Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address and a password (stored only in hashed form by our authentication provider). If you sign in through a third-party single sign-on or identity provider, we receive the basic profile information that provider shares with us, such as your name and email address.
• Documents you upload. When you upload a compensation or commission plan, we collect the document (such as a PDF) and the structured data we extract from it.
• Information you enter. This includes optional deal or pipeline data you provide, inputs you enter into our calculators, your conversations with the AI Coach, and onboarding responses.
• Communications. If you contact us or provide feedback, we collect the contents of those communications.
• Agreement records. We record your acceptance of our Beta Test Agreement and the confirmations you make each time you upload a document, along with timestamps.
• Usage and device information. We automatically collect information about how you use the Service, including log data, pages and features accessed, approximate location derived from IP address, browser and device type, and similar diagnostic information.
• Cookies and similar technologies. We use cookies and similar technologies for authentication, to keep you signed in, and for product analytics, as described in Section 8.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including extracting your plan, running earnings calculators, generating AI-assisted coaching and insights, and saving your work;
• Maintain, secure, debug, test, and improve the Service;
• Communicate with you about your account, updates, and support requests;
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our terms;
• Comply with legal obligations and enforce our agreements; and
• Create de-identified and aggregated data for analytics, research, and product development, as described in Section 4.

We do not sell your personal information, and we do not use the content you upload to train or fine-tune large language models without your separate, opt-in consent.

3. AI Processing

Core features of the Service rely on artificial intelligence. We use OpenAI to extract structured data from your uploaded plans and to generate embeddings, and we use Anthropic to power AI Coach responses and compensation insights.

Our integrations with these AI providers are configured under each provider's enterprise data-processing addendum and, where supported, under their respective Zero Data Retention or equivalent options, so that the content we send to these providers is not retained by them beyond what is necessary to return a response to the API call.

AI-generated outputs can be inaccurate or incomplete. The Service does not provide legal, financial, tax, or career advice; please review the relevant disclaimers in our Terms of Service before relying on any output.

4. How We Share Information

We do not sell your personal information to data brokers or other third parties. We share information only in the following circumstances:

• Service providers (sub-processors). We share information with vendors that process data on our behalf to operate the Service: Supabase (database, authentication, and file storage), Vercel (web hosting and content delivery), OpenAI (plan extraction and embeddings), Anthropic (AI Coach responses and insights), Sentry (error monitoring), and PostHog (product analytics). These providers are bound by contract to use the information only to provide services to us. All of this infrastructure is located in the United States.
• Identity providers. If you sign in using a third-party single sign-on provider, we exchange limited information with that provider to authenticate you.
• Legal and safety. We may disclose information if required by law, subpoena, or legal process, or where we believe disclosure is reasonably necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.
• Business transfers. If Uncapit is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your consent. We share information in other ways with your direction or consent.

The Service may show peer benchmarks — such as percentile ranges for base pay, variable pay, or quota — that are calculated from de-identified, aggregated data derived from other users' compensation plans, grouped into cohorts by attributes such as role, level, and go-to-market motion. These benchmarks are statistical aggregates that do not identify you, any other user, any employer, or any specific compensation plan, and we do not provide benchmarking outputs to your employer in any form that identifies you. We may use and retain de-identified and aggregated data to develop and improve our products.

5. Data Retention

We retain uploaded source documents, including PDFs, for up to twelve (12) months after upload to support extraction-quality improvement and re-processing, unless we delete them earlier or unless a longer period is reasonably necessary for security, legal compliance, dispute preservation, fraud prevention, or backup integrity. After the applicable retention period, source documents are deleted from active systems and from backups on our defined deletion cycle.

Extracted parameters, structured data, calculation inputs, account data, and usage data may be retained for the life of your account, subject to the deletion rights described in Section 7. De-identified and aggregated data may be retained indefinitely, provided it does not reasonably identify you, your employer, or any specific compensation plan.

6. Data Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit and at rest provided by our infrastructure vendors, access controls, and US-based hosting. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Your Rights and Choices

You can access and update your information directly through in-product controls, and you can archive or delete individual plans. To delete your account and the personal information associated with it, contact us at privacy@uncapit.ai, and we will delete it in accordance with the retention schedule in Section 5, except for information we are required or reasonably need to retain.

Depending on where you live, you may have additional rights under applicable privacy laws, including the right to know what personal information we hold, to access or receive a copy of it, to correct or delete it, and to opt out of the sale or sharing of personal information. We do not sell personal information. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at privacy@uncapit.ai. We may need to verify your identity before acting on your request.

8. Cookies and Analytics

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in and maintaining your session. We also use PostHog for product analytics to understand how the Service is used and Sentry to monitor and diagnose errors.

You can control cookies through your browser settings, though disabling certain cookies may prevent you from signing in or using parts of the Service.

9. Children's Privacy

The Service is intended only for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

10. Data Location and International Users

The Service is operated in, and intended for residents of, the United States, and all of our infrastructure is located in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those of your jurisdiction.

11. Third-Party Links and Services

The Service may link to or integrate with third-party websites and services, including single sign-on providers. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@uncapit.ai.