PRIVACY POLICY  ·  DOC-LEG-002  ·  v1.0
Legal Document  /  Data & Privacy

Privacy Policy

This policy explains what information u-AUDIT-C collects, how it is used, and what we do not retain. We built this platform around one principle: your drawings are yours alone.

Effective Date: May 2, 2026  ·  Version 1.0
Ephemeral
We process.
We do not store.
Your original drawing files are automatically and permanently deleted upon successful completion of each audit job.
Isolated
Your workspace.
No one else's.
Every account has a fully isolated, private workspace. No other user can access your files or audit history.
AI-Safe
Zero training.
Zero retention.
AI processing is performed by a vetted third-party provider. Your documents are never used to train any AI model.
01 —

Who We Are

u-AUDIT-C is a construction document audit platform operated by ubicuo.mx, accessible at uauditc.com. We provide AI-assisted audit reports for architectural and engineering drawing sets.

This Privacy Policy applies to all users regardless of geographic location. ubicuo.mx operates under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP, Mexico) as its primary applicable privacy framework. Where Users are located in other jurisdictions, we apply equivalent standards of care consistent with internationally recognized privacy principles.

For privacy matters: privacy@uauditc.com

02 —

What We Collect

We collect only the minimum information necessary to deliver the Service.

Account Information

  • Name, email address, and username — provided at registration, used for account identification and communications.
  • Firm or company name — optional, provided at registration.
  • Password — stored in encrypted form. We never store or have access to your plaintext password.

Consent Records

  • The version of the Terms and Conditions you accepted, the date and time of acceptance, and your IP address at that moment. This record is maintained for legal compliance and cannot be deleted.

Project and Job Metadata

  • Project number, name, design phase, and jurisdiction — as entered by you for each audit job.
  • Job status and timestamps.
  • Structured audit findings — the text-based output of the analysis, retained as part of your job history.

Payment Information

  • Payments are processed exclusively by Stripe, Inc. We do not store any payment card details on our systems. We retain only transaction references and your credit balance.

Technical Data

  • IP address and browser information — collected at login and at the time of T&C acceptance for security purposes.
  • Error logs — retained briefly for platform stability, then deleted.
03 —

Your Drawing Files

We keep your audit. We never keep your drawings.
Your original drawing files are automatically and permanently deleted from our servers upon successful completion of each audit job.

During Processing

Your uploaded drawing files are held securely and privately for the duration of the audit. They are not accessible to other users and are not shared with any third party except the AI analysis service described in Section 5, under strict data handling terms.

Upon Successful Completion

Once your Audit Report is successfully generated, your original drawing files and all uploaded supporting documents are permanently deleted. What remains is exclusively:

  • Your Audit Report PDF — the deliverable you paid for
  • Structured audit findings — a text summary of the analysis results
  • Basic job metadata — project name, phase, and timestamps

Failed jobs: If a job fails before completion, your drawing files are retained temporarily so you can retry without re-uploading. These files are deleted within 90 days at most, or immediately when you delete the job from your dashboard.

Your Right to Delete

You may delete any job — and all its associated files — at any time from your dashboard. Deletion is immediate and permanent.

04 —

How Your Data Is Used

We use your information exclusively for the following purposes:

  • Service delivery — processing your audit jobs and generating Audit Reports.
  • Account management — authentication, credit balance, and billing.
  • Communications — job completion notifications, verification codes, and support responses.
  • Legal compliance — maintaining consent records and responding to lawful regulatory requests.
  • Security — detecting and preventing unauthorized access or abuse.
  • Platform improvement — analyzing anonymized, aggregate usage patterns. Individual drawing content is never used for this purpose.

We never sell your data. We do not sell, rent, or share any personal information or project data with third parties for marketing or any commercial purpose.

05 —

AI Processing

Audit analysis is performed by a third-party AI service provider. The following commitments govern how your content is handled:

Limited Retention by AI Provider

Content submitted for AI analysis is retained by our AI service provider for a limited period in accordance with their standard commercial terms, solely for security and operational purposes. This retention is temporary and subject to the provider's data handling policies.

