Privacy Policy

Introduction

Umwelt (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our research analysis platform.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address
• Company name and team size
• Password (encrypted)
• Profile information you choose to provide

Research Data

When you use our platform, we process:

• Audio and video files you upload
• Transcripts and documents
• Studies, insights, and annotations you create
• Chat queries and conversations with our AI

Usage Information

We automatically collect:

• Log data (IP address, browser type, device information)
• Usage patterns and feature interactions
• Performance and diagnostic data

How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Process and transcribe your research data
• Generate AI-powered insights and analysis
• Enable team collaboration and sharing
• Send service updates and support communications
• Monitor and analyze usage patterns
• Detect and prevent fraud or security issues

Data Sharing and Disclosure

We do not sell your personal information. We share data only in these situations:

Service Providers

We work with third-party service providers who process data on our behalf:

• Supabase - Database and authentication
• OpenAI - AI transcription and analysis
• Pinecone - Vector search for RAG queries
• Vercel - Hosting and infrastructure

Team Members

Research data you upload is shared with team members you explicitly grant access to through our sharing and collaboration features.

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with password hashing
• Regular security audits and monitoring
• Access controls and role-based permissions
• SOC 2 Type II compliance (Enterprise plans)

Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can delete studies, insights, and your account at any time through the platform. Deleted data is permanently removed from our systems within 30 days.

Your Rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your data (right to be forgotten)
• Export your data (data portability)
• Opt-out of marketing communications
• Withdraw consent

To exercise these rights, contact us at privacy@umweltlabs.com

GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements. We process personal data based on consent, contractual necessity, or legitimate interests. You have the right to lodge a complaint with your local data protection authority.

CCPA Compliance

For California residents, we comply with the California Consumer Privacy Act (CCPA). We do not sell personal information. You have rights to know what data we collect, delete your data, and opt-out of data sharing.

Cookies and Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings. Essential cookies are required for the platform to function.

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately.

International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by regulatory authorities.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: