Privacy Policy

UniGen ("UniGen", "we", "us") is a cloud platform operated by Echonic Technologies, Jakarta, Indonesia. This policy explains what personal data we collect when you use unigen.tech, the UniGen app and the UniGen API, why we collect it, and the choices you have. We process personal data in line with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022) and, where it applies to you, the EU/UK GDPR.

1. Data we collect

• Account data: name, e-mail address, country, language and theme preferences, and the sign-in method you use (e-mail, Google, GitHub or Apple).
• Billing data: the plans, credit packs, add-ons and domains you buy, amounts, dates and payment status. Card and bank details are entered directly with our payment providers (PayPal, Xendit); we never see or store them.
• Domain owner data: when you register a domain, the owner contact details you enter (name, address, phone, e-mail), which domain registries require.
• Content you create: projects, files, prompts and AI responses, databases, backends, websites, environment variables and connected repositories.
• Usage data: requests, AI tokens and credits used, models chosen, resources running, error logs, IP address, device and browser type, and timestamps.

2. How we use your data

• To provide the service: run your projects, AI requests, databases, backends and websites, and register your domains.
• To bill you, send receipts and keep accounting records required by Indonesian tax law.
• To keep UniGen secure: prevent fraud and abuse (including repeated free trials), and enforce our Terms of Service.
• To send service e-mails (verification, password reset, receipts, domain renewals, important changes). We send marketing e-mails only if you agree, and you can unsubscribe at any time.
• To improve UniGen using aggregated, de-identified statistics.

We do not sell your personal data, and we do not use your prompts, files or project content to train AI models.

3. Service providers we share data with

UniGen runs on trusted providers who process data only on our instructions and only as needed to deliver the service:

• Supabase (accounts, database, customer databases), Railway (API and customer backends), Vercel (website hosting and domain registration), Cloudflare (DNS and e-mail routing)
• OpenRouter and the AI model providers it routes to (for example OpenAI, Anthropic, Google, Meta, DeepSeek, Mistral), which receive the prompts you send to the model you choose
• PayPal and Xendit (payments), Resend (transactional e-mail), GitHub (if you connect a repository)
• Domain registries and registrars, which publish or store domain owner data as their rules require

We may also disclose data when Indonesian law or a valid legal order requires it.

4. International transfers

Our main servers are in Singapore. Some providers process data in other countries, including the United States. We use providers that offer appropriate safeguards (such as standard contractual clauses) for these transfers.

5. How long we keep data

• Account and project data: while your account is open. When you delete your account, we delete it within 30 days, except where the law requires us to keep it.
• Payment and invoice records: 10 years, as required by Indonesian tax and company law.
• Usage and security logs: up to 12 months.

6. Security

Data is encrypted in transit (HTTPS) and at rest. Secrets such as database passwords and API keys are stored encrypted; API keys are stored as one-way hashes. Access to production systems is limited to authorised staff. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

7. Your rights

You can access, correct, download or delete your personal data, withdraw consent, and object to or restrict certain processing. You can update your name, country and language in Settings. For anything else, including a copy of your data or deleting your account, e-mail support@unigen.tech; we reply within 14 days. You may also complain to the data protection authority in your country.

8. Cookies

We use essential cookies to keep you signed in and remember your language and theme. If we add analytics or advertising tags (for example Google or Meta), we will ask for your consent where the law requires it.

9. Children

UniGen is not intended for children under 18. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

10. Changes

We will post any changes on this page and update the date above. If a change is significant, we will tell you by e-mail or in the app before it takes effect.

11. Contact

Echonic Technologies (UniGen) · Jakarta, Indonesia · support@unigen.tech