Privacy Policy

Legal

Last updated: October 2026

Information you give us

Ume Intelligence, Inc. ("Ume", "we", "us", or "our") is committed to protecting the privacy of our design partners, customers, and visitors. We handle all data with confidentiality and technical rigor.

On this site we collect only the information you volunteer when you inquire about early access, such as your name, company, and email address. We use it solely to evaluate potential partnerships and to keep you informed of our progress. We do not use cookies for tracking, and we do not sell your data to third parties.

We count aggregate visits with a self-hosted, privacy-first analytics tool (Umami) running on our own infrastructure. It sets no cookies, does not track individuals across sites, and shares nothing with third parties.

Google user data

This section describes how Ume handles data accessed through Google APIs, specifically the Google Business Profile API. It applies when you, as an Ume customer, authorize Ume to read or update your Google Business Profile.

What we access

When you grant Ume the https://www.googleapis.com/auth/business.manage OAuth scope, we may access:

  • Business profile information you manage on Google: name, hours, address, phone, website, attributes, and categories
  • Photos, posts, services, and Q&A content on your Google Business Profile
  • Customer reviews on your profile, and the ability to post owner replies on your behalf
  • Performance metrics for your profile: calls, website clicks, direction requests, and search and discovery views

How we use it

We use Google user data to provide, operate, and improve the Ume service:

  • Display your Google Business Profile data in the Ume product for review and editing
  • Generate recommendations based on your data and our analyses, for example updated descriptions, opening hours, photo additions, and review replies
  • Apply updates back to your Google Business Profile only at your explicit direction
  • Evaluate and improve the Ume service, including the analytical and machine-learning models that power its features

We do not use your Google user data for advertising, ad targeting, or audience segmentation, and we never sell, rent, or trade it.

How we share it

We do not share your Google user data with third parties, except:

  • With infrastructure providers that process data on our behalf under contractual confidentiality obligations, most notably Google Cloud Platform itself, where our services run
  • When you explicitly direct us to share with a specific third party
  • When required by applicable law, regulation, or legal process

How we store and protect it

All Google user data is stored on Google Cloud Platform infrastructure in the United States. OAuth refresh tokens are encrypted at rest using Fernet symmetric encryption, with keys managed in Google Secret Manager. Access to production data is restricted to authorized Ume engineering personnel and logged for audit. Connections between Ume services and Google APIs use TLS 1.2 or higher.

Retention and deletion

We retain your Google user data only as long as you maintain an active Ume account, or as long as needed to provide the service you have requested. When you cancel your Ume account, we delete all associated Google user data within 30 days.

You may revoke Ume's access at any time at https://myaccount.google.com/permissions. Revocation immediately invalidates our refresh token, and we stop accessing your Google data. You may also request deletion of any Google user data we hold by emailing hello@umehq.ai; we delete it within 30 days of your verified request.

Limited use compliance

Ume's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

SMS and mobile messaging

When you give Ume Intelligence, Inc. your mobile number, we use it only to deliver the text messages you asked for: a sign-in code, a notice that a document someone at Ume shared with you is ready, a reminder that a shared document is about to expire, and replies to a question you sent us. We keep the number, the date and manner of your consent, and your messaging preferences.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information or SMS opt-in consent data will be shared with, sold, rented, or disclosed to third parties or affiliates for marketing or promotional purposes. Every other category in this Privacy Policy excludes text messaging originator opt-in data and consent. That information is not shared with anyone, except the messaging providers strictly necessary to deliver the text itself.

Message frequency varies with your account activity. Message and data rates may apply. Reply STOP at any time to stop receiving texts from us, or HELP for help.

Contact

For any privacy-related inquiry, including a request to access or delete your Google user data, write to hello@umehq.ai.