# UCM Privacy Policy

**Last Updated: July 15, 2025**

## 1. INTRODUCTION

This Privacy Policy explains how Universal Context Manager ("UCM," "we," "us," or "our") collects, uses, and protects your information when you use our platform. UCM respects your privacy and is committed to protecting your personal information in accordance with Australian privacy laws.

## 2. INFORMATION WE COLLECT

### 2.1 Account Information
When you create an account, we collect:
- Username/display name
- Email address (if provided)
- Authentication credentials

### 2.2 Content Data
When you use our platform, we collect:
- Code artifacts and commands you publish
- Metadata associated with your content (descriptions, tags, version information)
- Usage analytics (which artifacts are accessed, download counts)

### 2.3 Technical Information
We automatically collect:
- IP addresses and location data
- Browser type and version
- Device information
- Platform usage patterns and API requests
- Error logs and diagnostic information

### 2.4 AI Integration Data
When using our MCP server, we may log:
- AI agent requests and responses
- Command execution patterns
- Performance metrics

## 3. HOW WE USE YOUR INFORMATION

We use your information to:
- Provide and maintain the UCM platform
- Enable discovery and sharing of code artifacts
- Improve platform performance and security
- Detect and prevent malicious content or abuse
- Communicate with you about service updates
- Comply with legal obligations

**We do not sell your personal information to third parties.**

## 4. CONTENT PRIVACY AND SHARING

### 4.1 Public vs Private Content
- **Published artifacts are public** by default and accessible to all users
- **Private content** remains private unless you explicitly make it public
- **We will not distribute your information to third parties** except when:
  - You make your content public
  - Required by law or legal process
  - Necessary to prevent security threats

### 4.2 User Responsibility for Content
- **You are responsible** for determining what content to make public
- **No guarantees** are provided regarding content privacy or security
- **Disclaimers apply** to all user-generated content
- **No guaranteed support** - we cannot recover or restore deleted private content

### 4.3 Public Information
The following information is publicly visible:
- Your published code artifacts and associated metadata
- Your username and public profile information
- Community reviews and ratings you provide

### 4.4 Service Providers
We may share information with trusted service providers who assist us in:
- Cloud hosting and infrastructure
- Security scanning and malware detection
- Analytics and performance monitoring
- Customer support services

### 4.5 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Enforce our Terms of Service

## 5. PLATFORM LIABILITY AND DISCLAIMERS

### 5.1 No Guarantees
UCM provides the platform "as-is" with:
- **No liability guarantees** for platform availability
- **No guarantees** regarding data preservation or backup
- **No warranties** on content accuracy or functionality
- **User responsibility** for content backup and preservation

### 5.2 Support Limitations
- **No guaranteed support** is provided
- No guaranteed response times for support requests
- Users are responsible for their own content management
- We cannot guarantee recovery of lost or deleted content

## 6. DATA STORAGE AND SECURITY

### 6.1 Data Location
Your information may be stored and processed in:
- Australia (primary)
- Other countries where our service providers operate

### 6.2 Security Measures
We may implement security measures at our discretion, which may include:
- **Content is encrypted at rest**
- Encryption of data in transit
- Access controls and authentication systems
- Regular security audits and monitoring
- Incident response procedures

**However, no system is completely secure, and we cannot guarantee absolute security.**

### 6.3 Data Breach Disclaimer
To the maximum extent permitted by law, UCM shall not be liable for any damages arising from data breaches, security incidents, or unauthorized access to your information, except as required by applicable statutory minimums. Users acknowledge that they use the platform at their own risk regarding data security.

## 7. DATA RETENTION

We retain your information for as long as:
- Your account remains active
- Necessary to provide our services
- Required by law or regulation
- Needed to resolve disputes or enforce agreements

Published code artifacts may remain available even after account deletion to maintain platform integrity and user dependencies.

## 8. YOUR RIGHTS

Under Australian privacy laws, you have the right to:
- **Access** your personal information we hold
- **Correct** inaccurate or incomplete information
- **Delete** your account and associated data (subject to retention requirements)
- **Restrict** processing of your information in certain circumstances
- **Data portability** - receive your data in a structured format
- **Object** to certain uses of your information

To exercise these rights, contact us via Utaba.ai.

## 9. COOKIES AND TRACKING

We may use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze platform usage
- Improve user experience

You can control cookie settings through your browser, but this may affect platform functionality.

## 10. THIRD-PARTY INTEGRATIONS

### 10.1 AI Agents and MCP
When AI agents access UCM through our MCP server:
- The AI agent operates on behalf of its user, not UCM
- We log basic usage metrics but not conversation content
- AI providers may have their own privacy policies
- **No third-party access** to your private content without explicit permission

### 10.2 External Links
Our platform may contain links to third-party websites. We are not responsible for their privacy practices.

## 11. CHILDREN'S PRIVACY

UCM is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.

## 12. INTERNATIONAL TRANSFERS

Your information may be transferred to countries outside Australia. When this occurs, we ensure adequate protection through:
- Adequacy decisions by relevant authorities
- Standard contractual clauses
- Other appropriate safeguards

## 13. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Material changes will be communicated through:
- Platform notifications
- Email notices (if we have your email)
- Prominent notices on our website

Continued use of the platform after changes constitutes acceptance of the updated policy.

## 14. COMPLAINTS AND DISPUTES

If you have privacy concerns:

1. **Contact us first** via Utaba.ai - we aim to resolve issues promptly
2. **Escalate to authorities** if unresolved - you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

## 15. CONTACT INFORMATION

For privacy-related questions or requests, visit the contact page at Utaba.ai.