This Privacy Notice explains how Ubicloud B.V. and Ubicloud Inc. (“Ubicloud,” “we,” “our,” or “us”) collect, use, share and otherwise process information that identifies or could be identifiable to you (“personal data”) when you interact with websites, applications and services that display or reference this notice (together, “Ubicloud Services”).

This Privacy Notice applies to Customer Account Data. It does not apply to Customer Content Data, i.e., the “content” which our customers choose to process, store or host using Ubicloud Services in connection with a Ubicloud account. Customer Content Data also includes personal data in the input to our Ubicloud EuroGPT services, including your prompts, and the output you rightfully receive from them. As a customer, you maintain full ownership and control of this content. Our Terms of Service apply to this content and our processing of any personal data included in it. For more information, see our Terms of Service and Customer Content Data.

When you use third-party extensions, integrations, or follow references and links to third-party providers within Ubicloud Services (for example, when using Ubicloud runners for Github Actions, or when using any other Ubicloud Services offered as part of any partnerships with third parties we disclose on our website), the privacy policies of these third parties apply to any personal data you provide or consent to share with them. Their privacy statements will also govern how this data is processed.

Personal data we collect

Personal data is collected from you directly, automatically from your device and also from third parties.

When you register and use an account with us, we collect and process certain personal data from you such as your name, email address, authentication credentials (if applicable) and, where relevant, company information. When you communicate with us via email or otherwise to use Ubicloud Services, for example when asking for support or giving feedback, you supply information to us which may also include personal data of yourself and/or those within your organization such as your name, email address, phone number and job title. We may also collect personal data such as name, email address, job title and company information when you attend events or conferences and consent to provide us your personal data. When you enter your billing information to use Ubicloud Services on our website, we do not collect or store any of your payment information as you disclose this information directly to our payment service provider, Stripe. However, we are able to access the following data you provide to Stripe: your name, email address, your address, last four digits of your credit card number and credit card expiration date.

We receive personal data automatically. Examples of personal data we automatically collect include network and connection information such as your IP address and geographical location based on that IP address, information such as computer and device information including its geolocation, your service access times and statistics on page views and usage details.

We collect anonymized statistics from third-party website analytics provider Matomo to help understand our website traffic and usage and tailor our marketing efforts. We may also receive your personal data from other users within your organization, publicly available sources, third parties like vendors, resellers or partners for purposes outlined in this Privacy Notice.

How we use your personal data

The primary purpose of collecting your personal data is to provide Ubicloud Services to you and process transactions related to these services such as registrations, purchases and payments for our services. In addition, we use your personal data to measure, provide, develop, customize and improve our Ubicloud Services and our business operations (such as use of aggregated data for internal reporting, product strategy and capacity planning). We also use your personal data to communicate with you for support, feedback, direct marketing or respond to your requests. In certain cases, we may use your personal data to comply with a legal obligation, or to detect or prevent fraud and abuse and analyze security incidents to protect safety and security across Ubicloud Services.

We store personal data of all of our customers only in the European Economic Area (“EEA”). From time to time, your personal data may be accessed from outside of the EEA, including by a Ubicloud Affiliate from the United States. Any such processing would be for the purposes outlined, and in compliance with, this Privacy Notice and in reliance on either the European Commission’s adequacy decisions pursuant to Article 45(1) GDPR, or the Standard Contractual Clauses as approved by the European Commission pursuant to Article 46(2)(c) GDPR. If you’d like to find more about places of processing and security measures which we’ve taken to safeguard your personal data, or to receive a copy of the standard contractual clauses between Ubicloud entities, please contact [email protected].

How we share your personal data

We take care in selecting the organizations that may handle personal data on our behalf, including reviewing their security posture and data protection policies. They are bound by contractual obligations towards us to ensure the security, privacy, and confidentiality of your information.

Please visit our sub-processors page for a list of our processor and sub-processors of customer account data.

In addition, we may be required to share your personal data to satisfy applicable law, regulation, legal process, or governmental requests, including requests made by public authorities, or to enforce our Terms of Service. This includes sharing of your data to detect, prevent or otherwise address fraud, security, or technical issues or to protect our rights, property or safety, our users and the public.

We may process personal data relating to you if one of the following applies:

  • Processing is required to fulfil our contractual duties to you in accordance with our Terms of Service.
  • We process personal data when it’s necessary to comply with applicable laws.
  • We process data for purposes that are in our legitimate interests, such as securing Ubicloud Services, communicating with you, and analyzing, developing and improving Ubicloud Services.
  • We process personal data when you have explicitly consented to such processing. When we rely on consent as the legal basis, you have the right to withdraw your consent for data processing at any time; however, you may not be able to use some Ubicloud Services if you withdraw your consent.

How we secure and retain your personal data

We use appropriate technical, administrative and physical security controls to protect your personal data. You can read about our security practices in the general security page and under the “Security Tab” of our Documentation generally.

We’ll retain your personal data while you maintain an account with us, and for as long as required by the purpose for which we collected it. Personal data which we collected relating to a contract will be retained until the contract has been fully performed by both parties. Personal data collected for our legitimate interests will be retained as long as needed to fulfil such purpose. We may retain personal data for longer if you have given us consent for it or if we are required to do so to comply with our legal obligations, to resolve disputes and enforce agreements.

Your rights

You may exercise certain legal rights regarding your personal data processed by us. In particular, you could have a right to do the following:

  • The right to access the personal data collected about you
  • The right to request detailed information about the specific types of personal data we’ve collected from you
  • The right to rectify or update inaccurate or incomplete personal data under certain circumstances
  • The right to erase or limit the processing of your personal data under specific conditions
  • The right to object to the processing of your personal data, as allowed by applicable law
  • The right to withdraw consent, where processing is based on your consent
  • The right to receive your collected personal data in a structured, commonly used, and machine-readable format to facilitate its transfer to another company, where technically feasible.

To exercise these rights, please send an email to [email protected]. To verify your identity for security, we may request extra information before addressing your data-related request. You may also have the right to complain to your local Data Protection Authority. Customers within EEA can find authority contacts on the European Data Protection Board website. We aim to promptly respond to requests in compliance with legal requirements.

Contact us

Contact us by emailing [email protected]. Ubicloud B.V. Turfschip 267, Amstelveen, 1186 XK, The Netherlands.

Ubicloud B.V. is the “Data Controller” if you are a customer resident in the EEA.

Ubicloud Inc. 310 Santa Ana Avenue, San Francisco, 94127, CA.

Changes to our Privacy Notice

Our business changes constantly, and our Privacy Notice may also change. We strongly recommend that you check this page often, referring to the date of last modification listed at the top of this page.