Privacy Policy

Data We Collect

uclacommons collects the minimum data needed to operate the service: account email, payment details processed via our payment provider, and images you upload for processing.

Usage data — such as processing volume, feature usage, and session duration — is collected in anonymized form to improve platform performance. No personally identifiable usage data is sold or shared.

How We Use Your Data

Your email is used for account management, billing notifications, and service updates. Uploaded images are used solely to generate your requested output — they are deleted within 60 minutes of processing.

Cookies

uclacommons uses essential cookies to maintain your session and remember login state. Analytics cookies are used in anonymized form to understand feature usage patterns.

You can disable non-essential cookies through your browser settings at any time. Disabling essential cookies will prevent login and session functionality from working correctly.

Data Sharing

uclacommons does not sell your data. Payment data is handled exclusively by our PCI-compliant payment processor. Infrastructure providers operate under strict data processing agreements aligned with GDPR.

Data Security

All data in transit is encrypted using TLS 1.3. Uploaded images are stored in isolated, access-controlled environments and purged automatically within 60 minutes.

Account data is protected by AES-256 encryption at rest. Access to production data is restricted to a small number of authorized personnel and logged for audit purposes.

Your Rights

You have the right to access, correct, or delete your personal data at any time. To submit a request, email info@uclacommons.com. info@uclacommons.com UCLA Commons responds to all data requests within 30 days.

Third-Party Links

The uclacommons platform may include links to third-party services or documentation. This privacy policy applies only to uclacommons — linked services have their own policies that you should review independently.

Data Retention

Account data is retained for the duration of your active account plus 90 days after cancellation. Uploaded images are deleted within 60 minutes. Anonymized usage data may be retained indefinitely in aggregated form.

Policy Updates

This privacy policy was last updated January 1, 2026. uclacommons will notify registered users by email at least 14 days before any material changes take effect.