Privacy Policy

Last updated August 15, 2026

Ube, Inc. ("Ube,""we," or "us") is the maker of the Ube software platform. This Privacy Policy explains how personal data and Meta Platform Data are collected, used, disclosed, and processed when you use our software, platform, APIs, documentation, and related tools, including the website ube.dev and related software for building, maintaining, distributing, marketing, analyzing, and monetizing software products (the "Service").

Where Ube acts as a data processor for a commercial customer, the applicable customer agreement also governs our processing. This policy's description of Meta Platform Data applies whenever a customer connects Meta to the Service.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. Capitalized terms not defined here have the meanings given in our Terms of Service.

1. Data We Collect

A. Personal Data You Provide Directly

Request Access and Waitlist Information. When you submit a request to access the Service through forms on ube.dev, we collect the information you provide, which may include your name, email address, project or app name, technology stack, team size, company or affiliation, role, and any growth-needs signals you choose to share (for example, whether you need attribution, creative sourcing, or experimentation help).

Account Information. If and when accounts become available, we will collect information you provide during sign-up and setup, including your name, email address, and any authentication identifiers (for example, identifiers provided by a third-party login provider you choose to use).

Payment Information. If you purchase a paid subscription, payment information will be collected and processed by our payment processors. We do not store complete payment-card numbers.

Customer and Connected-Service Data. When you use the Service, we may process content you submit and data you authorize us to collect from services you connect. This can include source code, product analytics, advertising and attribution data, app-store data, configuration data, feedback, and prompts ("Customer Data"), as well as reports, recommendations, campaign changes, proposed code, and other outputs ("Outputs"). If Customer Data includes personal data, we process it to provide the Service.

Meta Platform Data. "Meta Platform Data" means information we obtain from Meta through the integration and information derived from it. If you connect Meta, we receive the identifiers and connection credentials needed to access the business portfolio and ad accounts you select. We may also receive ad account details, permissions, campaigns, ad sets, ads, creative and audience settings, and performance data such as spend, delivery, impressions, clicks, conversions, and results. We retrieve this data through Meta's APIs, display and analyze it for you, prepare reports and recommendations, and create or update campaigns at your direction. We do not ask for or store your Facebook password.

Communications. When you communicate with us (for example, via email or a contact form), we collect your name, contact information, and the content of your messages.

Feedback. Ideas, suggestions for improvement, ratings, or bug reports you provide while using the Service may be stored.

B. Personal Data Collected Automatically

Device Information. Device type, browser, screen dimensions, operating system, language, time zone, and similar information automatically sent by your device when you interact with the Service.

Log Information. IP address, browser type and settings, referrer, error logs, and information about your interactions with the Service.

Usage Data. Dates and times of access, pages and features used, clicks, scroll depth, and similar information about how you interact with the Service.

Cookies and Similar Technologies. We and our service providers use cookies, pixels, scripts, local storage, and similar technologies to operate the Service, remember your preferences, measure engagement, analyze usage, and measure and deliver advertising. You can generally control cookies through your browser settings, although some features of the Service may not function properly without them.

Advertising and Attribution Identifiers. When you arrive from an online advertisement, we capture and store advertising click identifiers from the link (for example, Google "gclid," Meta "fbclid," or Reddit "rdt_cid") and campaign parameters (UTM tags), and we set first-party advertising cookies, including identifiers associated with the Meta advertising platform (the "_fbp" and "_fbc" cookies). We use these — together with a hashed version of your email address when you submit a form — to attribute sign-ups to the ads that drove them and to measure and deliver advertising. See "How We Share Personal Data" and "Your Rights and Choices" below.

Visitor Identification. When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting rb2b.com/rb2b-gdpr-opt-out.

Session Replay. We may record anonymized sessions of how visitors interact with ube.dev — including mouse movements, clicks, and pages viewed — to understand which parts of the site are useful and where visitors get stuck. We do not record keystrokes inside form fields, and we mask personal data that would otherwise appear on screen.

Approximate Location. We may derive approximate geographic location (such as country or region) from your IP address for security, fraud prevention, and analytics purposes.

