Umbra Legal

Privacy Policy

Last Updated: May 12, 2026

1. Overview

Umbra (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, and protect information when you use the Umbra platform, website, and AI-powered stencil generation services.

By using Umbra, you agree to the practices described in this policy.

2. Information We Collect

Account Information: When creating an account, we may collect:

  • Name
  • Email address
  • Login credentials or authentication provider information

If you choose Google Sign-In or another third-party login provider, we receive only the account information authorized by that provider. We never receive or store your passwords from third-party services.

Uploaded Content: We collect and process images you upload, prompts and generation requests, generated tattoo designs and stencils, and saved gallery content. This information is used solely to provide the Umbra service.

Usage & Device Information: We may automatically collect device/browser information, IP address, log data, usage activity, generation history, error diagnostics, timestamps, and session information. This helps us maintain platform security, performance, and reliability.

3. How We Use Information

We use collected information to:

  • Operate and maintain the Umbra platform
  • Generate AI-powered tattoo designs and stencils
  • Store your gallery and account data
  • Enforce subscription and usage limits
  • Improve platform performance and reliability
  • Prevent abuse, fraud, or unauthorized activity
  • Send account, billing, and service-related notifications

We do not send marketing emails without your consent.

4. AI & Image Processing

Uploaded images are processed through our AI systems to generate stencil outputs and tattoo artwork.

Your uploaded images and generated content:

  • Remain private to your account
  • Are not publicly visible unless you choose to share them
  • Are not sold to third parties
  • Are not used to train public AI models

Limited internal access may occur only when necessary for customer support, abuse prevention, security investigations, or legal compliance. All access is restricted and monitored.

5. Data Storage & Security

Umbra uses reputable cloud infrastructure providers and industry-standard security practices including:

  • Encrypted data transmission
  • Access controls and authentication protections
  • Private storage architecture
  • Isolated user data environments

While we take reasonable steps to protect your information, no system can guarantee absolute security.

6. Payments & Third-Party Services

Umbra may use trusted third-party providers for:

  • Payment processing
  • Authentication
  • Cloud storage
  • AI inference
  • Analytics and diagnostics

Examples may include providers such as Stripe, Google Authentication services, cloud hosting providers, and AI infrastructure partners.

These providers process information only as necessary to deliver their services and are required to maintain appropriate security measures.

Umbra does not store full payment card information on our servers.

7. Cookies & Analytics

Umbra uses cookies and similar technologies to:

  • Keep users signed in
  • Maintain security sessions
  • Improve site functionality
  • Analyze performance and usage trends

You may control certain cookie preferences through your browser settings.

Disabling cookies may impact some platform functionality.

8. Data Retention

We retain data only as long as necessary to operate the service.

Account Data: Retained while your account remains active.

Uploaded Images & Generated Designs: Stored until you delete them or close your account.

Logs & Diagnostics: Typically retained for a limited period for security and operational purposes.

Backup Systems: Backups may temporarily retain deleted information for disaster recovery purposes.

9. Your Rights

Depending on your location, you may have rights to:

  • Access your data
  • Correct inaccurate information
  • Request deletion of your account or content
  • Export/download your data
  • Restrict certain data processing activities
  • Opt out of marketing communications

To exercise these rights, contact us using the information below.

10. International Data Transfers

Umbra may process data in the United States or other jurisdictions where our providers operate.

By using the platform, you understand that your information may be transferred and processed outside your local jurisdiction.

Where legally required, we implement appropriate safeguards for international data transfers.

11. Children’s Privacy

Umbra is not intended for children under 13 years old, or the applicable minimum age in your jurisdiction.

We do not knowingly collect personal information from children.

If we become aware that such information has been collected, we will take reasonable steps to remove it.

12. “Do Not Sell or Share”

Umbra does not sell personal information.

Users in certain regions may have additional rights related to targeted advertising, data sharing, or privacy preferences under applicable laws.

Requests may be submitted using the contact information below.

13. Policy Updates

We may update this Privacy Policy periodically to reflect changes in:

  • Features
  • Security practices
  • Legal requirements
  • Platform operations

If significant changes are made, we may notify users through the platform or by email.

Continued use of Umbra after updates constitutes acceptance of the revised policy.

14. Contact

Questions regarding this Privacy Policy or your personal data may be directed to support@umbra.ai.

© 2026 Umbra. All rights reserved.