In short. We collect only what we need to answer you, work with you and bill you. Card payments are handled by Stripe; we never see your card number. The data inside our end-to-end encrypted products is encrypted on your own devices, and we cannot read it. We do not sell personal data, and this website has no trackers.
1. Who is responsible
Ulamna ("we"), is responsible for the personal data described here. Contact for anything about privacy: contact@ulamna.com, subject "Privacy".
2. What we collect
| When | What |
|---|---|
| You write to us | Your name, email address, company if given, and what you write. |
| You become a client | Contact details of the people we work with, billing name and address, tax number where required, quotes, contracts, invoices and our exchanges. |
| You pay by card | Payment is made on Stripe. We receive from Stripe only the payment's status, amount, date, and limited card details (brand, last four digits, expiry, country). We never receive the full card number or security code. |
| You use our software | Account and licence information (organisation, users, plan, devices enrolled, licence status) and technical records needed to run the service (timestamps, software version, error reports you choose to send). |
| You visit this website | Our hosting provider processes technical data (IP address, browser, pages requested, time) to deliver the pages and protect them from attacks. We do not use it to profile you. |
3. Data inside our products
Our software products are end-to-end encrypted. The records you keep in them (for example client files, appointments, invoices and documents) are encrypted on your own devices with keys that never leave them in readable form. Our servers store and relay only sealed envelopes that we have no key to open. We therefore cannot read, analyse or disclose that content, and we do not act on it.
Because of this, you remain responsible for the personal data you keep in the software, and for your recovery kit: if every key is lost, we cannot restore the data.
4. Why we use it, and on what basis
- To answer your messages and prepare quotes: our legitimate interest in answering you, or steps taken at your request before a contract.
- To carry out our contracts with you: deliver services, provide licences, support you: performance of the contract.
- To bill and keep accounting records: performance of the contract and our legal obligations.
- To keep our services secure and prevent fraud: our legitimate interest.
- To tell you about important changes to a service you use: performance of the contract. We send marketing only with your consent, and you can withdraw it at any time.
5. Who we share it with
We do not sell or rent personal data. We share it only with the providers that help us run our business, under contracts that bind them to protect it, and only as much as they need:
- Stripe, for card payments and invoicing. Stripe processes your payment data under its own privacy policy.
- Cloudflare, which hosts this website and protects it from attacks.
- Google Fonts and jsDelivr, from which your browser loads this website's typefaces and its 3D graphics library; they receive your IP address as part of the request.
- Our email provider, which carries our messages.
- Our accountants, auditors and lawyers, when needed, and public authorities when the law requires it.
6. International transfers
Some of these providers process data outside the country where you live. When they do, we rely on the safeguards required by the applicable law, such as adequacy decisions or standard contractual clauses.
7. How long we keep it
- Messages that do not lead to a contract: up to 24 months after our last exchange.
- Client and contract records: for the duration of the relationship, then for the limitation period that applies to contract claims.
- Invoices and accounting records: for the period required by accounting and tax law.
- Technical logs of the website: a short period, usually not more than 30 days, unless needed to investigate an attack.
8. Your rights
Depending on the law that applies to you, you may ask to access your personal data, correct it, delete it, receive a copy in a portable format, restrict or object to its use, and withdraw any consent you gave. Write to contact@ulamna.com; we answer within one month. You may also complain to the data protection authority of your country.
9. Security
We protect personal data with encryption in transit and at rest, access limited to the people who need it, signed software updates, and regular backups that are tested by restoring them. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
10. Cookies
This website sets no cookies and uses no analytics or advertising trackers. If that ever changes, we will update this policy and ask for your consent where the law requires it. Our payment pages on Stripe may use cookies needed for payment security; see Stripe's policy.
11. Children
Our website and services are meant for professionals and businesses. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy. The date at the top shows the latest version. We will tell our clients about significant changes by email.
13. Contact
Ulamna · contact@ulamna.com