Privacy Policy

1. Information We Collect

• Account Information: Name, email, company name, role/title.
• Connected Platform Data (if authorized): account identifiers and performance metrics (e.g., follower count, reach/impressions, engagement, views, and post/account insights) used to generate roster pages and media kits.
• Contract & Deal Data: contracts, SOWs, deliverables, timelines, invoices.
• Communication Data (if enabled): deal-related email threads and messages.
• Technical Data: IP, browser/device info, logs, usage data.

2. How We Use Information

• Provide and operate the UnifyOS platform
• Extract and structure contract terms
• Generate drafts using AI tools
• Track deliverables, timelines, invoices, and payments
• Improve functionality and respond to support
• Comply with legal obligations

We do not sell user data.

3. Meta / Facebook Platform Data

• We only access information necessary to provide requested functionality.
• Meta data is used only to generate roster pages and media kits (e.g., follower count, reach/impressions, engagement, views, and insights where permitted).
• Meta data is not used for contract parsing or email drafting.
• We do not post on your behalf unless explicitly authorized.
• We do not share Meta data with third parties for advertising.

4. TikTok Platform Data

The unify-os application may request access to your TikTok account data through TikTok's official API. When you connect your TikTok account:

• We only access information necessary to provide requested functionality (e.g., follower count, engagement metrics, and video performance data).
• TikTok data is used solely to generate roster pages and media kits within UnifyOS (unify-os).
• We do not post, modify, or delete content on your TikTok account.
• We do not share TikTok data with third parties for advertising purposes.
• You may disconnect your TikTok account at any time through your settings.

5. YouTube API Services

UnifyOS uses YouTube API Services. When you connect YouTube, we may access your channel identifier and profile, subscriber and video performance metrics, and — when separately authorized — aggregate viewer demographic reports such as age group and gender for the displayed reporting period.

• Authorized YouTube Analytics data is visible only to the creator who connected the channel and agency managers or administrators the creator has approved to act on their behalf. It is not shown on anonymous public roster pages.
• We use this data to provide creator performance reporting and media-kit tools; we do not sell it or use it for advertising.
• Our use of YouTube data is also governed by the YouTube Terms of Service and the Google Privacy Policy.
• You can disconnect YouTube in UnifyOS settings at any time. This removes the stored OAuth credential and cached YouTube Analytics data, and UnifyOS makes a best-effort request to revoke the Google grant. You can also revoke access directly from Google's third-party access settings.
• You may request deletion of your YouTube API data at any time by contacting us at team@unify-os.com.

6. Gmail and Google Workspace Data

When an authorized manager or administrator connects Gmail or a Google Workspace mailbox, UnifyOS accesses Google user data only to provide the visible inbox and productivity features they choose to use.

• We access email messages, threads, headers, attachments, labels, and mailbox status to display and synchronize the connected inbox.
• We use access to create drafts, send replies, and perform message or label actions only when the user initiates those features in UnifyOS.
• OAuth credentials are encrypted. Mailbox metadata and message content may be stored on our service infrastructure to provide inbox synchronization, search, reminders, and related user-facing features.
• If an AI-assisted email drafting feature is made available and a user expressly invokes it, only the selected conversation content may be processed by a contracted AI service provider to generate that user-requested draft. Neither UnifyOS nor its service providers may use Google Workspace data to train generalized AI or machine-learning models.
• We do not sell Google user data or use it for advertising, credit decisions, or audience profiling. Human access is prohibited except with explicit user consent, for security or abuse investigation, or when legally required.
• Users may revoke UnifyOS access at any time through Google's third-party access settings. They may request deletion of stored Gmail data by contacting team@unify-os.com.
• Disconnecting a Gmail account in UnifyOS removes the encrypted OAuth credentials and synchronized mailbox data from active systems, and UnifyOS makes a best-effort request to revoke the Google authorization. If Google cannot process that request, users can revoke UnifyOS directly from Google's third-party access settings.
• We retain Gmail OAuth credentials and synchronized Gmail content only while needed to operate the connected inbox or meet legal obligations. After a verified deletion request, we delete the credentials and synchronized Gmail data from active systems, except for information we must retain to comply with law or resolve security and abuse matters.

UnifyOS's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. UnifyOS does not use Google Workspace data to train generalized AI or machine-learning models.

7. Data Sharing

We may share data only with service providers (hosting/analytics/AI processing), payment processors, or legal authorities when required. Providers are contractually obligated to protect data.

8. Cookies and Similar Technologies

UnifyOS stores, accesses, and collects information on or from your device and browser using cookies and similar technologies. We use them to operate the platform, keep you signed in, remember your preferences, and understand performance and errors. We do not use cookies for advertising, and we do not sell information collected through them.

Cookies we set (first party)

• Authentication and session cookies (set through our authentication provider, Supabase) keep you signed in and protect your account. These are essential; UnifyOS cannot work without them.
• Preference cookies, such as the view mode an administrator has selected (for example, unify_admin_view_mode).
• Security cookies used during social-account connections. When you connect Instagram, TikTok, YouTube, or Facebook, we set a short-lived cookie (about 10 minutes) that binds the authorization request to your browser to prevent cross-site request forgery. It is deleted when the connection completes.

Local storage. We use your browser's local storage to remember interface settings on your device, such as theme, currency and chart preferences, dashboard view mode, and inbox layout. This information stays in your browser and is not used to track you across other sites.

Third-party technologies

• Vercel Speed Insights collects anonymous performance measurements (page load timings, page path, browser and device type, connection type) to help us keep UnifyOS fast. It does not set cookies.
• Sentry collects error and crash diagnostics, which may include your browser and device information, the page you were on, and technical details of the error, so we can fix problems.
• Stripe hosts our billing checkout and customer portal pages. When you visit those pages, Stripe may set its own cookies for fraud prevention and payments under Stripe's privacy policy.
• Google / YouTube. When you connect a YouTube account, Google's own cookies and policies apply on Google's sign-in and consent pages. See "YouTube API Services" above for how we handle YouTube data.

Your choices. You can block or delete cookies and clear local storage through your browser settings. Because authentication cookies are essential, blocking them will prevent you from signing in to UnifyOS. Where local law requires consent for non-essential technologies, we will ask for it before they are used.

9. Data Retention

We retain user data for as long as your account remains active, or as needed to provide services and meet legal obligations. You may request deletion at any time.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards. No system can guarantee absolute security.

11. Children's Privacy

UnifyOS is not intended for individuals under 18.

12. Your Rights

You may have rights to access, correct, delete, or object to certain processing. To exercise these rights, contact: team@unify-os.com

13. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a revised effective date.

14. Contact Us

UnifyOS — team@unify-os.com