PRIVACY POLICY

Last Updated: March 30, 2026

Urai AI Corp. (“Urai”, “we”, “us”, or “our”) operates a business-to-business software platform that enables customers to design, deploy and scale AI Agents, both voice-based agents and chat-based conversational tools, including related developer and automation and related services (collectively, the “Services“). This privacy policy (“Privacy Policy”) explains how we collect, use, disclose, process, and otherwise handle personal information of our customers and their end-users (“you”, “your”, “users”, or “customers”) when you visit our website https://uraiai.com (the “Website”) and/or when you subscribe for or use our Services.

This Privacy Policy describes our practices for collecting, maintaining, using, processing, protecting, and disclosing personal information in a clear and transparent manner.

  1. SCOPE AND AUDIENCE

This Privacy Policy applies to personal information Urai collects in the course of providing the Services to business customers and their authorized users (such as employees, contractors, or representatives of those customers). Our Services are offered pursuant to our terms of service (the “Terms of Service”) on a business-to-business (B2B) basis only and are not authorized for personal consumer use.

Where we process personal information on behalf of a customer as part of providing the Services, the customer remains responsible for determining the purposes and means of processing, and Urai acts as a service provider or data processor in accordance with the customer’s instructions.

It is our policy to comply with the privacy legislation within each jurisdiction in which we operate.

  1. INFORMATION WE COLLECT

We collect the following categories of information, depending on how the Website and Services are used, including:

  1. Personal Information

Information that we can reasonably use to directly or indirectly identify individuals, such as names, mailing addresses, email addresses, telephone numbers, internet protocol (IP) addresses, user names or other similar identifiers (“personal information”).

  1. Business-related Information and Account Details

Information provided that relates to your business duties, including: your title, duties, business address, business email address, and business telephone number. When accounts are created or managed, we also collect information such as your username, and account credentials.

  1. Billing and Payment Information

Billing contact details and transaction-related information necessary to process payments shall be collected if you choose to purchase access to our Services. Payment card details are handled by third-party payment processors like Stripe and are not stored directly by Urai.

  1. Usage and Analytics Data

Technical and usage information generated through use of the Services, such as your login information, device type, time zone setting, IP address, device and browser information, timestamps, log files, and feature usage metrics.

  1. User Submissions

Any and all content, material, and information uploaded, submitted, or otherwise made available by customers or their users when using the Website or Services - including but not limited to configurations, files, text, voice recordings, and other data - constitutes “User Submissions” and may be collected by us. You are able to interact with our Services in a variety of formats, including but not limited to chat, coding, and agentic sessions (”Inputs”), which generate responses and actions (“Outputs”) based on your Inputs. This includes third-party applications you choose to integrate with our Services. If you include personal information or reference external content in your Inputs, we will collect that information and this information may be reproduced in your Outputs. You are responsible for ensuring that any personal information you submit through the Services is limited to what is strictly necessary for your intended use. You should avoid submitting unnecessary personal information through the Services. As a business customer, you are solely responsible for ensuring that you have a lawful basis for submitting any personal information to the Services - including obtaining any required consents from individuals whose personal information is included in your Inputs or otherwise provided to us. Urai processes such personal information solely on your instructions as your service provider and does not assume responsibility for personal information introduced into the Services by you or your users.

  1. Voice Recordings and Transcripts

As part of the Services, customers may configure voice agents that collect and process voice recordings and generate voice transcripts. This voice data is processed solely on the customer’s instructions for the purpose of providing the Services.

  1. Support Communications

Information contained in communications with us, such as emails, support tickets, or other messages.

  1. HOW WE USE INFORMATION

We use personal information for the following purposes:

  • To present our Website and its contents to you;
  • To enforce our Terms of Service and similar terms and agreements;
  • To provide, operate, and maintain the Services;
  • To fulfill the purposes for which you provided the information or that were described when it was collected, or any other purpose for which you provide it;
  • To authenticate users and manage accounts;
  • To provide you with notices about your account/subscription, including expiration and renewal notices;
  • To process payments and manage billing;To deliver customer support and respond to inquiries;To monitor, analyze, and improve the performance, reliability, and security of the Services;
  • To comply with applicable legal, regulatory, and contractual obligations; and
  • For any other reasonable purpose with your consent.

We do not sell personal information and do not use customer voice data or content for independent advertising purposes. All the information used by Urai to provide its Services is used for and on behalf of you, our customers, and by using our Website and/or Services, you consent to Urai’s use of such information.

  1. VOICE DATA AND CUSTOMER-CONTROLLED PROCESSING

Voice recordings and voice transcripts processed through the Services are generated based on customer configurations. Urai processes this data on behalf of and under the instructions of the customer to provide the requested functionality.

Customers determine how voice data is collected, used, retained, and deleted within the Services. Urai does not determine the content of voice interactions and does not use voice data for purposes outside service delivery unless expressly agreed with the customer.

  1. COOKIES AND SIMILAR TECHNOLOGIES

As you navigate through and interact with our Website, we may use cookies or other automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

  • Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website; and

  • Information about your computer and internet connection, including your IP address, operating system, and browser type.

We use cookies and similar technologies to operate and improve the Services. A cookie is a small file placed on the hard drive of your computer.

  1. Essential Cookies

These cookies are necessary to enable core functionality such as authentication, security, and session management.

  1. Analytics Cookies

We use analytics cookies to understand how the Services are used and to improve performance and reliability. We do not use cookies for targeted advertising or marketing purposes. You may opt out of analytics cookies by adjusting your browser settings or by contacting us at privacy@uraiai.com. Disabling certain cookies may affect the functionality of the Services.