No AI Training on Your Data

Your drawing files, project data, and audit results are not used to train or improve any AI model — by ubicuo.mx or by our AI service provider. We have disabled all voluntary data-sharing features available in our provider's platform to ensure this protection remains in effect.

Encrypted Transmission

All data transmitted between your browser, our platform, and the AI service is encrypted in transit.

06 —

Third Parties

We work with a minimal set of third-party services, each strictly limited to their designated purpose. No third party receives your drawing content for any purpose other than AI analysis, subject to the terms described in Section 5.

Service Purpose Receives Drawing Content?
AI Service Provider AI-assisted audit analysis Yes — for a limited period per provider's standard commercial terms, for security and operational purposes only. Not used for training.
Stripe, Inc. Payment processing No
Infrastructure provider Secure platform hosting No — the hosting provider has no application-level access to your data.

No analytics platforms, advertising networks, or tracking services are used on this platform.

07 —

Data Retention

Data Type Retention Period
Original drawing files — completed jobs Deleted automatically upon successful job completion
Original drawing files — failed jobs Up to 90 days, or until you delete the job
Audit Report PDFs Until you delete the job or close your account
Structured audit findings Until you delete the job or close your account
Account information Until account closure, plus 30 days
Consent records Indefinite — required by applicable law
Payment transaction references 7 years — required by financial regulations
08 —

Security

We apply industry-standard security measures to protect your information:

  • Account isolation — each account's files and history are fully isolated. No user can access another user's data.
  • Encrypted passwords — passwords are stored using strong one-way encryption. We cannot retrieve your password.
  • Encrypted transmission — all data in transit is encrypted.
  • Session security — authenticated sessions expire automatically after inactivity.
  • Access controls — access to our infrastructure requires strong authentication. No third party has routine access to user data.

Security Incident Notification

In the event of a breach affecting your personal information, we will notify you promptly upon becoming aware of the incident. Notification will be sent to your registered email address and will describe the nature of the breach, the data affected, and the measures taken to address it.

09 —

Your Rights

Under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and internationally recognized privacy principles, you have the following rights with respect to your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — request correction of inaccurate or incomplete information.
  • Withdrawal of consent — withdraw consent to data processing at any time. Doing so may require account closure.
  • Deletion — request deletion of your account and associated data. Certain records cannot be deleted due to legal requirements.
  • Portability — download your Audit Reports and findings from your dashboard at any time.
  • Complaint — file a complaint with INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales — inai.org.mx), the privacy regulator for the Service Provider. Users located in Canada may also file with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To exercise any of these rights: privacy@uauditc.com. We respond within 30 days.

10 —

Cookies

u-AUDIT-C uses a single cookie for authentication only. No advertising cookies, tracking pixels, or third-party analytics are used on this platform.

The authentication cookie is set upon login, contains only a session identifier, and is deleted when you log out or your session expires. No personal or project data is stored in cookies.

11 —

Children

u-AUDIT-C is intended exclusively for professionals aged 18 and over. We do not knowingly collect information from anyone under 18. If we become aware of such an account, it will be terminated and all associated data deleted.

12 —

Changes to This Policy

Material changes will be communicated by email to your registered address and by notice upon your next login, at least 14 days before taking effect. The current version and effective date are always shown at the top of this page.

13 —

Contact & Complaints

Privacy Officer — ubicuo.mx
privacy@uauditc.com
Response within 30 days of receipt.

To file a complaint with the privacy regulator of the Service Provider (Mexico):

INAI — Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales
inai.org.mx  ·  +52 (55) 5004-2400

Users located in Canada may also file with:

Office of the Privacy Commissioner of Canada
priv.gc.ca  ·  Toll-free: 1-800-282-1376

Related document: This Privacy Policy should be read alongside our Terms & Conditions of Service.