Security Policy

1. Security Commitment

We are committed to protecting the confidentiality, integrity, and availability of data processed through UiChemy.

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect user data.

However, no system can guarantee absolute security.

2. Infrastructure & Hosting

UiChemy is hosted across multiple cloud providers, including infrastructure located in:

• United States
• European Union

We use reputable cloud hosting providers such as:

• Hetzner
• DigitalOcean

Infrastructure may evolve over time as we improve reliability and performance.

3. Data Encryption

We implement encryption safeguards including:

• Encryption in transit (HTTPS / TLS)
• Encryption at rest where supported by infrastructure

Sensitive data is transmitted using secure protocols.

4. Access Controls

We apply access control measures including:

• Role-based access
• Restricted administrative privileges
• Authentication controls
• Internal access monitoring

Access to production systems is limited to authorized personnel.

5. Data Isolation

User data is logically separated within our systems.

We do not intentionally access user content except:

• To provide support
• To maintain system integrity
• When required by law

6. Monitoring & Logging

We maintain system logging and monitoring practices to:

• Detect unusual activity
• Identify security incidents
• Investigate potential abuse

7. Incident Response

In the event of a confirmed security incident affecting personal data, we will:

• Investigate promptly
• Take reasonable steps to mitigate impact
• Notify affected users where required by law

8. Backups & Availability

We implement backup procedures designed to support service continuity.

However:

• We do not guarantee uninterrupted availability
• We do not guarantee zero data loss
• Users are encouraged to maintain independent backups of critical data

9. Third-Party Services

UiChemy integrates third-party providers including:

• Paddle (billing)
• OpenAI
• Google
• Anthropic
• Analytics providers

These providers maintain their own security standards.

We are not responsible for security failures caused by third-party systems beyond our reasonable control.

10. Employee & Contractor Security

Personnel with access to sensitive systems are subject to:

• Confidentiality obligations
• Access restrictions
• Internal security practices

11. User Responsibilities

Users are responsible for:

• Securing account credentials
• Managing permissions
• Reviewing AI outputs before use
• Backups critical data

12. Policy Updates

We may update this Security Policy periodically.

Continued use of the Service constitutes acceptance of updates.