Legal

Privacy Policy

Last updated: August 20, 2026

This Privacy Policy explains what information Ueldox collects, how we use it, and the choices you have. Ueldox is operated by Romuel N. Baltonado, based in the Philippines.

1. Information we collect

• Account information — your name, email address, and either a password (stored as a secure one-way hash, never in plain text) or your Google account ID and email if you sign in with Google.
• Workspace information — your organization/workspace name, members, and roles.
• Your content — the photos, videos, folder names, and tags you upload or create.
• Payment information — when you subscribe to a paid plan, your payment is handled directly by our payment processor. We do not receive or store your full card number.
• Usage and log data — basic technical data like login timestamps and IP address, used for security and troubleshooting.

2. How we use your information

• To provide and operate Ueldox — storing, organizing, and displaying your content.
• To power AI-based visual search and tag suggestions. This runs on our own servers using an on-device AI model — your photos are never sent to a third-party AI provider for this feature.
• To apply watermarking to shared or downloaded media, where enabled for your workspace.
• To process billing and manage your subscription.
• To provide customer support and respond to your requests.
• To keep the service secure and prevent abuse.

3. Cookies

Ueldox uses a single session cookie to keep you signed in. We don't use third-party advertising or analytics trackers.

4. Sharing your information

We don't sell your information. We share it only:

• Within your workspace, according to the role and permissions your workspace owner or admin assigns you.
• With service providers we rely on to run Ueldox, such as our hosting provider and payment processor — only to the extent needed to provide the service.
• When required by law.

5. Data security

Passwords are hashed with bcrypt and never stored in plain text. All traffic to Ueldox is encrypted (HTTPS). Access to a workspace's content is restricted to its members, scoped by their assigned role.

6. Data retention and deletion

We keep your information for as long as your account or workspace is active. If you'd like your account, workspace, or content deleted, contact us at ueldobyrom@gmail.com and we'll process the request within a reasonable time, except where we're required to retain certain records (e.g., billing history) for legal or accounting purposes.

7. Your rights

You can request access to, correction of, export of, or deletion of your personal information at any time by contacting us.

8. Children's privacy

Ueldox is a business tool and isn't directed at, or knowingly used to collect information from, children under 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new "Last updated" date.