Last updated: May 2026
Commitment to Privacy
Ume, Inc. ("Ume", "we", "us", or "our") is committed to protecting the privacy of our design partners, customers, and visitors. We handle all data with the highest degree of confidentiality and technical rigor.
Data Collection
We currently only collect information that you voluntarily provide to us when inquiring about early access, such as your name, company, and email address. We do not use cookies for tracking or sell your data to third parties.
We use a self-hosted, privacy-first analytics tool (Umami) running on our own infrastructure to count aggregate visits. It does not set cookies, does not track individuals across sites, and does not share data with third parties.
Data Usage
Your information is used solely to evaluate potential partnerships and communicate with you regarding our progress. All internal data processing is governed by strict enterprise security standards.
Google User Data
The sections below describe how Ume handles data accessed through Google APIs — specifically, the Google Business Profile API. This applies when you, as a Ume customer, authorize Ume to read or update your Google Business Profile.
What Google data we access
When you grant Ume the https://www.googleapis.com/auth/business.manage OAuth scope, we may access:
- Business profile information you manage on Google (name, hours, address, phone, website, attributes, categories)
- Photos, posts, services, and Q&A content on your Google Business Profile
- Customer reviews on your profile and the ability to post owner replies on your behalf
- Performance metrics for your profile (calls, website clicks, direction requests, search and discovery views)
How we use Google data
We use Google user data to provide, operate, and improve the Ume service:
- Display your Google Business Profile data in the Ume product for review and editing
- Generate recommendations (for example, updated descriptions, opening hours, photo additions, review replies) based on your data and our analyses
- Apply updates back to your Google Business Profile only at your explicit direction
- Evaluate and improve the Ume service, including the analytical and machine-learning models that power its features
What we will not do with Google data
- No advertising. We do not use your Google user data for advertising, ad targeting, or audience segmentation.
- No selling or trading. We never sell, rent, or trade your Google user data.
How we share Google data
We do not share your Google user data with third parties, except:
- With infrastructure providers that process data on our behalf under contractual confidentiality obligations (most notably Google Cloud Platform itself, where our services run)
- When you explicitly direct us to share with a specific third party
- When required by applicable law, regulation, or legal process
How we store and protect Google data
- All Google user data is stored on Google Cloud Platform infrastructure in the United States
- OAuth refresh tokens are encrypted at rest using Fernet symmetric encryption with keys managed in Google Secret Manager
- Access to production data is restricted to authorized Ume engineering personnel and logged for audit
- Connections between Ume services and Google APIs use TLS 1.2 or higher
Retention and deletion
- We retain your Google user data only as long as you maintain an active Ume account, or as long as needed to provide the service you have requested
- You may revoke Ume's access at any time at https://myaccount.google.com/permissions. Revocation immediately invalidates our refresh token, and we stop accessing your Google data
- You may request deletion of any Google user data we hold by emailing hello@umehq.ai. We will delete the data within 30 days of your verified request
- When you cancel your Ume account, we delete all associated Google user data within 30 days
Limited Use compliance
Ume's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
For any privacy-related inquiries, including requests to access or delete your Google user data, please contact us at hello@umehq.ai.