Privacy Policy — Una

Privacy Policy

Una.AI Ltd. (“Una”, “we”, “us”) Reg. No. 516980901 · Nahal Sela’it St. 10/14, Mitzpe Ramon, Israel Last updated: 31 May 2026

Available in English and Hebrew. In case of any conflict between the versions, the English version prevails.

We respect your privacy and are committed to protecting personal information in a transparent, secure way. This policy explains what we collect, why, who we share it with, and your rights. Depending on where you live, you may have rights under the EU/UK GDPR, Israeli privacy law (including Amendment 13), and the California Consumer Privacy Act (CCPA/CPRA); we aim to honor those rights as described below.


1. Who is responsible for your data

2. Information we collect

a. Information you provide - Account & contact details: name, email, company name, and admin user details. - Communications you send us (e.g., support requests, the website contact form). - Customer Data you enter into the platform about your clients (e.g., names, contact details, preferences, notes, documents you upload).

b. Payment information - Payments are processed by our merchant of record, Paddle. Una does not store full card numbers; Paddle handles payment data under its own privacy terms.

c. Information collected automatically - Website analytics and usage statistics via Google Analytics. - Pseudonymized session analytics and interaction patterns (e.g., clicks, scrolling) via Hotjar, with form inputs and sensitive fields masked or excluded. - Standard technical data (IP address, device/browser, log data) and cookies.

3. Why we use information

Legal bases (GDPR): performance of a contract (providing the Service), your consent (e.g., marketing, non-essential cookies), legitimate interests (security, improvement), and legal obligations.

4. Who we share information with (sub-processors)

We share personal data only as needed to run the Service, with providers bound by appropriate data-protection obligations:

Provider Purpose
Amazon Web Services (AWS) Hosting, database, and AI processing (AWS Bedrock)
Cloudflare Content delivery (CDN), DNS, and security
Cloudinary Image and media storage and delivery
Paddle Checkout, billing, payment processing, tax
Google Analytics Website analytics
Hotjar Session/usage analytics

We do not sell your personal information. We disclose information to authorities only where required by law.

5. AI features

Una uses AWS Bedrock to power AI-assisted features. AI processing takes place within our cloud environment; your data and your Customer Data are not used to train third-party foundation models. Where AI processes Customer Data, we minimize direct identifiers (for example, contact details such as email, phone, and full address are withheld or tokenized before processing).

6. International transfers

We may store and process information on servers located outside your country (for example, in the United States or the EU/UK). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect transferred data.

7. Data retention

We keep personal information for as long as needed to provide the Service and for legitimate business and legal purposes (for example, records required to be kept under applicable law). When no longer needed, we delete it or store it in de-identified form under access controls.

8. Security & breach notification

We implement technical and organizational measures, including encryption in transit and at rest, access controls, and tenant isolation, to protect information from unauthorized access. No method of transmission or storage is 100% secure. In the event of a security breach, we will notify affected parties and authorities as required by law (within 72 hours where the GDPR/Israeli law applies).

9. Your rights

Depending on your location, you may have the right to: - access the personal data we hold about you; - correct inaccurate or incomplete data; - delete your data (“right to be forgotten”); - receive your data in a portable format; - restrict or object to processing; - withdraw consent (e.g., for marketing) at any time.

California residents: you also have the right to know, access, delete, and correct your personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as defined by the CCPA/CPRA, and we will not discriminate against you for exercising your rights.

To exercise any of these rights, contact info@getuna.ai. We will respond within the time required by applicable law (generally within 30 days) after verifying your identity. You may use an authorized agent where the law permits. If your request concerns Customer Data held on behalf of an account holder, we will refer you to, or assist, that account holder as the controller.

10. Cookies

We use essential cookies to run the Service (e.g., session and login). We also use non-essential analytics cookies (Google Analytics, Hotjar); where required (e.g., in the EU/UK), we set these only with your consent via our cookie banner, and you can change or withdraw your choice at any time. You can also manage cookies through your browser settings; some features may not work without essential cookies.

11. Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy from time to time. Changes will be posted here with an updated date and, where required by law, with advance notice. Continued use after changes take effect constitutes acceptance.

13. Contact

Una.AI Ltd. · Nahal Sela’it St. 10/14, Mitzpe Ramon, Israel Email: info@getuna.ai · Phone: +972 50-213-4955