Privacy
Policy.
At ULIX AI INC. ("ULIX", "we", "us", or "our"), privacy is a foundational design principle rather than a compliance afterthought.
We build a broad spectrum of products, from cloud-hosted virtual file systems to offline, air-gapped hardware drives. This Privacy Policy explains how we collect, use, disclose, and secure your personal information across our website (www.ulix.ai) and our entire portfolio of products, services, hardware, and protocols.
Local-First By Design
ULIX products use different privacy models depending on whether a feature operates locally, communicates with a third-party provider, or stores information in a hosted ULIX service.
1.1 Local and Air-Gapped Systems
- Ulysses: Ulysses is designed to run neural models locally without sending prompts, inputs, model outputs, or session histories to ULIX servers. ULIX has no access to locally stored Ulysses sessions unless you deliberately provide that information to us, such as through a support request.
- Vertebra: Repository indexes, workspace mappings, histories, context modules, and telemetry are designed to remain on your device. If you instruct Vertebra to communicate with an external AI provider, the context and instructions selected for that request are transmitted to that provider under your configured credentials.
- Lanyard: Vault contents, API keys, PIN-protected credentials, and environment configurations are stored locally through operating-system credential facilities. Lanyard does not transmit vault contents to ULIX servers.
- Transfr: Transfr moves files directly between devices on your local network. Files transferred through Transfr are not routed through ULIX servers.
1.2 Local-First Products with Connected Features
Skudio and Skudio GO are designed to keep product projects, capture sessions, and working files on devices under your control. Features that generate text or images may transmit the product information, prompts, reference images, and instructions you select to the AI provider configured for that feature. Files are uploaded to ULIX Cloud only when you choose a hosted storage or sharing feature.
1.3 Hosted Services
ULIX accounts, ULIX Cloud, website forms, email communications, billing systems, and other hosted features require us and our service providers to process account, network, content, and operational information. The remaining sections of this Policy describe that processing.
Information We Collect
2.1 Information You Provide to Us
- Account & Identity Data: When you sign up for our cloud services, register for product waitlists, apply for early access, or purchase a product without signing up for an account, we collect your name, email address, and account preferences, or collect your email address and create an account for you in order to assign license keys.
- Communications: When you contact us, request support, join a waitlist, subscribe to updates, or reply to an email, we process your email address, message content, subject, attachments, and related correspondence.
- Product and Support Information: We process information you voluntarily provide when requesting technical support, including diagnostic details, product versions, screenshots, files, logs, or descriptions of a problem.
- AI Feature Inputs: When you invoke a connected AI feature, the information you select—such as prompts, product data, source context, reference images, and generation instructions—may be sent to the AI provider configured for that request.
- Transaction & Billing Data: To process hardware purchases or premium SaaS subscriptions, payment details are collected and handled securely by our third-party payment processors (e.g., Stripe). We do not store raw credit card numbers on our servers.
- Shipping Information: For physical Hardware orders (such as Ulysses), we collect your shipping address, phone number, and delivery preferences.
2.2 Information Collected Automatically
- Cloud Hosted Assets: If you use ULIX Cloud, we securely store and index the files, images, videos, and directories you upload to your private virtual file system.
- Integration Metadata: If you explicitly connect a supported third-party service, we process the authorization tokens, identifiers, and metadata required to provide that connection. Exporting a local CSV file from Skudio does not by itself give ULIX access to your Shopify account.
- Log Data and Diagnostics: When using our online websites or cloud platforms, we automatically log basic technical information (IP addresses, browser configurations, access times, edge node routing times, and platform interactions) to manage system health and prevent service abuse.
- Website Hosting and Analytics Data: Our hosting infrastructure may process IP addresses, approximate location derived from IP address, browser and device information, requested URLs, timestamps, referrers, response times, and diagnostic information. We also use cookie-free Vercel Web Analytics to understand aggregate traffic and page performance.
How We Use Your Information
We process your data strictly for the following purposes:
- Providing the Services: To manage your account, host your files in ULIX Cloud, and coordinate API transfers to third-party integrations (such as Shopify).
- Order Fulfillment: To ship physical Hardware drives, manage pre-orders, and provide customer support.
