Privacy Policy

Last updated: August 26, 2026

The Short Version

We collect what we need to verify your workforce. We protect it like it's our own. We never sell your data. Ever.

What We Collect

  • • Account Information: Email, name, company details
  • • Employee Data: GitHub profiles, location data (when enabled), work patterns
  • • Usage Data: How you interact with our platform
  • • Verification Data: Identity verification results, AI detection scores

How We Use It

We use your data exclusively to:

  • • Verify employee identities and work patterns
  • • Detect potential fraud or misrepresentation
  • • Generate insights and reports for your organization
  • • Improve our detection algorithms
  • • Comply with legal obligations

Who We Share With

We share your data with:

  • • No one for marketing purposes
  • • Service providers who help us operate (AWS, authentication services)
  • • Legal authorities when required by law
  • • Your organization (employee data shared with their employers only)

Google User Data and AI/ML Processing

Our use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Some Uncover features use artificial intelligence to generate user-facing content: work-sample assessment questions tailored to an employee's Google Drive documents, grading of open-ended assessment responses, and summaries of workspace activity. To provide these features, the relevant Google user data (for example, bounded excerpts of Google Drive documents and Gmail activity metadata) is transmitted to OpenAI, our AI service provider, through its API at inference time only. Under OpenAI's API data usage policy, API inputs and outputs are not used to train or improve OpenAI's models by default, and may be retained by OpenAI for up to 30 days for abuse monitoring before being deleted. We retain the generated output (such as assessment questions) together with references to the source documents.

We never use Google user data to train, fine-tune, or improve any foundational or generalized AI or machine-learning model, whether our own or a third party's, and we do not permit any provider to do so.

We do not use third-party AI aggregators, gateways, or model hubs; our calls go directly to OpenAI's API, with no intermediary model routing.

Data Security

We use industry-standard encryption and secure infrastructure. Our platform is built on SOC 2 compliant infrastructure. We treat your data like nuclear codes.

Your Rights

You have the right to:

  • • Access your personal data
  • • Correct inaccurate data
  • • Delete your account and data
  • • Export your data
  • • Opt-out of certain processing

Data Retention

We keep active account data as long as you're a customer. Deleted accounts are purged after 30 days. Some anonymized data may be retained for improving our algorithms.

International Data

We are a United States company, incorporated in Delaware. We and our service providers process and store your data in the United States. For international transfers, we use the safeguards required by applicable data protection law.

Contact Us

Questions about privacy? Concerns about your data?
Email: privacy@uncover.com
Or use our contact form

Changes to This Policy

We'll notify you of any material changes via email. Continued use after changes means you accept the new policy.