Privacy Policy

1. Overview

UNITONE builds enterprise security and IT management tools. Many of our products deploy into your own cloud environment, meaning your organizational data stays under your control. This policy covers the limited data we do collect.

2. What We Collect

Website & Marketing: We use cookies and similar technologies for website analytics (pages visited, browser type, device info, referral source). You can manage cookie preferences through your browser settings. We also collect contact information you provide (name, email, company) via forms or demo requests.

Account & Billing: Business contact details, support communications, and billing information processed through third-party payment processors. Payment card information is handled by our payment processors — we do not store full payment card numbers.

Product Telemetry: Our products may send limited operational telemetry to UNITONE for license management and update delivery. This telemetry does not include your organizational content, user credentials, or end-user personal information. It may include identifiers such as tenant IDs that relate to your organization. Product-specific details are in the appendices below.

3. How We Use Your Data

We use data to deliver and improve our Services, manage licenses, process billing, provide support, and send product updates. With your consent, we may send marketing communications.

We do not sell, rent, or share your personal data with third parties for advertising or cross-context behavioral targeting.

4. Who We Share Data With

We may share data with the following categories of recipients, only as needed to operate our Services:

• Cloud and hosting providers — infrastructure for our websites and vendor-side services
• Payment processors — billing and subscription management
• Analytics providers — website usage analytics
• Support and CRM tools — managing customer communications
• Professional advisors — legal, accounting, or audit services as needed
• Authorities — where required by law, regulation, or valid legal process
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, your data may be transferred to the successor entity

We require all third-party recipients to protect data in accordance with applicable law.

5. Security & Storage

Our infrastructure uses encryption at rest and in transit (TLS 1.2+), with access restricted to authorized personnel. Where our products deploy into your cloud environment, your data remains in the region you selected.

6. Data Retention

• Product telemetry: Duration of active subscription plus 90 days
• Billing records: 12 months
• Support communications: 24 months
• Website analytics: 12 months

Upon request, we will delete your data within 30 days, subject to legal or billing obligations.

7. International Transfers

Our infrastructure is primarily hosted in the United States. If you are located outside the United States, data we collect may be transferred to and processed in the United States. Where our products deploy into your cloud environment, your organizational data remains in the region you selected. For questions about international transfers, contact us at privacy@unitone.ai.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data and obtain a copy
• Correct inaccurate or incomplete data
• Delete your personal data
• Port your data in a machine-readable format
• Object to or restrict certain processing
• Opt out of sale or sharing of personal data (we do not sell or share personal data, but you may still make this request)
• Withdraw consent for marketing or other consent-based processing
• Lodge a complaint with your local data protection authority

How to exercise your rights: Send a request to privacy@unitone.ai. We will verify your identity and respond within 30 days (or sooner where required by law). If we deny a request, we will explain the reason and any appeal process available to you.

9. Children

Our products are enterprise tools not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where required by local law).

10. Changes to This Policy

We may update this policy from time to time. We will post material changes at unitone.ai/privacy and update the "Last Updated" date.

11. Contact

Appendix A: IQStudio

Agent lifecycle management for Microsoft 365 and Azure.

Deployment Model

IQStudio deploys entirely within your Microsoft Azure subscription. UNITONE does not host, access, or store your organizational data. All processing occurs within your own tenant.

Your Data Stays With You

All data — agents, policies, audit logs, analytics — is stored in your Azure subscription in the region you chose during deployment. You retain full control, including the ability to revoke access at any time by removing the IQStudio app registration from Microsoft Entra ID.

License Heartbeat

IQStudio sends a periodic heartbeat to UNITONE containing only: tenant ID, application version, aggregate agent count (a single number), and timestamp. This is limited operational telemetry used solely for license management and update notifications. It does not include agent names, user identities, or organizational content.

Azure Marketplace

If deployed via Azure Marketplace, Microsoft sends standard lifecycle notifications to UNITONE (provisioning state, plan info, billing IDs). These do not contain your organizational data.

Third-Party Services

IQStudio integrates with Microsoft Azure, Entra ID, Graph API, and Azure Marketplace — all within your environment and governed by the Microsoft Privacy Statement.