  1. HOW WE SHARE INFORMATION

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may share personal information that we collect or you provide as described in this Privacy Policy with the following categories of third parties, solely as necessary to provide the Services:

  • Our subsidiaries and affiliates;
  • Payment processors for billing and payment processing such as Stripe;
  • Please visit https://stripe.com for their privacy policy
  • We don’t store any sensitive payment card details on our servers.
  • Customer support tools used to manage and respond to support requests;
  • Cloud infrastructure and hosting providers used to operate and deliver the Services; AI, speech-to-text, and voice service providers engaged to deliver voice-related functionality; and
  • Service providers and business partners for a variety of business purposes, including website and data hosting, ensuring compliance with industry standards, research, auditing, data processing, and providing you with the Services. Service providers may include but are not limited to large language model (LLM) and AI inference providers (such as Google Gemini, OpenAI, and OpenRouter) engaged to power AI agent and chat-based functionality within the Services.

These third parties are authorized to process personal information only as necessary to perform Services on our behalf and are subject to contractual obligations regarding confidentiality and data protection.

Urai may also disclose personal information in the following circumstances:

  • If Urai is involved in a merger, corporate transaction, bankruptcy, or other situation involving the transfer of business assets, Urai will disclose your personal information as part of these corporate transactions;
  • Our Services may involve integrations with, or may direct you to, websites, apps, and services managed by third parties. By interacting with these third parties, you are providing information directly to the third party and not Urai and subject to the third party’s privacy policy. If you access third-party services, such as social media sites or other sites linked through the Services (e.g., if you follow a link to our LinkedIn account), these third-party services will be able to collect personal information about you, including information about your activity on the Services. If we link to a site or service via our Services, you should read their data usage policies or other documentation. Our linking to another site or service doesn’t mean we endorse it or speak for that third party;
  • We may disclose personal information to governmental regulatory authorities as required by law, including for legal, tax or accounting purposes, in response to their requests for such information or to assist in investigations. We may also disclose personal information to third parties in connection with claims, disputes or litigation, when otherwise permitted or required by law, or if we determine its disclosure is necessary to protect the health and safety of you or any other person, to protect against fraud or credit risk, to enforce our legal rights or the legal rights of others, to enforce contractual commitments that you have made, or as otherwise permitted or required by applicable law; and
  • Urai will otherwise disclose personal information when an individual gives us permission or directs us to disclose this information, including as a part of our Services.
  1. DATA RETENTION

We retain personal information for as long as reasonably necessary to fulfill the purposes and criteria described in this Privacy Policy, subject to applicable legal, accounting, or reporting requirements.

User Submissions, including but not limited to voice recordings and transcripts, are retained in accordance with customer configurations and instructions. Usage logs and analytics data are generally retained for shorter periods, unless required for security, troubleshooting, or legal compliance.

When the personal information collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose without further notice to you or your consent.

  1. DATA SECURITY

The security of your personal information is very important to us. We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and report to the applicable privacy authority as required by law.

No security measures are perfect, and we cannot guarantee absolute security. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

  1. INTERNATIONAL DATA TRANSFERS

We may process, store, and transfer your personal information in and to a foreign country, with different privacy laws that may or may not be as comprehensive as Canadian law. Personal information may therefore be transferred across borders and processed in jurisdictions with different data protection laws, including laws that may permit government or law enforcement access to that information. Urai remains accountable for personal information transferred to third-party service providers and uses contractual or other means to provide comparable protection to that information while it is being processed outside Canada. By submitting your personal information or engaging with the Website and Services, you consent to this transfer, storage, or processing.

  1. CHILDREN

Our Website and Services are not directed towards, and we do not knowingly collect, use, disclose, sell, or share any information from anyone under the age of majority. If you are under the age of majority, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive features of this Website, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under the age of majority, we will delete that information. If you believe we might have any information from or about a child, please contact us at privacy@uraiai.com and we will investigate the matter and, if appropriate, delete the personal information.

  1. YOUR PRIVACY RIGHTS

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes. Depending on applicable law, individuals may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing activities. We will respond to access requests within the timeframes required by applicable law, and in any event within 30 days of receipt unless an extension is required and permitted by law. Requests relating to personal information processed on behalf of a customer should generally be directed to that customer. For other requests, you may contact us using the details found in section 12 below.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

We will provide access to your personal information, subject to exceptions set out in applicable privacy legislation. Examples of such exceptions include:

  • Information protected by solicitor-client privilege.

  • Information that is part of a formal dispute resolution process.

  • Information that is about another individual that would reveal their personal information or confidential commercial information.

  • Information that is prohibitively expensive to provide.

If you are concerned about our response or would like to correct the information provided, you may contact us at privacy@uraiai.com.

  1. CONTACT INFORMATION

If you have questions about this Privacy Policy or wish to submit a privacy-related request, please contact:

Urai AI Corp with a registered address at Fredericton, NB, E3B 6H3 Canada

You can also email us at: privacy@uraiai.com

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this Privacy Policy, and with applicable privacy laws. To discuss our compliance with this Privacy Policy please contact our Privacy Officer using the contact information listed above.

  1. WITHDRAWING YOUR CONSENT

Where you have provided your consent to the collection, use, and transfer of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at privacy@uraiai.com. Please note that if you withdraw your consent we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.

  1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Website home page. We will notify customers of material changes by email or through a prominent notice within the Services, and will post the updated version with a revised “Last Updated” date. For non-material changes, continued use of the Services after the updated policy is posted constitutes acceptance of the revised terms. For material changes involving new or significantly different uses of personal information, we will seek consent as required by applicable law. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Website and this Privacy Policy to check for any changes.