Privacy Policy

Last updated: November 1, 2026

1. Who we are

undara.ai is operated by Garritz Online Media International GmbH, Wiesbaden, Germany ("undara", "we"). We are the controller of the personal data described here. Contact: hello@undara.ai.

2. What we collect

• Account data: your email address and, if you sign in with Google, Apple, Microsoft, LinkedIn or GitHub, your name and profile identifier from that provider.
• Usage and project data: the skills you use, the steps you complete, the requests your skills send to undara, the outputs we generate for you, and credit usage.
• Payment data: payments are processed by Stripe. We receive confirmation of payment, not your full card details.
• Technical data: basic logs (IP address, browser, timestamps) needed to run and secure the service.

3. Why we use it (and legal basis)

• To provide the service you signed up for: your account, your skills, generating outputs and keeping project context (performance of a contract).
• To bill credits and purchases (performance of a contract; legal obligations for accounting).
• To keep the service safe — preventing abuse, enforcing usage limits and moderating requests (legitimate interest).
• To send account emails such as sign-in links (performance of a contract).

We do not sell your personal data and we do not use it to train AI models.

4. Who processes data for us

We use service providers that process data on our behalf, under data processing agreements: Supabase (database and authentication), DigitalOcean (hosting), Postmark (email delivery), Stripe (payments) and AI model providers that generate outputs for your requests (for example Anthropic and OpenAI). Some of these providers are located in the United States; transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

5. How long we keep it

We keep account and project data while your account is active. When you delete your account we delete or anonymize your personal data, except where we must keep records by law (for example invoices).

6. Your rights

You can request access to your data, correction, deletion, restriction, objection, and a copy of your data in a portable format (data portability). Write to hello@undara.ai. You can also lodge a complaint with a data protection authority — in our case the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).

7. Cookies

We use only cookies that are necessary to keep you signed in and the service secure. We do not use advertising cookies.

8. Changes

If we change this policy we will update the date above and, for material changes, notify you by email.