C. Information We Do Not Knowingly Collect

We do not knowingly collect sensitive or special-category personal information, such as genetic data, biometric data used to uniquely identify a natural person, health information, precise geolocation, or information about a person's racial/ethnic origin, religious beliefs, political opinions, or sexual orientation. We do not knowingly collect information from or direct any of our Service to children under the age of 18.

2. How We Use Data

We use personal data to:

Provide the Service: operate, maintain, and improve the Service and its features.
Measure demand: understand interest in Ube and which growth needs matter most to you, and decide what to build next.
Advertise and measure: measure the performance of our advertising, attribute sign-ups to the ads that drove them, and show you relevant ads on other platforms through our advertising partners.
Manage accounts and access: create and administer accounts and access to Beta or production offerings, facilitate payments, and respond to inquiries.
Improve and develop: debug, identify and repair issues, conduct internal research, and develop new features.
Communicate: send transactional messages, respond to questions, and (with your consent where required) send updates, announcements, and other marketing communications.
Secure the Service: prevent, detect, and investigate fraud, abuse, security incidents, and violations of our Terms of Service.
Comply with law: meet legal, regulatory, and contractual obligations, and exercise or defend legal claims.

Model Training Limitations. We never use Meta Platform Data to train machine-learning models. We do not use other Customer Data or Outputs to train our or any third party's models unless you explicitly agree. We may review content you report or that is flagged for security or abuse.

De-identification. We may aggregate or de-identify personal data other than Meta Platform Data for analytics, research, and improvement of the Service. Aggregated or de-identified data is not treated as personal data under this Privacy Policy.

Limits on Meta Platform Data. We process Meta Platform Data only on behalf of and at the direction of the customer whose account supplied it. We keep each customer's data separate and do not use it for Ube's own advertising, for another customer, or to train machine-learning models.

Service Providers. We share personal data with third-party vendors and processors that support our business operations, including hosting and cloud infrastructure, analytics, session replay, email delivery, customer support, spam protection, payment processing, and security monitoring. These providers process personal data only as necessary to perform services on our behalf and under appropriate contractual protections.

Specific Third-Party Services. The Service uses, among others:

Amplitude (product analytics and session replay) — to measure usage of ube.dev and understand how visitors interact with the site. See Amplitude's privacy disclosures at amplitude.com/privacy.
RB2B (website-visitor identification) — to identify business visitors to ube.dev and associate site activity with professional contact information, including by association with your email. See RB2B's privacy disclosures at rb2b.com/privacy-policy.
Basin (form submissions) — to receive and store the contents of the request-access form. See Basin's privacy disclosures at usebasin.com/privacy.
Google reCAPTCHA (spam protection) — to help distinguish humans from automated submissions when you submit forms. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
Cloudflare Zaraz (tag management) — to load and manage our analytics and advertising tags from Cloudflare's edge network. See Cloudflare's privacy disclosures at cloudflare.com/privacypolicy.
Advertising platforms — to measure advertising performance and deliver relevant ads. These currently include or are expected to include Reddit (see reddit.com/policies/privacy-policy) and Meta (see facebook.com/privacy/policy), and we may add others such as Google or LinkedIn.

Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal data may be transferred to the counterparty or its advisers as part of due diligence or as an asset of the transaction.

Legal and Safety. We may disclose personal data to government authorities or other third parties when we believe in good faith that disclosure is necessary to (a) comply with applicable law, legal process, or government requests; (b) protect the rights, property, or safety of Ube, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our agreements.

Affiliates. We may share personal data with entities that control, are controlled by, or are under common control with us, for purposes consistent with this Privacy Policy.

With Your Consent. We may share personal data with other third parties when you direct us to do so.

Meta Platform Data. Notwithstanding the other disclosures in this section, we share Meta Platform Data only with the customer it belongs to, contracted service providers that need it to provide the Service for that customer, a customer's service provider at the customer's express direction, or when required by law. We do not sell Meta Platform Data.

