By using our site, you agree to our use of cookies. Cookie Policy

Privacy Policy

Last updated: September 27, 2026

This Privacy Policy explains how utobo, Inc. ("utobo," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our websites — utobo.com, utobo.ai, and utobians.com — create an account, or use our products, including utobo Store (online stores, courses, digital products, memberships, and paid sessions), utobo Email (transactional email, campaigns, and automations), and our AI features and utobo Agents. It applies worldwide, including to individuals in the European Economic Area (EEA), the United Kingdom, and other regions with data-protection laws.

Buying from a creator's store? Stores built on utobo (for example, at a *.utobians.com address or a creator's own domain) are run by independent creators. The creator is responsible for your personal information; see our Buyer Privacy Notice for how utobo is involved.

If you are a resident of California, additional disclosures apply to you. Please see our Privacy Notice for Californians, our California Supplemental Privacy Notice, and your California Privacy Choices, which supplement this policy.

Who we are

utobo, Inc., 800 W El Camino Real Suite 180, Mountain View, CA 94040, USA, is responsible for the personal information described in this policy. You can reach our privacy team at privacy@utobo.com.

Our role depends on the data. For information about your account, our websites, and our own marketing, utobo acts as a controller. For the personal information our customers collect or upload through our products — for example, their Buyers' orders and course progress in utobo Store, or the contacts and recipients they email through utobo Email — utobo acts as a processor (or service provider) on the customer's behalf. That processing is governed by our Data Processing Addendum, and this policy does not change the customer's own privacy commitments.

Information we collect

We collect the following categories of personal information:

  • Information you provide. Account details (name, email address, password), business and profile information, billing details, and the content of messages you send us for support or sales.
  • Store and Buyer data. When you run a store, we process the information your Buyers provide or generate (such as name, email address, order history, bookings, and course progress) on your instructions as your processor. Card and bank details are collected directly by the payment processor you connect (such as Stripe or PayPal); utobo does not store full card numbers.
  • Contact and recipient data you import. When you use utobo Email, you may upload email addresses, names, and contact properties of your own recipients. We process this data on your instructions as your processor.
  • Product usage and delivery data. Delivery events such as sends, opens, clicks, bounces, and unsubscribes; logs; and information about how you interact with our products and websites.
  • Device and cookie data. IP address, browser and device information, and identifiers collected through cookies and similar technologies (see our Cookie Policy).

How we use personal information

We use personal information to:

  • Provide, operate, host, secure, and improve our products and websites;
  • Process transactions and manage billing and subscriptions;
  • Send, receive, route, and measure email and other communications you request;
  • Provide AI features and Agents you choose to use;
  • Provide customer support and respond to your requests;
  • Detect, prevent, and address fraud, abuse, spam, and security incidents;
  • Send service and, where permitted, marketing communications; and
  • Comply with legal obligations and enforce our agreements.

Legal bases for processing (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract with you; our legitimate interests in operating, securing, and improving our business (balanced against your rights); your consent (for example, for certain marketing or cookies), which you may withdraw at any time; and compliance with a legal obligation.

AI features

Some features — including AI email drafting, AI spam scoring, AI-assisted contact tagging, AI store and course building, chat assistants, and utobo Agents — are powered by third-party artificial-intelligence providers, such as Google (Gemini) and Amazon Web Services (Amazon Bedrock). When you use these features, the relevant content and, where applicable, contact or Buyer data are processed by those providers as our subprocessors to return a result to you. We do not use this data to train third-party foundation models, and we only process it to provide the feature you invoked. See our AI Terms for more.

How we share personal information

We do not sell your personal information. We share it only as described here:

  • Service providers and subprocessors. We use trusted third-party providers to host, secure, deliver, and operate our products, including cloud infrastructure, database, and storage providers; content-delivery, DNS, and network-security providers; artificial-intelligence and machine-learning providers; payment processors; analytics providers; and email and communications providers. Current providers include Amazon Web Services, Google Cloud (including Gemini), Microsoft Azure, Supabase, Cloudflare, Stripe, and PayPal. They process personal information only on our instructions and under written data-protection terms. The full, current list, with each provider's purpose and location, is at utobo.com/legal/subprocessors.
  • Creators and integrations you choose. If you buy from or interact with a creator's store, we share your information with that creator. If a customer connects a third-party service (such as a payment processor or video-meeting tool), we share the data needed for that service to work.
  • Professional advisors and authorities where required to comply with law, legal process, or to protect rights, safety, and security.
  • Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

International data transfers

We and our service providers operate globally, and personal information may be transferred to and processed in countries other than your own, including the United States. Where we transfer personal information out of the EEA or the UK, we rely on an appropriate safeguard such as the European Commission's Standard Contractual Clauses (and the UK Addendum), the EU-U.S. Data Privacy Framework where a recipient is certified, or another lawful transfer mechanism. You may request a copy of the relevant safeguard by emailing privacy@utobo.com.

Data retention

We retain personal information for as long as your account is active and as needed to provide the products, and thereafter as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Data processed on a customer's behalf is retained for the duration of that customer's subscription and then deleted or returned as described in the Data Processing Addendum and our Terms of Service. You can export or delete much of your data from your dashboard at any time.

Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, network and bot protection, and hosting on established cloud infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. To exercise these rights, email privacy@utobo.com. You may also manage much of your data directly from your account dashboard.

If you are in the EEA or the UK and believe we have not addressed your concern, you have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office). Where your data was collected or uploaded by one of our customers (for example, a creator whose store you bought from), we will refer your request to that customer, who is the controller of that data.

Cookies

We use cookies and similar technologies to run our websites, keep them secure, remember your preferences, and measure performance. You can opt out of analytics cookies through the notice on our websites and control cookies in your browser settings. See our Cookie Policy for details.

Children's privacy

Our products are intended for businesses and adults. We do not knowingly collect personal information from children under the age required by applicable law (for example, 16 in parts of the EEA and 13 in the United States). If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of our products after an update means you accept the revised policy.

Contact us

Questions about this policy or your personal information? Email privacy@utobo.com or legal@utobo.com, or write to utobo, Inc., 800 W El Camino Real Suite 180, Mountain View, CA 94040, USA. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.