Privacy Policy

Last updated: May 2026

Unicity Labs OÜ — Narva mnt 13, 10151 Kesklinna linnaosa, Tallinn, Harju maakond, Estonia

1. Who We Are

This Privacy Policy applies to Unicity Labs OÜ ("Unicity Labs", "we", "us", or "our"), a company incorporated in Estonia under registration number 17237462.

We operate the website at unicity.ai ("the website"). This policy covers data collected through unicity.ai only.

Questions about this policy or our data practices can be directed to: privacy@unicity.ai

2. What Data We Collect

2.1 Data you provide directly

  • Name and email address — when you sign up for a waitlist, submit a contact form, or apply for the Design Partner programme
  • Professional information — when you submit an enterprise or developer enquiry (company name, role, use case description)
  • Communications — any messages you send us via forms on the website

2.2 Data collected automatically

  • Usage data — pages visited, time on page, clicks, referral source, browser type, operating system, and IP address
  • Analytics data — collected via Google Analytics 4 (see section 5)
  • Cookie data — see section 6

3. Why We Collect It and Our Legal Basis

We process personal data only where we have a lawful basis to do so under the EU General Data Protection Regulation (GDPR).

PurposeData usedLegal basis
Responding to enquiries submitted via contact or application formsName, email, professional informationLegitimate interest
Sending waitlist and update emailsEmail addressConsent
Website analytics and performance improvementUsage data, anonymised IPLegitimate interest
Legal complianceAs requiredLegal obligation

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. How Long We Keep Your Data

Data typeRetention period
Email and contact records (HubSpot)Until you unsubscribe or request deletion, or 3 years from last interaction, whichever is sooner
Analytics data (Google Analytics 4)14 months (GA4 default)
Enterprise and developer enquiry records3 years from date of submission

5. Third-Party Services

We use the following third-party services that may process personal data on our behalf. Each is subject to a data processing agreement with Unicity Labs OÜ.

ServicePurposeData processedPrivacy policy
Google Analytics 4Website analyticsAnonymised usage data, device datapolicies.google.com/privacy
Google Search ConsoleSearch performance monitoringAggregated search query datapolicies.google.com/privacy
HubSpotCRM, email marketing, form submissionsName, email, segment tag, form responseslegal.hubspot.com/privacy-policy
Hosting providerWebsite hostingServer logs, IP addressesto be added

6. Cookies

We use cookies and similar tracking technologies on this website. You can manage your preferences via the cookie consent banner displayed on your first visit.

Cookie typePurposeExamples
Strictly necessarySite functionality, session managementSession ID, CSRF token
AnalyticsMeasuring usage and improving performanceGoogle Analytics (_ga, _gid)
MarketingTracking campaign effectivenessUTM parameter storage, HubSpot tracking

You can withdraw consent for non-essential cookies at any time via the cookie settings link in the footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

7. Your Rights

As a data subject under GDPR, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — ask us to correct inaccurate data
  • Right to erasure — ask us to delete your personal data, subject to legal retention obligations
  • Right to restriction — ask us to restrict processing of your data in certain circumstances
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interest, including for direct marketing
  • Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at: privacy@unicity.ai

We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with a supervisory authority. In Estonia, the competent authority is:

Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate) — Tatari 39, 10134 Tallinn, Estonia · www.aki.ee

8. International Data Transfers

Unicity Labs OÜ is based in Estonia, within the European Economic Area (EEA). Some of our third-party service providers are based outside the EEA, including in the United States. Where we transfer personal data outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or an adequacy decision where applicable.

Details of the transfer safeguards used by each provider are available in their respective privacy policies (see section 5).

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include encryption of data in transit (TLS), access controls and role-based permissions for internal systems, and regular review of third-party data processor agreements.

No method of transmission over the internet is completely secure. If you believe your personal data has been compromised, contact us immediately at privacy@unicity.ai.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify users by email where we hold an email address, or by a notice on the website.

Continued use of the website after changes are published constitutes acceptance of the updated policy.

11. Contact

Unicity Labs OÜ — Narva mnt 13, 10151 Kesklinna linnaosa, Tallinn, Harju maakond, Estonia

Email: privacy@unicity.ai · Registration number: 17237462