Privacy Policy

1. Introduction

Mai Studio OÜ ("Company", "we", "us") operates the UNCLE platform. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service. We are committed to GDPR compliance as an EU-based company.

2. Data We Collect

Account data: Email address, name, and authentication credentials when you create an account.

Workspace data: Business configurations, records, and content you create within your workspace. This data is stored in your tenant's isolated database partition.

Usage data: Pages visited, features used, AI prompt counts, and error logs for improving the Service.

Device data: Browser type, operating system, and IP address for security and analytics.

3. How We Use Your Data

We use your data to: (a) provide and maintain the Service; (b) process AI requests through third-party AI providers (OpenAI); (c) send transactional emails (account verification, password resets); (d) improve the Service through aggregated, anonymized analytics; (e) prevent fraud and ensure security.

4. AI Data Processing

When you use AI features, your prompts and relevant workspace configuration data are sent to OpenAI for processing. We do not send your actual business records to AI providers unless you explicitly include them in a prompt or attach them. AI providers process data according to their own data processing agreements and do not use your data for training.

5. Data Storage & Security

Your data is stored on secure cloud infrastructure in the EU region. We implement row-level security, encrypted connections (TLS), and tenant isolation to protect your data. Access to production systems is restricted to authorized personnel only.

6. Data Sharing

We do not sell your personal data. We share data only with: (a) infrastructure providers (Supabase, AWS) for hosting; (b) AI providers (OpenAI) for processing AI requests; (c) payment processors for billing; (d) law enforcement when legally required.

7. Your Rights (GDPR)

As an EU-based company, we respect your rights under GDPR. You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) delete your account and all associated data; (d) export your data in a portable format; (e) restrict or object to certain processing; (f) withdraw consent at any time.

To exercise these rights, contact us at uncle@maistudio.co.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data and workspace data is permanently deleted within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics are collected server-side without third-party tracking scripts.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification at least 14 days before taking effect.

12. Using UNCLE in ChatGPT

If you connect UNCLE to ChatGPT, ChatGPT can read and update records in the UNCLE workspaces you belong to, with the same permissions you have in UNCLE.

What is shared: the records, field values and workspace names that ChatGPT opens through UNCLE while answering your requests, plus your name and email so ChatGPT knows which account is connected.

Who receives it: OpenAI, to generate ChatGPT's responses.

Retention: UNCLE keeps its normal activity log of changes made through ChatGPT, under the retention described in section 8. OpenAI keeps conversation data according to its own privacy policy.

Your control: you can disconnect UNCLE at any time in ChatGPT's settings; access ends immediately.

13. Contact

For privacy-related inquiries, contact our data protection team at uncle@maistudio.co.

Mai Studio OÜ
Tallinn, Estonia