Privacy Policy

Last updated: May 2026

This Privacy Policy describes how Uniboo ("we", "us") collects, uses, and shares information when you use our Service.

1. Information We Collect

• Account information: Email address and a hashed password. We never store passwords in plaintext.
• Usage data: Strategies you build, memory slots you save, backtest history, AI assistant chat transcripts, and feature usage counts (for billing).
• Payment information: Processed by Stripe. We receive a Stripe customer ID and limited payment metadata (plan, status, last 4 digits of the card). We never see or store full card details.
• Deribit credentials: If you choose to autotrade, your Deribit API keys are stored in your browser and used to place orders directly on Deribit. Our server does not see or store your Deribit keys.
• Technical data: IP address, browser user-agent, and request timestamps for security and abuse prevention.

2. How We Use Your Information

• To provide and maintain the Service.
• To process payments and enforce subscription limits.
• To send transactional emails (account confirmation, payment receipts, security notices).
• To improve the Service (aggregated, anonymized usage patterns).
• To detect and prevent fraud, abuse, or violations of our Terms.

3. Third-Party Services

The following third parties process limited data on our behalf:

• Stripe — payment processing. Stripe's Privacy Policy.
• Anthropic — powers the Uniboo AI chat assistant. Chat messages and your current diagram state are sent to Anthropic to generate responses. Anthropic does not train models on this data per their commercial terms. Anthropic's Privacy Policy.
• Deribit — when you use the autotrade feature, your browser connects directly to Deribit's API. Their privacy practices apply to those interactions.
• Cloudflare — content delivery and DDoS protection.

4. Data Retention

We retain your account and usage data for as long as your account is active. If you delete your account, your data is erased within 30 days, except where we are legally required to retain payment records (typically 6–7 years for tax purposes).

5. Cookies and Local Storage

The Service uses browser local storage to remember your session (login token, last memory slot, draft strategy state). We do not use third-party advertising cookies or trackers.

6. Your Rights

You may at any time:

• Access the data we hold about you by emailing us.
• Correct inaccurate data through your account settings or by emailing us.
• Delete your account, which erases your personal data subject to legal retention requirements.
• Export your saved strategies and memory slots.

7. Security

We use industry-standard security practices including HTTPS for all traffic, bcrypt for password hashing, and access controls on our servers. No system is perfectly secure, but we take security seriously and respond promptly to any incident.

8. Children

The Service is not intended for users under 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice. The "Last updated" date at the top of this page reflects the current version.

10. Contact

For privacy questions or data requests, email inquiries@uniboo.com.