Privacy Policy

Effective date: March 18, 2026

1. Introduction

SAAS.PROJECT is operated by UNTH.AI, based in Bangkok, Thailand. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at saas.unth.ai and any related services.

By accessing or using our service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the service.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and optionally your company name and role.

Usage Data

We automatically collect information about how you interact with our platform, including:

• Pages visited and features used
• Device type, browser, and operating system
• IP address and approximate location
• Session duration and interaction patterns

Integration Data

When you connect third-party platforms (such as Shopify, HubSpot, WooCommerce, or other supported integrations), we access and process data from those platforms as necessary to provide our AI agent services. This may include product catalogs, customer analytics, order data, and marketing content.

Payment Data

Payments are processed by Stripe. We do not store your credit card numbers, CVV, or full payment details on our servers. We retain only a transaction reference, billing email, and subscription status.

3. How We Use Your Information

We use the information we collect to:

• Provide the service — power your AI agents, generate reports, and deliver insights
• Improve AI agents — analyze aggregate usage patterns to improve agent accuracy and performance
• Send reports and notifications — weekly performance reports, agent activity summaries, and system alerts
• Process billing — manage subscriptions, invoices, and payment history
• Provide support — respond to your inquiries and troubleshoot issues
• Ensure security — detect and prevent fraud, abuse, and unauthorized access

4. Data Processing by AI Agents

Our AI agents process your business data — including product catalogs, analytics, marketing content, and customer interactions — to perform their designated functions (e.g., content generation, SEO optimization, ad management, customer support).

Key principles governing AI data processing:

• On-demand processing — your data is processed only when agents are actively performing tasks you have configured
• No model training — your business data is never used to train or fine-tune AI models
• BYOK encryption — if you use Bring Your Own Key (BYOK), your API keys are encrypted at rest using AES-256 encryption and are never exposed in logs or to other users
• Isolation — each customer's data is logically isolated and never shared across accounts

5. Data Sharing

We do not sell your personal data. We share data only with the following categories of service providers, all under appropriate data processing agreements (DPAs):

• AI model providers — Google (Gemini), Anthropic (Claude), and OpenAI for agent processing. Data sent to these providers is governed by their respective data processing terms and is not used for model training.
• Stripe — for payment processing and subscription management
• Analytics tools — for aggregated, anonymized usage analytics to improve our service

We may also disclose data if required by law, regulation, or valid legal process.

6. Data Retention

• Account data — retained while your account is active, plus 30 days after account deletion to allow for recovery
• Usage logs — retained for 90 days, then automatically purged
• Integration data — deleted upon disconnection of the integration. If you disconnect a platform (e.g., Shopify), all associated data is removed within 48 hours.
• Payment records — retained as required by applicable tax and accounting regulations

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with similar data protection laws, you have the following rights:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Restriction — request limitation of processing
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at mathieu@unth.ai. We will respond within 30 days of receiving your request.

8. Cookies

We use the following types of cookies:

• Essential cookies — required for authentication, session management, and core functionality. These cannot be disabled.
• Analytics cookies (optional) — help us understand how users interact with our platform. You can opt out at any time via your account settings.
• Preference cookies — store your language and display preferences for a better experience.

We do not use advertising or third-party tracking cookies.

9. International Transfers

Your data may be processed in data centers located in the European Union and the United States. When data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Security

We implement industry-standard security measures to protect your data:

• Encryption in transit — all data transmitted between your browser and our servers uses TLS 1.3
• Encryption at rest — all stored data is encrypted using AES-256
• Regular security audits — we conduct periodic security assessments and vulnerability testing
• Access controls — strict role-based access controls limit who can access customer data within our organization

While no system is 100% secure, we are committed to protecting your data and promptly addressing any security incidents.

11. Children

SAAS.PROJECT is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a user under 16, we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you via email at least 30 days before the changes take effect. The "Effective date" at the top of this page indicates when the policy was last revised.

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact

If you have any questions about this Privacy Policy, your data, or your rights, please contact us:

• Email: mathieu@unth.ai
• Company: UNTH.AI
• Location: Bangkok, Thailand
• Website: saas.unth.ai