Legal

Privacy Policy

Last updated April 4, 2026Effective April 18, 2026

UNIPAX Inc. ("UNIPAX", "we", "us") respects your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit ring.unipaxtools.com, use the UNIPAX mobile applications, or purchase and use UNIPAX products. It also explains your rights and choices regarding that information.

1. Scope of this Policy

This Policy applies to information we collect through our websites (ring.unipaxtools.com and its subdomains), the UNIPAX iOS and Android apps, customer support channels, retail and trade-show interactions, and the products and accessories we sell.

It does not apply to footage stored locally on the micropackaging inside your ring, which remains under your physical and legal control. We never automatically upload, scan, or analyze on-device video footage. Footage only leaves your device when you choose to download, share, or back it up to a destination you control.

Third-party services we link to (e.g., Stripe checkout, the App Store, Klarna, YouTube) operate under their own privacy policies. Where we have meaningful influence, we describe their roles below.

2. Information we collect

We collect information in three ways: (a) information you provide directly, (b) information collected automatically through use of our services, and (c) information from third parties acting on our behalf.

Account information: Email address, hashed password, display name, profile photo if you choose to add one, language and region preferences, and product registration details.
Order and payment information: Billing address, shipping address, items ordered, order history, refund and return history. Payment card details are entered directly into our payment processor (Stripe, PayPal, or Klarna) and are never stored on UNIPAX servers; we receive only a tokenized reference, the last four digits of the card, the card brand, and the expiration date.
Device and usage information: When you use the UNIPAX app, we receive device model, operating system, app version, language, time zone, crash logs, and feature usage events. These help us diagnose bugs and prioritize improvements.
Customer support information: Conversation transcripts, attachments (e.g., serial number photos, install pictures you choose to send), the issue you reported, and the resolution. Phone calls to our support line are not recorded.
Cookies and similar technologies: First-party cookies used for cart persistence, login session, and consent state. Third-party cookies are only set with your consent. See Section 6 and our Cookie Settings page.
Marketing preferences: Email subscription state, click and open events for transactional and promotional emails (where permitted), and unsubscribe history.
Information from partners: If you reach us through a retailer (e.g., Amazon, Best Buy), we receive the order number and shipping confirmation needed to provide warranty support. We do not buy or rent personal information from data brokers.

3. How we use your information

We use information only for the purposes described below, and we minimize what we collect to what is necessary for each purpose.

Fulfilling orders: Processing payments, shipping products, handling returns and warranty claims.
Providing the UNIPAX app: Authenticating your account, syncing settings across devices, delivering product updates, surfacing release notes.
Customer support: Responding to your requests; routing escalations; improving our self-serve documentation in aggregated, anonymized form.
Product safety: Investigating reports of malfunction, defective hardware, or safety incidents that may require recall.
Marketing (with consent): Sending newsletters, product launches, and offers. You can unsubscribe at any time using the link in every email or in your account preferences.
Security & fraud prevention: Detecting unauthorized account access, payment fraud, abuse of our affiliate program, and policy violations.
Legal compliance: Complying with tax, accounting, consumer protection, export control, and other applicable laws.

4. Legal bases (EEA, UK, Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following lawful bases under GDPR Article 6:

Performance of a contract: When the processing is necessary to deliver the product or service you ordered (e.g., shipping address to fulfill an order).
Legitimate interests: When processing serves our legitimate interests in operating, securing, and improving our business, and your interests do not override ours (e.g., fraud detection, product analytics).
Consent: Where you have given specific, informed, and freely given consent — for example, marketing emails and non-essential cookies.
Legal obligation: When processing is required to comply with a law that applies to us (e.g., tax records).

6. Cookies & similar technologies

We classify cookies as strictly necessary, performance & analytics, and marketing. Only strictly necessary cookies are set by default; the other categories are enabled only with your consent (or implied consent where allowed by local law).

You can review and change your preferences anytime via the Cookie Settings page or by clearing cookies in your browser. Disabling strictly necessary cookies will break checkout and account login.

7. Data retention

We retain personal information only as long as needed for the purposes described in this Policy or as required by law.

Account data: For the life of your account, plus 30 days after deletion to allow for recovery requests.
Order records: 7 years from order date, to comply with US and EU tax law.
Support transcripts: 3 years from the last interaction.
Marketing analytics: 26 months, then aggregated or deleted.
Backups: Encrypted off-site backups are retained 90 days and then overwritten.

8. International data transfers

UNIPAX is headquartered in the United States and operates services in the EU. When we transfer personal data from the EEA, UK, or Switzerland to a country that has not been deemed adequate by the European Commission (including the US), we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures such as encryption in transit and at rest.

You can request a copy of the SCCs that apply to your data by writing to privacy@ring.unipaxtools.com.

9. Security

We implement technical and organizational measures to protect personal information: TLS 1.3 for all data in transit, AES-256 encryption at rest for databases and backups, hardware-bound secrets, mandatory two-factor authentication for employee access, principle of least privilege for production systems, and quarterly third-party penetration testing.

No method of transmission or storage is 100% secure. If a personal data breach affects you and presents a risk to your rights, we will notify you and the relevant authorities within 72 hours, in accordance with applicable law.

10. Your rights and choices

Subject to your jurisdiction and verification of your identity, you may exercise the following rights:

Access: Request a copy of the personal information we hold about you.
Correction: Ask us to fix inaccurate or incomplete information.
Deletion: Ask us to delete your account and personal information, subject to legal retention obligations.
Portability: Receive a copy of your information in a structured, machine-readable format.
Restriction & objection: Restrict or object to certain processing activities, including direct marketing.
Withdraw consent: Withdraw any consent you previously gave, without affecting the lawfulness of prior processing.
Complain to a regulator: Lodge a complaint with your local data protection authority.

11. California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, grants you additional rights including the right to know what categories of personal information are collected, the right to delete, the right to correct, the right to opt out of sale or sharing (we do neither), and the right to limit use of sensitive personal information.

To exercise these rights, email privacy@ring.unipaxtools.com from the email address associated with your account. We respond within 45 days. You may also designate an authorized agent in writing.

We do not knowingly sell or share the personal information of California residents.

12. Children's privacy

Our products and services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact privacy@ring.unipaxtools.com and we will delete it promptly.

13. Third-party links

Our sites may link to third-party websites or services that we do not operate. We are not responsible for their privacy practices. We encourage you to read their privacy policies before sharing any information.

14. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated by email to registered users at least 15 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

15. Contact

Data Controller: UNIPAX Inc., 700 Mission St., Suite 200, San Francisco, CA 94105, USA.

EU Representative (Art. 27 GDPR): EU Rep Services Ltd., Dublin, Ireland.

UK Representative: UK Rep Services Ltd., London, United Kingdom.

Privacy inquiries: privacy@ring.unipaxtools.com — we acknowledge requests within 5 business days and substantively respond within 30 days (45 for CCPA).