Last updated:
Information we process
Account information includes the identifier, email and profile details supplied during sign-in. We process messages, uploaded content, saved chats, memory entries, generated files, images and music that you submit or save. Technical data includes request times, IP addresses, browser information, errors, usage counters and API-key metadata. Support messages contain only what you choose to send; an email address is not required.
Why we process it
We use information to authenticate accounts, answer requests, synchronize saved content, provide optional memory, generate media, enforce limits, prevent abuse and respond to support requests. Where applicable, service delivery is based on performance of our agreement, security and support on legitimate interests, and optional processing on consent where consent is required. You can disable memory and manage saved conversations. Do not send passwords, payment details or unnecessary sensitive information.
Memory and past conversations
Saved memory, automatic saving and reference to past chats have separate controls in Settings. Reference to past chats is off until you enable it. When enabled, relevant excerpts from a bounded set of your saved conversations may be passed to the responding model, separately from saved facts. The overview is a short view of saved facts, not a complete list of accessible conversation context. Removing a memory entry or clearing memory also resets reference to earlier conversations, but does not delete those chats. Turning off reference to past chats resets earlier context; newly sent messages may be used after you turn it on again. Deleted chats are excluded from future retrieval. Model-based memory selection can make mistakes; review saved facts and do not share unnecessary sensitive information.
Providers and web search
Cloudflare hosts the service and its storage; Clerk handles account authentication. Cloud AI requests are sent to Anthropic (Claude) or through OpenRouter to the selected model provider. Locally routed requests are processed by infrastructure operated for UnioAI, which does not mean they run on your device. Image and music generation can use local infrastructure or external model providers. Web search sends relevant search queries and page URLs to Tavily; websites are not intentionally given your account memory or credentials. Relevant conversation context, files or images may be sent to the model needed to perform your request. These providers may process data in other countries under their own policies. Provider processing and logs are not covered by an unconditional zero-retention or no-training guarantee from UnioAI.
Storage, cookies and retention
Saved account content is retained until you remove it or delete your account. Temporary file records expire after their configured lifetime. Daily usage records generally expire after two days. Support conversations expire 90 days after the last message and are removed by scheduled cleanup. Essential sign-in cookies and browser storage support authentication, chat state, language and appearance settings; they are not a promise that every third-party provider uses identical cookies. To operate the service and investigate failures and abuse, authorized UnioAI administrators can see recent requests, answers and the model used for up to 24 hours; these records are then deleted automatically, and earlier when the account is deleted. For support, security and investigating abuse, authorized administrators can also open your saved chats, including earlier ones, for as long as they are stored; every opening is logged, and chats you have deleted are not available. Operational and security logs can include request information and search questions/queries; their retention depends on infrastructure settings and provider policies. We restrict access, but no online system can guarantee absolute security.
Your choices and rights
Depending on applicable law, you may request access, correction, erasure, a portable copy, restriction or objection to processing, withdraw consent where used, and complain to a competent data-protection authority. Use Contact for these requests; we may need proportionate verification before disclosing account data. Optional memory can be disabled in settings. Signing out does not delete saved data. Account deletion is available on the Delete account and data page.
Deletion and its limits
Account deletion blocks account access, revokes API access and removes saved conversations, memory, file records, image/music libraries and authentication account data. Failed cleanup is retried. Work already running may finish before subsequent cleanup. A minimal deletion identifier remains while cleanup is pending and for 30 days after cleanup, then is removed on the next scheduled run to protect against delayed writes. Clear site data on other devices to remove their browser copies. Support requests sent while signed in are linked to the account and deleted with it. Anonymous support receipts are not automatically linked to an account: include the receipt identifier in a separate deletion request. Deletion cannot recall content already downloaded or shared, immediately erase provider logs or infrastructure backups, or remove records that must lawfully be retained. Contact us about these cases; we do not promise instantaneous deletion from every external system.
Children and updates
Do not use the service if you are below the minimum age permitted by applicable law or cannot obtain required parental authorization. Contact us if information was submitted without required authorization. Material changes to this policy will be published here with an updated date; additional notice or consent will be sought where required.