Skip to main content

UniKey Privacy Policy

Effective date: 2026-08-01
Data controller/service provider: https://www.getunikey.ai
Privacy and support contact: support@getunikey.com

This Privacy Policy explains how UniKey collects, uses, discloses, stores, and protects information when you visit the UniKey website, use the console, connect a wallet, purchase AI Credits, create API keys, call the API, or use related products and documentation (collectively, the “Service”). It also explains choices and rights that may apply to you.

1. Information we collect​

We collect only information reasonably needed to provide, secure, measure, support, and improve the Service. Depending on how you use UniKey, this may include:

Account and identity information​

  • wallet address, wallet network, authentication challenge, signature result, and account identifier;
  • email address, federated-login identifier, display name, and other account details you choose to provide;
  • organisation, project, support, verification, and communication details.

UniKey does not ask for or intentionally store wallet seed phrases or private keys. A wallet address is pseudonymous but is public blockchain information and may be linkable to other activity.

Payment and transaction information​

  • Waffo checkout, payment, refund, dispute, fraud-review, and transaction references;
  • selected payment method, currency, amount, status, timestamps, and limited billing information returned by the payment provider;
  • wallet transaction hash, public address, network, token or contract information, amount, and confirmation status.

UniKey does not need to receive your full card number or card security code when Waffo or another payment provider processes the payment. Payment providers may collect and process additional information under their own notices.

API, usage, and technical information​

  • API key metadata, project or agent identifiers, endpoint, model, request time, latency, status, token counts, Credits consumed, and error information;
  • prompts, files, tool inputs, model outputs, and other content that you choose to send through the Service, to the extent needed to route a request, return a response, meter usage, prevent abuse, investigate incidents, or provide support;
  • IP address, browser and device information, language, approximate location derived from IP, referrer, cookie or similar identifiers, and security events.

Do not submit secrets, private keys, payment-card data, government identifiers, or sensitive personal data unless your use case requires it, you have a lawful basis, and you have configured appropriate controls. Model providers may process request content to deliver a response under their own terms and technical policies.

2. How we use information​

We may use information to:

  1. create and authenticate accounts, wallet sessions, API keys, and permissions;
  2. route requests, provide model and agent features, return outputs, meter usage, and maintain AI Credits balances;
  3. process Waffo and Web3 wallet payments, reconcile transactions, investigate disputes, and prevent fraud or abuse;
  4. operate, secure, debug, monitor, and improve the Service, including rate limits and reliability;
  5. communicate about account security, service changes, support, transactions, and—where permitted—product updates;
  6. comply with law, lawful requests, tax and accounting requirements, and enforce the Terms; and
  7. establish, exercise, or defend legal claims.

Where a privacy law requires a lawful basis, the basis may be performance of a contract, legitimate interests in operating and securing the Service, compliance with a legal obligation, consent, or another basis permitted by law. The applicable basis and any required consent mechanism must be confirmed for each jurisdiction before publication.

3. AI request content and model providers​

UniKey acts as a gateway and may transmit request content to the model, hosting, safety, or infrastructure provider selected by the routing configuration. We use request content only for the purposes described above and under applicable provider agreements. Model providers may have their own retention, training, safety-review, and international-transfer practices; consult the provider information shown in the console or documentation for the applicable route.

Unless a separate written agreement says otherwise, do not assume that prompts, files, outputs, or logs are confidential, error-free, or excluded from provider retention. You are responsible for removing unnecessary personal data and for giving any notices or obtaining any permissions required before submitting another person’s data.

4. Blockchain and public information​

Wallet addresses, transaction hashes, token movements, timestamps, and other information written to a public blockchain may be visible to anyone, copied indefinitely, and impossible for UniKey or another party to delete. We may associate public blockchain information with an account, payment, Credits balance, or support case to verify a transaction and prevent fraud. Do not use a wallet that reveals information you do not want publicly linkable to your UniKey activity.

5. When we share information​

We may share information with:

  • Waffo and payment, acquiring, fraud, chargeback, and transaction partners to complete and verify payments;
  • wallet, blockchain, node, custody, identity, authentication, hosting, model, analytics, monitoring, security, email, and customer-support providers;
  • professional advisers, auditors, insurers, financing partners, or authorities where reasonably necessary;
  • a buyer, successor, or transaction counterparty in a merger, financing, reorganisation, or asset transfer, subject to appropriate safeguards; and
  • others when you direct us, consent, or disclosure is necessary to protect rights, safety, the Service, or the public.

We do not sell personal information for money. We do not disclose API keys, seed phrases, or private keys to third parties. Service providers may process information only for the contracted purposes and may be located outside your country.

6. International transfers​

UniKey, Waffo, model providers, and other processors may process information in countries different from your own. Before publication, the service operator must document the countries involved and the transfer mechanism required by applicable law, such as an adequacy decision, standard contractual clauses, consent, or another recognised safeguard. Contact support@getunikey.com for the current transfer information where available.

7. Retention​

We retain information only for as long as reasonably necessary for the purposes in this Policy, including providing the Service, maintaining accounting and payment records, resolving disputes, preventing abuse, meeting legal obligations, and enforcing agreements. Retention periods may differ by record type and jurisdiction; the service operator will apply documented schedules and legal requirements.

Public-blockchain records cannot be deleted by UniKey. Backups may persist for a limited period after deletion and will be protected and overwritten under the applicable backup cycle.

8. Security​

We use reasonable administrative, technical, and organisational safeguards appropriate to the risk, such as encryption in transit, access controls, key-management practices, logging, rate limits, and incident response. No internet, API, wallet, payment, or storage system is completely secure. You must protect credentials, use least privilege, and report suspected compromise to support@getunikey.com.

If a security incident affects personal information, we will assess it and provide notices required by applicable law. We may temporarily limit access or rotate keys to contain a threat.

9. Your rights and choices​

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information; withdraw consent; opt out of marketing; or complain to a data-protection authority. You may also request review of certain automated decisions where required by law.

Send a request to support@getunikey.com with the account or wallet identifier, the right you are exercising, and enough information for us to verify you. We may ask for reasonable verification and may decline or limit a request where law permits or requires it. We will respond within the period required by applicable law. You can opt out of non-essential marketing through the unsubscribe link or account settings; transactional and security messages may still be sent.

Deleting an account does not remove information that we must retain, information already written to a public blockchain, or information held independently by payment, wallet, model, or other providers.

10. Cookies and similar technologies​

UniKey may use essential cookies or local storage for authentication, security, preferences, session continuity, and load balancing. With the required consent, we may use optional analytics or similar technologies to understand product use. Browser settings can block cookies, but some Service features may stop working. The final cookie list, consent mechanism, and retention periods must be documented before publication.

11. Children​

The Service is not directed to children below the minimum age required by applicable law. We do not knowingly collect personal information from children in violation of that law. If you believe a child has provided information, contact support@getunikey.com so we can investigate and take appropriate action.

The Service may link to or integrate with Waffo, wallets, blockchains, model providers, and other third-party services. Their privacy practices are controlled by their own notices, not this Policy. Review the Waffo privacy policy, other applicable notices, before connecting a wallet, submitting content, or making a payment.

13. Policy changes​

We may update this Policy as the Service, law, or processing practices change. We will post the new version, update the effective date, and provide additional notice for material changes where required. Continued use after the effective date means the updated Policy applies to future processing.

14. Contact​

Privacy requests and questions: support@getunikey.com
Support and payment questions: support@getunikey.com
Telegram: @UniKey_XO, @UniKey_Jerry
Data controller/service provider: https://www.getunikey.ai