Advertising Partners. We share certain online identifiers and activity — including cookies and similar identifiers (such as the Meta "_fbp" and "_fbc" identifiers), advertising click identifiers, and a hashed version of your email address — with advertising platforms and the tools that manage our advertising tags, so that we can measure the performance of our advertising, attribute sign-ups to the ads that drove them, and show you relevant ads on other services. We do not share Customer Data, Outputs, or Meta Platform Data for advertising. Depending on your jurisdiction, this activity may be considered "targeted advertising," "cross-context behavioral advertising," or a "sale" or "sharing" of personal data under applicable law. See Your Rights and Choices for how to opt out.

4. Retention

We retain personal data only for as long as necessary to operate the Service and to support legitimate business needs such as legal compliance, security, dispute resolution, and enforcement of our agreements. Retention periods vary based on the purpose of collection, the sensitivity of the data, associated risks, and applicable legal requirements. When personal data is no longer needed, we will delete, erase, de-identify, or anonymize it in accordance with applicable law.

We delete Meta Platform Data when the customer disconnects Meta, closes its Ube account, asks us to delete it, when Meta asks us to delete it, or when it is no longer needed to provide the Service, unless the law requires us to retain it. Data in backups is deleted as those backups expire under our retention schedule.

5. Security

We maintain administrative, technical, and organizational safeguards appropriate to the sensitivity of the data and designed to protect it from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Report suspected security vulnerabilities to hello@ube.dev. However, no method of transmission over the internet or storage is completely secure. You are responsible for protecting your credentials and using the Service in a secure environment. We are not responsible for any circumvention of privacy settings or security features on the Service or on third-party services linked through the Service.

6. Your Rights and Choices

Depending on your jurisdiction and applicable law, you may have the right to:

Access the personal data we hold about you and receive a copy in a portable format where applicable.
Correct personal data that is inaccurate or incomplete.
Delete personal data we hold about you, subject to exceptions provided by law.
Object to or restrict certain processing of your personal data, including processing based on legitimate interests.
Withdraw consent where processing is based on consent (withdrawal does not affect prior processing).
Opt out of targeted advertising and of the "sale" or "sharing" of personal data.
Lodge a complaint with a data protection authority in your jurisdiction.
Not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you. We do not make such decisions in connection with the Service.

To exercise these rights, contact us at hello@ube.dev. We may ask you to verify your identity before responding. We will not discriminate against you for exercising any privacy right available to you under applicable law.

To delete Meta Platform Data, disconnect Meta in Ube or email hello@ube.dev. Disconnecting removes the Meta business integration and its associated ad account connections. We also process valid deletion requests sent to us by Meta.

Marketing Choices. You can opt out of marketing communications by following the unsubscribe instructions in those messages. Opting out does not affect transactional messages.

Cookies. Most browsers let you refuse or delete cookies. Some parts of the Service may not function properly if you disable cookies.

Targeted Advertising and "Do Not Sell or Share." You can opt out of our use of advertising and attribution identifiers by refusing or deleting non-essential cookies in your browser, by limiting ad personalization directly with the advertising platforms (for example, through Meta's and Reddit's ad-preference settings), or by contacting us at hello@ube.dev. Opting out does not stop you from seeing ads, but the ads you see will be less tailored to you.

Visitor Identification. To opt out of website-visitor identification and any associated marketing emails, visit app.retention.com/optout. To opt out of the collection of your personal data in compliance with GDPR, visit rb2b.com/rb2b-gdpr-opt-out.

7. Children

The Service is not directed to children under 18, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at hello@ube.dev and we will take appropriate steps to delete it.

8. International Data Transfers

We are based in the United States, and personal data we collect may be processed in the United States or in other countries where we or our service providers operate. These countries may have different data-protection laws than your country of residence. Where required by applicable law, we will implement appropriate safeguards (such as standard contractual clauses) to protect personal data transferred internationally.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will publish the updated Privacy Policy on the Service and update the "Last updated" date at the top of this page. Your continued use of the Service after a change becomes effective constitutes acceptance of the updated Privacy Policy.

10. Contacting Us

If you have questions about this Privacy Policy or our privacy practices, contact us at hello@ube.dev. You can also reach us by mail at:

Ube, Inc.
Attn: Privacy
c/o Corporation Service Company
251 Little Falls Drive
Wilmington, DE 19808