Privacy

Privacy Policy

Last revised on September 24, 2026

This Privacy Policy describes how Uri ("we", "us", "our") collects, uses and discloses information about you for the website https://meeturi.com/ and its subdomains (the "Website"), Uri's autonomous personal assistant, which you talk to on WhatsApp and any other messaging channel we offer, and any services, content, tools, features and functionality offered on or through our Website and the assistant (collectively referred to as the "Services"). For the purposes of this Privacy Policy, "you" and "your" means you as the user of the Services.

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not understand or agree to this Privacy Policy, please do not use or access the Services.

Changes to this privacy policy

We may modify this Privacy Policy from time to time, in which case we will update the "Last revised" date at the top of this Privacy Policy. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by a message from Uri on the channel you use, or by emailing you at the last email address you provided us) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

Collection and use of information

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

In addition to the specific uses described below, we may use certain information that we collect to provide, develop, and improve the Services, including to understand your requests, plan and complete tasks on your behalf (which may include engaging third parties on your behalf), generate responses and provide you with personalized suggestions based on the context of your interactions and prior experience with the Services, and to improve and redesign features used across the Services. We also use this information to communicate with you, measure and analyze performance, enhance the safety and security of our Services, comply with applicable legal obligations, and protect our rights and the rights of our employees or other individuals. We do not sell your information or disclose your information to registered data brokers or third parties who resell your information to others. We do not use your information to train AI models.

Information you directly provide us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

  • Contact details, such as name, phone number, email address, and city. We use this information to create and maintain your account and provide the Services, and to communicate with you.
  • Payment information, such as credit or debit card information and billing address for a paid plan, which we collect using a third-party payment processor. We use this information to process your payment and provide the Services.
  • Any other information you choose to include in communications with us, for example, when you send a message, a photo, a document, or a voice note to Uri to engage the Services. We use this information to provide the Services.

Information collected through your use of the Services

The Services include our autonomous personal assistant that acts on your behalf, should you choose to engage our personal assistant. The personal assistant thinks, plans, and acts to help you complete your everyday tasks.

To effectively perform its duties, the personal assistant is designed to be available when engaged and, depending on the permissions you grant, may have access to information you share with and make available to it. This may include, for example, information from applications and services you have connected, text and documents that you transmit, and other text or data that is made available to us through your connected integrations and accounts. This may include the content of messages, emails, or other private communications or materials that you choose to make accessible to the personal assistant. The Services may also collect audio and voice data, should you choose to send voice notes or enable voice features.

Depending on the permissions you grant and how you interact with the personal assistant, it may have access to information that is considered sensitive. For example, you may provide your payment information to the personal assistant so it can book rides on your behalf, or your username and password for third-party accounts so that the personal assistant can sign into these accounts on your behalf. Or, for instance, you may use the personal assistant to process health-related information, for example, when the personal assistant books a medical appointment for you or summarizes an email received from your healthcare provider. As noted above, should you choose to provide the personal assistant with access, it will also have access to the content of your messages, emails, and other private communications that you have made available to us through connected integrations.

Information you store in the feature of the Services known as the "Vault" (cards, logins, identity details, and other secrets you store so Uri can fill them in for you) is encrypted with a key tied to your account. The AI models that power the Services never receive Vault values, only a label such as "your personal card". Card numbers are held by a PCI-compliant tokenization provider, not on our servers. We use Vault information only to provide the Services to you.

We do not use information collected through your use of the Services, including the content of your messages, connected accounts, files, or Vault, to evaluate, fine-tune, or train AI models. There is no opt-out because there is nothing to opt out of. We may use de-identified, aggregated information as described in the "Deidentified information" section below.

Please note that the Services and the personal assistant are not a professional advisor, so you should not rely on it for actions requiring financial, legal, medical, or other advice or judgment.

Information collected from Google

If you choose to link your Google account to the Services, we receive access to your Gmail, Google Calendar, Google Contacts, Google Drive, Google Docs, Google Sheets, Google Slides and Google Tasks, and photos you choose to share through the Google Photos picker, and also receive related file metadata, message metadata, calendar event details, and other content that Google shares with us about your account and use of Google's products and services via Google APIs. We also receive your basic profile information (name, email address, and profile photo) to identify your account. We use information collected from Google to provide the Services, including so that the personal assistant can read your inbox and calendar to tell you what needs your attention, draft and send emails you ask for, find and edit the files you name, keep your contacts and tasks, and take other actions on your behalf, and to personalize your use of the Services.

To find things quickly, we keep an encrypted, searchable index of message headers and short excerpts of your mail; full messages, attachments, and files are fetched from Google when a task needs them. Your Google access tokens are stored encrypted with a key tied to your account, and everything is isolated per account at the database level.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use information received from Google APIs, including Google Workspace APIs, to develop, improve, evaluate, fine-tune, or train generalized or non-personalized AI or machine learning models, or for serving ads, including retargeting, personalized or interest-based advertising. To the extent that third parties process information collected from Google on our behalf (including third-party AI model providers), we only permit them to process this information on our behalf and to help us provide the Services (and for certain legally permissible purposes such as maintaining security and complying with law). In particular, we do not disclose raw or derived Google Workspace or Photos API user data to third-party AI services, including third-party AI model providers, for model training or secondary purposes. Humans at Uri do not read your Google data except with your explicit permission for a specific support request, as required for security purposes, or as required by law.

