Legal
Privacy Policy
Last revised November 9, 2026
This policy explains what personal data UAPP collects through uapp.group and its subdomains, why we collect it, who we share it with, and your rights.
Who is responsible
UAPP Corp, a Delaware corporation with its registered address at 251 Little Falls Dr, Wilmington, DE 19808, United States (“UAPP”, “we”), is the controller of the personal data described in this policy. For anything about your data, email office@uapp.group.
This policy covers uapp.group and its subdomains, including agents.uapp.group, and the emails you send us through them. It does not cover uapp.camp, which has its own operator and privacy policy, or personal data we process for clients, which our agreements with them govern.
Data we collect
- Contact and meeting requests
- Through the contact forms on uapp.group: your name, email address and message and, if you request a meeting, the date, time, duration and platform you choose.
- Requests about AI agents
- Through the form on agents.uapp.group: your name, work email, company and message.
- Job applications
- Your first and last name, email address, phone number if you give it, the role you apply for, and your CV with whatever it contains.
- Emails
- If you write to us directly, your email address and what you send.
- Technical data
- Your IP address, browser and device information and the pages you request, which reach our servers and our network provider with every request. We use the IP address to limit abuse of the forms.
- Anti-spam checks
- When you start filling in a form on uapp.group, Google reCAPTCHA loads and collects information about your device and how you use the page, to tell people from bots.
- Usage data, with your consent
- If you accept analytics or advertising cookies: pages visited, clicks, scrolling, referral source, device and browser type, approximate location, and the ad that brought you to the site. Microsoft Clarity also records session replays. See the Cookie Policy for details.
agents.uapp.group uses the same cookie banner and, with your consent, the same analytics and advertising tools.
How we use it and why
- To reply to enquiries, arrange meetings and prepare a possible engagement
- steps you ask us to take before a contract, or our legitimate interest in replying to people and businesses that contact us.
- To consider job applications
- steps you ask us to take before a contract with you.
- To protect the forms and the site from spam and abuse, including with reCAPTCHA
- our legitimate interest in keeping the site secure and available.
- To measure site usage and advertising, and to show our ads to past visitors
- your consent, given in the cookie banner.
- To keep records the law requires and to establish or defend legal claims
- our legal obligations and our legitimate interest.
The checkbox on our forms confirms that you have read this policy. The legal bases for processing are the ones listed above.
Providing personal data is voluntary, but without the details a form asks for, we can't respond to your enquiry or consider your application. We don't make decisions about you based solely on automated processing, including profiling.
Who receives it
- Our team and affiliated companies that work on UAPP projects, on a need-to-know basis and under confidentiality obligations.
- Service providers that process data for us under contract: Google (Google Workspace for email, and reCAPTCHA), Cloudflare (network delivery and security), Hetzner (hosting, with servers in the EU) and CookieYes (cookie preferences).
- With your consent, our analytics and advertising providers: Google (Google Ireland Limited, Google LLC), Microsoft (Microsoft Corporation) and Meta (Meta Platforms Ireland Limited). For advertising, they also use the data under their own privacy policies.
- Professional advisers, such as lawyers and accountants, who are bound by confidentiality.
- Authorities, where the law requires it, or where needed to establish or defend legal claims.
We don't sell personal data.
International transfers
UAPP is a US company, and our team, affiliated companies and providers may process data outside your country, including in countries without an EU adequacy decision. When data from the European Economic Area, the United Kingdom or Switzerland goes to such a country, we rely on the European Commission's Standard Contractual Clauses, with the UK addendum where it applies, or, for providers certified under it, the EU–U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of these safeguards.
How long we keep it
- Enquiries, meeting requests and job applications: 12 months after our last contact with you. If you become a client or join us, the records of that relationship follow their own retention rules.
- Google Analytics usage data: 14 months.
- Microsoft Clarity session recordings: 30 days.
- Server and security logs: only as long as needed to investigate abuse.
- Your cookie choice: 1 year, after which we ask again.
We keep data longer only where the law requires it or to establish or defend legal claims.
How we protect it
The site is served only over HTTPS, the forms are protected against spam and abuse, and access to enquiries and applications is limited to the people who need it. No system is completely secure. If you find a vulnerability, please report it under our Security Policy.
Marketing
We don't send newsletters or marketing email. If you accept advertising cookies, you may see our ads on Google and Meta after visiting the site. You can turn this off at any time in .
Your rights
Depending on where you live, data protection law may give you the right to:
- access the personal data we hold about you and get a copy of it;
- correct or delete it;
- restrict or object to its processing, including processing based on our legitimate interests;
- receive it in a portable format;
- withdraw consent at any time, for cookies in , without affecting earlier processing;
- complain to your local data protection authority.
To exercise these rights, email office@uapp.group. Requests are free, and we respond within one month. We may charge a reasonable fee or decline a request that is clearly unfounded, repetitive or excessive.
The site is not directed at children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy and will publish changes on this page with a new revision date. If a change affects how we use data you have already given us, we will tell you where we can.