Privacy Policy & Terms of Service
Privacy Policy — 1. Who We Are
Umbrella4AI Limited ("U4AI", "we", "our", "us") is a SaaS provider and AI consulting company registered in Cyprus. We are committed to protecting the personal data of our clients, website visitors, and partners in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Cyprus data protection law. Our Data Protection Officer can be reached at: contact@u4ai.ai
Privacy Policy — 2. Data We Collect
We may collect the following categories of personal data: Contact information — name, email address, company name, and telephone number provided through our contact form or direct communication. Usage data — IP addresses, browser type, pages visited, and use logs of our website, collected via privacy-preserving analytics tools. Communication records — the content of emails, calls, or messages you send to us. Client project data — data shared during a consulting engagement, subject to a separate Data Processing Agreement.
Privacy Policy — 3. Legal Basis for Processing
We process your personal data on the following legal bases under Article 6 GDPR: Legitimate interests — to respond to enquiries and improve our services. Contractual necessity — to perform the consulting services you have engaged us to deliver. Legal obligation — to comply with applicable tax, accounting, and regulatory requirements. Consent — for marketing communications, where you have opted in explicitly.
Privacy Policy — 4. EU Data Residency
All personal data is stored and processed on servers located within the European Union. We do not transfer personal data outside the EEA unless we have established appropriate safeguards under Chapter V of the GDPR, such as Standard Contractual Clauses.
Privacy Policy — 5. Data Retention
Account data — retained while your account is active. Assessment responses — retained for 12 months from submission date to allow longitudinal comparison. After account deletion — all personal data deleted within 30 days upon written request or immediately if automatically requested through the platform; only principal users have the right to request/trigger delete of account information for a company account. Billing data - retained for tax authorities. Anonymized aggregate data may be retained for research purposes.
Privacy Policy — 6. Your Rights Under GDPR
As a data subject under GDPR you have the right to: Access — request a copy of your personal data; this right can be performed via the platform under account settings; email cannot be changed as it is linked to your account access rights, please request this by writing to U4AI. Rectification — correct inaccurate personal data. this right can be performed via the platform under account settings. Erasure — request deletion of your personal data; this right can be performed via the platform under account settings. requires the company account principal user to enforce erasure. Portability — receive your data in a portable format; this right can be performed via the platform under account settings. Restriction — limit how we process your data. Objection — object to processing based on legitimate interest. To exercise any of these rights, use platform functionality when available or contact contact@u4ai.ai. We will respond within 30 days as required by GDPR. You also have the right to lodge a complaint with the Commissioner for Personal Data Protection at www.dataprotection.gov.cy.
Privacy Policy — 7. Cookie Policy
U4AI uses strictly necessary cookies only. Cookies we use: Authentication cookies — set by Supabase to keep you securely logged in. Automatically deleted when you log out or close your browser. These are strictly necessary and cannot be disabled without breaking login. Security cookies — set by Cloudflare to protect our platform from automated attacks and DDoS. Strictly necessary for platform security. Cookies we do NOT use: we do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar, advertising networks, retargeting scripts, or any other tracking or marketing cookies.
Privacy Policy — 8. Privacy by Design
U4AI is built on a Privacy by Design principle as defined under Article 25 of the GDPR. This means: no third-party tracking or analytics scripts are loaded; no advertising networks or social media pixels; no session recording tools; assessment responses are encrypted and stored in EU-based infrastructure (Frankfurt, Germany); data is never shared with third parties without explicit consent; you can request deletion of all your data at any time by contacting contact@u4ai.ai.
Terms of Service — 1. Acceptance
By using the U4AI website or engaging our services, you agree to these Terms of Service. If you do not agree, please do not use our website or services. These terms are governed by Cyprus law and, where applicable, EU law.
Terms of Service — 2. Services
U4AI provides SaaS and Human Expert AI consulting and implementation services. The scope, deliverables, timeline, and fees for each engagement are defined in a separate Statement of Work or Service Agreement signed by both parties. For SaaS services the fees and services covered can be found on our web page (u4ai.ai/plans). These Terms of Service govern the general relationship and website use; the Statement of Work governs each specific engagement.
Terms of Service — 3. Intellectual Property
All methodologies, frameworks, and tools developed by U4AI prior to or independently of a client engagement remain the intellectual property of U4AI. Deliverables created specifically for a client engagement are assigned to the client upon receipt of full payment, unless otherwise agreed in writing.
Terms of Service — 4. Confidentiality
Both parties agree to maintain the confidentiality of proprietary and sensitive information shared during an engagement. This obligation survives termination of the engagement for a period of three years.
Terms of Service — 5. Limitation of Liability
U4AI's liability for any claim arising from our services is limited to the fees paid by the client in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential damages. Our recommendations are advisory in nature; implementation decisions remain the client's responsibility.
Terms of Service — 6. Governing Law
These Terms are governed by the laws of Cyprus and the European Union. Any disputes will be subject to the exclusive jurisdiction of the courts of Cyprus.
Terms of Service — 7. Changes
We reserve the right to update these Terms and our Privacy Policy. Material changes will be communicated via email to active clients and posted on this page with an updated "Last updated" date. Continued use of our services after changes are posted constitutes acceptance.