- Security and Abuse Prevention: To secure our networks, authenticate users, enforce our Terms of Service, and monitor for malicious uploads or system threats.
- Product Updates: To send you essential system emails, transaction receipts, and optional announcements regarding new tools in the ULIX ecosystem. You can opt out of marketing communications at any time.
Sharing & Disclosure of Data
We do not sell, rent, or trade your personal information. We only share your data with trusted partners in the following limited scenarios:
- Hosting and Delivery: Vercel provides website hosting, request processing, deployment infrastructure, and cookie-free web analytics.
- Database Infrastructure: Neon provides hosted PostgreSQL infrastructure used for account records, publication content, communication records, and other hosted application data.
- Email Delivery: Resend processes recipient addresses, sender information, message content, and delivery metadata when we send transactional emails, account messages, replies, or subscribed communications.
- Payments: Stripe processes payment, billing, transaction, fraud prevention, and checkout information. ULIX does not store complete payment-card numbers.
- Storage and Infrastructure: Hosted storage and delivery providers process files and associated metadata when you use ULIX Cloud or another feature that explicitly uploads content.
- AI Providers: When you invoke a connected AI feature, the provider chosen or configured for that feature processes the prompts, files, images, product data, source context, and instructions necessary to generate the requested result. That provider's terms and privacy policy also apply to its processing.
- Legal Compliance: We may disclose your data if required to do so by law, or in the good faith belief that such action is necessary to comply with a valid legal obligation (e.g., a court order or subpoena).
- Business Transfers: In the event of a merger, acquisition, restructuring, or asset sale, your account data may be transferred as part of the business assets, subject to the privacy commitments in this Policy.
Data Security and Retention
5.1 Security Measures
We use administrative, technical, and organizational safeguards designed to protect hosted information. These include encrypted network transport, access controls, authentication protections, and encryption at rest where supported by the applicable storage service. Shared links may function as bearer credentials, meaning anyone who possesses a valid link may be able to access its contents until the link expires or is revoked. No storage or transmission system can be guaranteed to be completely secure.
5.2 Retention Policy
We retain personal information for as long as reasonably necessary to provide the requested service, maintain security, resolve disputes, enforce agreements, and satisfy legal, accounting, tax, and regulatory obligations. When you delete an account or hosted file, we remove it from active systems within a reasonable operational period. Residual copies may remain temporarily in backups, security records, delivery logs, or provider systems until their routine deletion cycles complete. Some transaction and legal records may be retained when required by law.
Regulatory Compliance & Your Rights
Depending on where you live and whether the applicable law covers our processing, you may have rights concerning your personal information. These rights may be subject to identity verification, legal exceptions, and limitations.
- Access: Request a copy of the personal data we store about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request the complete erasure of your account and personal data from our cloud servers.
- Portability: Export your hosted files and account profile in a machine-readable format.
- Objection or Restriction: Object to or request restriction of certain processing where applicable.
- Marketing Choice: Unsubscribe from optional marketing communications at any time without affecting essential account or transaction messages.
- Consent: Withdraw consent for processing based on consent, without affecting processing that occurred before withdrawal.
- Non-Discrimination: Exercise applicable privacy rights without unlawful discriminatory treatment.
6.1 Legal Bases
Where European data-protection law applies, we process personal information as necessary to perform a contract, comply with legal obligations, pursue legitimate interests such as service security and improvement, or act with your consent.
6.2 International Processing
ULIX and its service providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we rely on contractual or other legally recognized safeguards for international transfers.
6.3 California Disclosures
ULIX does not sell personal information or share personal information for cross-context behavioral advertising. If these practices change, we will update this Policy and provide any legally required opt-out mechanism.
To exercise any of these rights, please contact us at[email protected].
Children's Privacy
Our products, services, software, and hardware are designed exclusively for professionals, developers, and businesses. We do not knowingly collect personal information from individuals under the age of 16. If we learn we have collected such data, we will take immediate steps to delete it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our technology or legal requirements. When updates are published, we will modify the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Contact Information
If you have any questions or concerns regarding our privacy practices, please contact our privacy compliance team at:
ULIX AI INC.
Privacy inquiries: [email protected]
Contact form: ulix.ai/contact