Compliance & Data Privacy

Privacy Policy

Effective Date: October 08, 2026 • Last updated: October 08, 2026

At MEYOU S.r.l. / Unfract.com (“MEYOU”, “we”, “us”, or “our”), we take your privacy seriously. This Privacy Policy applies to Unfract, a software platform that unifies corporate workflows—including task management, calendar scheduling, meeting notetakers, documentation, chat, and an AI hub featuring a Large Language Model (LLM) directly connected to user projects—as well as related services and websites (collectively, the “Services”).

By accessing or using Unfract in any manner, you acknowledge that you accept the practices outlined in this Privacy Policy. Any capitalized terms used but not defined herein shall have the meanings given to them in our Terms of Service.

If you have any questions, require this policy in an alternative format, or wish to exercise your data privacy rights, please contact us at team@meyou.company.

Data Controller

The Data Controller for Unfract is MEYOU S.r.l., registered at Quartiere Fra’ Claudio Granzotto 33, 37032 Monteforte d’Alpone (VR), Italy (Email: team@meyou.company).

MEYOU manages and protects personal data processed through Unfract in accordance with applicable data privacy laws, including Regulation (EU) 2016/679 (General Data Protection Regulation or "GDPR").

Company Details
MEYOU S.r.l.
VAT (P.IVA): IT05159610236
Direct Privacy Contact
team@meyou.company
Dedicated Data Privacy & GDPR Desk

Personal Data We Collect

We collect personal data directly from you, automatically through your use of the platform, and from integrated workspace tools. The data categories include:

Profile & Account
Full name, business email address, password/credentials, job title, and organization details.
Workflow & Projects
Tasks, project assignments, calendar entries, documentation contents, and meeting notes captured by automated notetakers.
Communication
In-app chat messages, comments, attachments, and feedback submitted within collaborative project spaces.
AI Hub & LLM
Prompts, queries, context data connected to user projects, and LLM-generated outputs processed through the AI Hub.
Technical & Device
IP address, device identifiers, operating system, browser type, log data, and platform usage metrics.
Payment Data
Voluntarily provided billing details and subscription transactions (processed securely via Stripe).
Voluntary Inquiries
Identifying information and text provided in support requests, feedback forms, or emails you send us.

Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

  • You Directly: When you register an account, configure user profiles, input project details, or contact us.
  • Automatic Telemetry: Transmitted automatically by your browser or client application (IP address, request logs, device diagnostics, cookies).
  • Third-Party Workspace Integrations: External tools authorized by your workspace (e.g., Google Calendar, GitHub, identity providers).

Our Commercial or Business Purposes for Collecting Personal Data

  • Providing, Customizing and Improving the Services: Creating and administering accounts; processing subscription billing; executing AI queries; continuous platform optimization and testing.
  • Security & Fraud Protection: Conducting debugging, incident investigation, access protection, and malicious behavior prevention.
  • Customer Communication: Answering support requests, delivering operational updates, and providing necessary notices.
  • Legal Compliance: Adhering to legal mandates, tax recordkeeping, resolving disputes, and enforcing contractual terms.

How We Share Your Personal Data

We do not sell your personal data. We disclose your Personal Data only to authorized categories of recipients under strict confidentiality and processing agreements:

  • Service Providers & Sub-Processors: Hosting providers, database infrastructure, security auditors, analytics vendors, and customer support tooling.
  • AI Model & LLM Providers: Enterprise LLM providers powering the AI Hub. All AI processing is bound by contractual terms ensuring that your confidential project data, prompts, and outputs are never used to train public models.
  • Payment Processors: We partner with Stripe for secure payment processing. We do not store full credit card numbers on our servers.
  • Workspace Administrators: Authorized personnel within your organization managing team access and user roles.
  • Legal Requirements: Competent judicial or administrative authorities when mandatory under applicable statutory law or valid legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of company assets, subject to continued protection under this Privacy Policy.

Cookie Policy & Tracking Technologies

Unfract utilizes cookies and similar tracking technologies to enhance your experience, analyze site traffic, remember preferences, and deliver personalized content. You can review or modify your consent settings at any time by clicking in the footer.

Strictly Necessary Cookies

Essential for secure user authentication, workspace session state, and security protection. These cannot be disabled.

Analytics & Performance Cookies

Help us analyze aggregate traffic and platform metrics (such as Google Analytics) to continuously optimize software performance.

Data Security

MEYOU adopts robust physical, technical, organizational, and administrative security measures based on the nature of the data and risk profile:

Encryption in Transit & at Rest

All traffic is secured using TLS 1.3 encryption in transit. Stored data and databases are protected using industry-standard AES-256 encryption at rest.

European Cloud Hosting

Primary databases and infrastructure are hosted in enterprise data centers within the European Union (EU).

Access Controls & MFA

Strict principle of least privilege, multi-factor authentication, and audited internal role-based access management.

International Safeguards

Any cross-border data transfer outside the EEA is protected via European Commission Standard Contractual Clauses (SCCs).

Data Retention

We retain personal data for as long as your account remains active or as necessary to fulfill operational, contractual, and legal duties:

  • Account & Project Workflow Data: Retained for the duration of the customer subscription agreement, and up to 10 years following termination to satisfy Italian statutory accounting, tax, and civil law obligations (Art. 2220 Codice Civile).
  • AI Hub Logs & LLM Outputs: Retained only for the short duration strictly necessary for operational delivery, caching, and debugging, before being sanitized or deleted.
  • Customer Support Records: Retained for the time necessary to resolve inquiries and substantiate regulatory compliance.
  • Anonymized Data: Aggregated, de-identified data containing no personal identifiers may be retained indefinitely for analytics and product improvements.

User Rights (GDPR & Regional Rights)

European Union (GDPR) Data Subject Rights

Under Chapter III of the GDPR, you have the following enforceable rights:

Right of Access (Art. 15)
Request confirmation and a copy of the personal data held about you.
Right to Rectification (Art. 16)
Correct any inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of data no longer required or unlawfully processed ("Right to be Forgotten").
Right to Restriction (Art. 18)
Request temporary limitation of processing in contested circumstances.
Data Portability (Art. 20)
Obtain personal data in a structured, commonly used machine-readable format.
Right to Object (Art. 21)
Object at any time to processing based on legitimate interests or direct marketing.
Supervisory Authority Complaint: You have the right to lodge a complaint with your local EU Data Protection Authority or the Italian Lead Authority: Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it).

Children’s Privacy

Unfract does not knowingly collect personal information from individuals under 13 years of age. If we learn that such data has been collected without parental consent, it will be promptly removed.

Regional & US State Privacy Provisions

  • California ("Shine the Light"): Residents may contact us regarding marketing disclosure policies. MEYOU does not sell personal data.
  • Nevada Residents: Opt-out requests for the sale of covered data may be submitted to team@meyou.company with the subject line "Nevada Do Not Sell Request".

Changes to this Privacy Policy

We’re constantly evolving our platform, and we may update this Privacy Policy from time to time to reflect feature enhancements, technological developments, or statutory updates.

When material revisions occur, we will provide notification by posting a prominent notice on the Unfract website, by emailing workspace administrators, or by updating the “Effective Date” header above. Your continued use of the Services after the effective date of an updated policy signifies your agreement to the modified terms.

Contact Information

For any questions, requests, or to exercise your GDPR data protection rights, please contact our team:

MEYOU S.r.l. – Privacy & Compliance Desk
VAT / P.IVA: IT05159610236
Registered Office: Quartiere Fra’ Claudio Granzotto 33, 37032 Monteforte d’Alpone (VR), Italy
Platform: Unfract (unfract.com)