Beta Privacy Policy

Uncloude is an operational-intelligence product for business and government contracting teams, operated by Locend Group LLC. It is intended for adults using it for business purposes. It is not intended for children, and it is not intended for personal health, financial, or consumer use.

When you create an account we store the email address associated with it and authentication records needed to sign you in. Sign-in is handled by our authentication provider (Supabase Auth, through Lovable Cloud). If you sign in with Google, Google confirms your identity to us and we receive your email address; we do not receive your Google password.

When you run an analysis, the document you upload is read in your browser and its text is extracted. For PDFs, the file itself may also be transmitted to the AI service so the model can read the page content. The extracted text, the document filename, and the report title are saved with your report.

We do not maintain a separate file store: we do not keep a copy of your original file as a file. What persists is the extracted text and the generated analysis, stored in the database row that belongs to your account.

Please submit only information you are authorized to share with an external AI service. Do not submit classified information, Controlled Unclassified Information (CUI), export-controlled information, passwords or credentials, sensitive personal information, or restricted customer or government information. Uncloude is not approved or authorized for classified, CUI, or restricted government data.

Analysis requests are made from our server to the Lovable AI gateway, which forwards them to the underlying model provider. Your document text and the derived process map are included in those requests. The key used for those requests stays on our server and is never exposed to your browser.

We do not use your documents or reports to train models ourselves. We have not independently verified the training and retention practices of every downstream provider in that chain, so we do not make a blanket "never used for training" or "zero retention" claim. If that distinction matters to your organization, contact us before submitting material.

Each generated analysis is stored in your account with its title, the original filename, the extracted source text, and the structured report. Access is restricted at the database level to the account that created it.

For each AI call we record an internal usage row: your account identifier, the type of generation, whether it succeeded, how long it took, rough token counts, an estimated cost, and — when a call fails — the technical error text. These records enforce the daily fair-use limit and help us diagnose failures. Error text is technical output; it is not intended to contain your document content, but we cannot guarantee a provider error message never quotes input, so we treat these records as confidential and restricted.

Our application and hosting providers keep operational logs (for example request and error logs) as part of running the service. We do not deliberately log document content. Provider log retention is governed by those providers.

If you use the feedback form, we store your written answers, the email address you optionally provide, the page you were on, a session identifier, your browser user-agent string, and your account identifier if you are signed in. Please do not paste confidential document content into feedback.

We use PostHog to understand how the product is used. Analytics is deliberately content-free: only a fixed list of event names and a fixed list of property keys can be transmitted, and property values are limited to fixed options, numbers, booleans, or opaque identifiers. Document text, filenames, process names, prompts, report content, and raw error messages are never sent. Session recording, heatmaps, autocapture, and automatic page-view capture are disabled, and URLs, paths, referrers, and page titles are stripped before transmission. Signed-in users are identified only by an opaque account identifier.

We rely on external providers to operate the service: Lovable (application hosting and the AI gateway), Supabase (database and authentication, provided through Lovable Cloud), the AI model provider behind the gateway, and PostHog (product analytics). These providers process information as necessary to operate Uncloude. Not all processing happens inside Uncloude.

Saved reports remain in your account until you delete them or ask us to delete your account. Deleting a report from your history removes that report row, including its stored source text, from the live application.

For account deletion and deletion of all associated data, email support@uncloude.ai from the address on the account. We will confirm ownership, delete your reports and account, and tell you what could not be deleted and why. During the beta we have not set a published response deadline; whether a specific statutory deadline applies to us is an open question under review. Removal from the live application does not immediately erase provider backups or provider-side logs, which expire on those providers' own schedules.

Traffic to the application is served over HTTPS, and our database provider encrypts data at rest. Report access is enforced at the database level so a report is readable only by the account that created it. Server credentials, including AI and database keys, are held server-side and are not exposed to the browser. We do not claim any certification, accreditation, or government authorization, and no product is completely secure.

You choose what you submit. You can delete any report at any time, decline to submit feedback, and request account and data deletion. If you want a copy of your data before deletion, export your reports to PDF first or ask us.

We will update the version and publication date at the top of this page when this policy changes, and we may ask you to review updated terms before running new analyses.

Privacy questions, deletion requests, and content complaints: support@uncloude.ai. Uncloude is a product of Locend Group LLC.