At any time, you may revoke our access to your Google account and request deletion of information collected via Google APIs. You may revoke access by telling Uri ("disconnect Google"), from the access page Uri links you to, or from your Google Account permissions page. When you disconnect Google, our access ends and the information we indexed from Google is deleted at once. Deleting your Uri account deletes everything.

Information we collect automatically about your interaction with the Services

We also automatically collect certain information about your interaction with the Services ("Usage Data"). We use Usage Data to provide the Services, keep them secure, fix them when they break, run analytics, and better understand user interaction with the Services.

  • Records of the actions Uri took on your behalf, so you can review them and so we can fix things when they break.
  • Location information, such as your city or, should you choose to share it, your precise location.
  • Log data, network and device information, including IP address, device type, operating system, browser type and version, time zone setting, and date and time stamps, collected when you open a page we link you to. We may review and use this information for safety and security purposes, including when you report a bug.

Information collected from other sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us.

In particular, the Services may obtain information about you when you choose to provide the Services with access to third-party applications. For example, if you choose to link your Google account, we receive access to your instances of various Google products (discussed above). We also may receive information from login integrations like Google OAuth, such as your profile and email address. If you connect your own WhatsApp account as a linked device, we receive the messages and media in that account, which we store encrypted with a key that is yours alone so Uri can find anything you ask about later. You may revoke our access to any connected account at any time by telling Uri or from the access page Uri links you to. Disconnecting an account ends our access and deletes the data we indexed from it.

Any information we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-party websites and links.

Deidentified information

Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you ("deidentified information") (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

Cookies and other tracking technologies

Our Website uses cookies that are strictly necessary to provide the Services, such as the cookie that keeps you signed in and the token our bot check uses to tell people from automated traffic ("Tracking Technologies"). We do not use advertising cookies or third-party analytics trackers. Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including certain features and general functionality, to work incorrectly. If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

Disclosure of your information

We may disclose your information to third parties subject to this Privacy Policy, including the following categories of third parties:

  • Our affiliates or others within our corporate group.
  • Vendors and other service providers who help us provide the Services, including for system administration, third-party hosting and storage, payment processing, card tokenization, messaging carriers, proxy and network services, security, and analytics purposes.
  • Third-party AI model providers who help support the Services, under agreements that prohibit them from using your information to train their models or for any purpose other than serving your request. Vault values are never sent to any model provider.
  • Third parties with whom the Services interact with on your behalf (including autonomously), for example, when the Services book a ride to the airport for you or send an email you asked for.
  • Third parties to whom you request or direct us to disclose information, such as through connecting third-party integrations or a login integration.
  • Third parties in connection with or in anticipation of a business transaction such as a merger or acquisition.
  • Professional advisors, such as auditors, law firms, or accounting firms.

We may also disclose your information for legal and security reasons and to protect our services and business, including to cooperate with law enforcement and regulatory inquiries, to detect and prevent against fraudulent or illegal activity, to exercise or defend legal claims, and to ensure the safety and security of our business and employees. We do not provide information collected from Google to third-party business partners for their own purposes.

How long we keep your information

We keep your information for as long as your account is open and as needed to provide the Services. Conversations are kept so Uri can refer back to them; after a period of inactivity a topic is summarized and the full transcript moves to encrypted cold storage that only your account can retrieve. Connected-account indexes are deleted immediately when you disconnect the account. Vault items are kept until you delete the item or your account. Technical logs are kept for 90 days, unless needed for an open security or legal matter. When you delete your account, we delete your information within 30 days, with backups purged within 90 days.

Your choices and rights

You can see and delete what Uri knows about you by talking to Uri. Say "what do you know about me", "forget my old address", "disconnect Gmail", "delete my Amex", or "delete everything" and Uri does it and confirms. The access page Uri links you to shows every connected account and every Vault item name with a disconnect or delete button. You can export your data by asking Uri for it.

If you are in a jurisdiction with specific privacy rights (for example California, the European Union, or the United Kingdom), you have the rights those laws give you, including the rights to access, correct, delete, and port your information, and the right not to be discriminated against for exercising them. Contact us at privacy@meeturi.com to exercise them if talking to Uri is not enough.

Third-party websites and links

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy policy, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Children's privacy

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. The Services are for people 18 years of age and older. If we become aware that we have unknowingly collected information about a child, in particular any child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the information below to request that it be deleted.

Data security

All information is encrypted in transit and at rest. Vault items and message content are encrypted with per-account keys held in a hardware-backed key management service, and every table in our database is isolated per account at the database level. Sensitive actions (payments above your threshold, adding a card or login, deleting data) require a passkey on your device.

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Autonomous AI agent features such as our personal assistant may present additional privacy and security considerations because these features can perform tasks or take actions independently on your behalf, based on the permissions you grant.

As with any technology that acts on your behalf, there are inherent considerations to be aware of. These include the possibility of unintended actions (including unintended payments or communications to outside parties), incorrect or incomplete outputs, and interactions with third parties who may include misleading instructions intended to influence autonomous agents. We build confirmation steps into anything costly or irreversible, and we encourage you to review actions taken by the personal assistant, remain attentive while using the Services, and always be mindful of these considerations.

Moreover, any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

Where your information is processed

Our servers are in the United States. If you use the Services from outside the United States, your information is transferred to and processed in the United States.

How to contact us

Should you have any questions about our privacy practices or this Privacy Policy, please email us at privacy@meeturi.com.