Uncloak Pte. Ltd. ("Uncloak", "we") explains here how we handle personal data when you visit uncloak.co, book a demo, or use the Uncloak platform. We follow the Singapore Personal Data Protection Act (PDPA), the EU and UK GDPR, and other laws that apply.
1. Who we are
- Legal name: Uncloak Pte. Ltd.
- Registration number (UEN): 202025126M
- Address: 160 Robinson Road #14‑04, Singapore 068914
- Privacy: privacy@uncloak.co. Data Protection Officer: dpo@uncloak.co
For personal data inside a customer's workspace, the customer is the controller and we act as its processor under our DPA. For everything else in this policy, we are the controller.
2. What we collect
| Data | Examples | Source |
|---|---|---|
| Contact and demo data | Name, work email, company, role, message | You, through our forms or email |
| Account data | Name, work email, company, job title, login data | You or your employer |
| Billing data | Billing contact, company address, tax ID, invoices, payment status | You. Card details go directly to Stripe. We never see or store full card numbers. |
| Query data | Questions you ask Uncloak AI or send through MCP, and the answers | You, when you use the platform |
| Usage data | Pages viewed, features used, credits used, device and browser, IP address | Collected automatically |
| Support data | Messages and chats with our team | You |
| Twitch Data | Public chat messages, channel, stream and game data | The public Twitch API |
3. Twitch Data
We collect Twitch Data only through the public Twitch API and follow Twitch's developer terms. We use it to produce aggregated insights about brands, games and audiences. Our platform shows chat messages without usernames, as excerpts for context, and never shows who wrote a message. Usernames are not shared with customers. We do not build profiles of Twitch users or market to them. We delete Twitch Data when Twitch requires it or when a person asks under applicable law.
Twitch allows users from age 13, so Twitch Data may include messages from younger users. Chat may also mention health, politics or other sensitive topics. We analyze what is said about brands, games and topics. We do not try to work out the age, identity or sensitive traits of any individual.
4. How we use personal data
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the platform, accounts and support | Performance of a contract |
| Generating AI answers to your questions | Performance of a contract |
| Billing, accounting and tax | Legal obligation, contract |
| Securing and improving the platform | Legitimate interests |
| Replying to demo requests and sending product updates to business contacts | Legitimate interests. You can opt out at any time. |
| Producing aggregated Twitch insights | Legitimate interests |
| Meeting legal duties | Legal obligation |
5. AI features
5.1 When you use Uncloak AI or MCP Access, your question is sent to an AI model provider to generate the answer. We use several AI model providers and may switch between them. We can tell you which ones on request.
5.2 We do not use your questions or answers to train AI models. Our contracts require our AI model providers not to train on them either.
5.3 Please do not include sensitive personal data, or personal data about other people, in your questions.
5.4 If you connect Uncloak to a third party AI tool through MCP, that tool's provider handles your data under its own privacy policy.
5.5 We do not make decisions about you with legal or similarly significant effects using automated processing. AI answers in the platform are research insights reviewed by our customers.
6. Who we share data with
We share personal data only with: (a) our service providers, who act on our instructions: Microsoft Azure and Amazon Web Services (hosting), AI model providers (AI answers), Better Auth (authentication), PostHog (analytics) and Stripe (payments); (b) your employer, if it is the customer that gave you access; (c) professional advisers and authorities when the law requires; (d) a buyer or successor in a merger or sale of our business. We do not sell personal data.
7. International transfers
Our providers mainly process data in the United States. We protect transfers out of Singapore, the UK and the EEA with the EU Standard Contractual Clauses, the UK Addendum, or another valid safeguard.
8. How long we keep data
- Account and query data: for the customer's subscription, then deleted within 30 days.
- Billing records: as long as tax and accounting law requires.
- Demo and contact data: up to 2 years after our last contact, unless you become a customer.
- Usage data: kept in aggregated, anonymized form.
9. Security
We encrypt data in transit and at rest, host on Microsoft Azure and Amazon Web Services, limit access to authorized staff, and use multi factor authentication for administrative access.
10. Your rights
You can ask to access, correct or delete your personal data, to restrict or object to processing, to receive a copy of your data, and to withdraw consent. Email privacy@uncloak.co. If your employer is our customer, we may pass your request to them. You can also complain to your data protection authority, such as the PDPC in Singapore.
11. Data breaches
If a breach affects your personal data, we will notify you, our customers and the authorities as the law requires.
12. Cookies
We use essential cookies to run the site and platform, analytics cookies (PostHog) to understand usage, and Stripe cookies for payments. Where the law requires consent, we ask before setting non essential cookies.
13. Children
Our services are for businesses. They are not meant for anyone under 18.
14. Changes
We will post updates here and change the date above. We will email customers about material changes.
15. Contact
privacy@uncloak.co or dpo@uncloak.co. Uncloak Pte. Ltd., 160 Robinson Road #14‑04, Singapore 068914.