 days
  • support communications: up to 24 months
  • billing records: as required by law

10. Your rights

Depending on your location, you may have rights of access, rectification, erasure, restriction, objection, and portability. To exercise rights, contact contact@umans.ai. You may lodge a complaint with your data protection authority (in France: CNIL).

11. Changes

We may update this policy and will provide reasonable notice for material changes.