Privacy Policy

1. Introduction

Ulu Operations Inc. ("we," "us," or "our") operates UluOps. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect your email address and encrypted password. You may optionally provide a username, display name, bio, and avatar.

Usage Data

When you use UluOps, we collect validation run data, agent scores, issue tracking data, and analytics. This data is associated with your account and organization.

API and SDK Usage

API requests include your API key (hashed for storage), request metadata, and token consumption metrics. We do not store the content of artifacts being validated — only the validation results.

3. How We Use Your Information

• Provide and maintain the Service
• Authenticate your identity and manage sessions
• Generate analytics and trend data for your projects
• Detect and prevent abuse
• Improve the Service based on aggregate usage patterns

4. Data Storage and Security

Your data is stored in encrypted databases. Passwords are hashed using argon2id. API keys are stored as SHA-256 hashes — we cannot recover your plaintext API key after initial generation. Session tokens are stored as httpOnly, secure cookies.

5. Data Retention

Validation run data and issue tracking data are retained indefinitely as part of the immutable forensics model — this is a core feature, not incidental storage. You can request deletion of your account and associated data by contacting us.

6. Data Sharing

We do not sell your data. We may share data with:

• Infrastructure providers necessary to operate the Service
• Law enforcement when required by law

Public definitions in the Registry are visible to other users by design. Private and unlisted definitions are only accessible to their owners and authorized organization members.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account
• Export your data

8. Cookies

We use a single httpOnly session cookie for authentication. We do not use tracking cookies or third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service.

10. Contact

Questions about this Privacy Policy? Contact us at privacy@uluops.ai.