Ultineo Studio privacy policy

Last updated: 3 November 2026

Ultineo Studio, the Vibe coding line of Ultineo, helps teams define, build and operate business applications. It is operated by EGOLEAP INTERNATIONAL LTD., company number 2289501, registered at RM 05 2/F KINOX CENTER, 9 HUNG TO ROAD, KWUN TONG, KOWLOON, HONG KONG. The company is responsible for the personal data it uses to answer Vibe coding enquiries, operate Ultineo Studio and manage its own customer accounts. Contact us at contact@owoxo.ai.

This policy covers people who contact us about Vibe coding through the Ultineo website, ultineo.com, and customers using Ultineo Studio at studio.ultineo.com to prepare and manage their projects. The Ultineo e-commerce service has its own Privacy policy. Personal data means information about an identified or identifiable person. Reading this policy or creating an account does not constitute consent to every possible use of your data.

1. What data we collect and why

1.1 Website visits

The Ultineo Studio pages are part of the Ultineo website. Website requests provide technical information such as the requested address, IP address, browser information and request time. This information supports page delivery, service diagnostics, security and understanding the use of the website. The website also remembers your language and cookie preferences. Visits to the website, including its Vibe coding pages, are handled as described in the Ultineo Privacy policy; the Cookie policy lists the cookie names, purposes and durations and explains how to change your choices.

1.2 Contact and support

The Ultineo contact form asks you to choose a line, then for your name, email address and message. Phone number and subject are optional. Before a request is recorded, the email address and any phone number are checked by a verification service. When you choose Vibe coding, your submission is recorded and sent to the Ultineo Studio contact mailbox so that the team can answer, clarify the project and follow up on the conversation. Name, email and message are needed to process the form. Please include only information relevant to your request.

1.3 Accounts and access

An Ultineo Studio account associates your email address and account details with your access to the service. Authentication and account-management records support sign-in, recovery, access control and communication about the account. Information you provide in account or company settings may include your name, company identity, address, country and language.

1.4 Projects and AI work

We process the information you submit to prepare and build an application: the business brief, intended users, modules, features, page references, change requests, clarification answers and files or media supplied for the project. Requests and generated results can contain personal data if you include it. Project history, versions, task status, token counts and recorded work time support construction, progress tracking, diagnostics and usage calculation.

AI services and development tools can receive the project content needed to carry out a requested analysis or change. Avoid supplying passwords, payment credentials or personal information unrelated to the work. Review generated results before using or publishing them. The data needed by a particular external connection depends on the connection configured for your project.

1.5 Offers, usage and billing

For paid services, we process the customer and company identity, billing address, selected offer, usage, amounts, payment status and invoices needed to administer the service and its charges. When a payment service is used, payment information is handled through that service's payment flow. The information recorded for account billing is distinct from the cookies used by the public website.

1.6 Data in your own application

Your project may collect information about your employees, users or customers. As the application operator, you decide the purposes and information requested by that application and must inform the people concerned. Ultineo Studio processes the hosted project information to provide the agreed service. A person asking about data collected by a customer's application should contact that application's operator first; we can assist that operator with the request.

Where the GDPR applies, responding to a request for an offer and providing the purchased service rely on steps requested before a contract or performance of the contract. Account protection, incident investigation and essential service diagnostics rely on the legitimate interest in operating a reliable, secure service; internal audience counting relies on the legitimate interest in understanding the use of our own website. Both are subject to the rights of the people concerned. Accounting and legally required records rely on the applicable legal obligations. Optional tracking, if introduced, requires the relevant consent and remains subject to the choices described in the cookie policy.

2. How we protect your data

The website uses HTTPS. Account access controls, protected service credentials and permissions help limit access to the information needed for each role. Cookie choices are signed and scoped to the serving host. We use technical and organisational measures appropriate to the information and risks; no internet service can promise absolute security.

Protect your account credentials and sign out on shared devices. If you believe an account or project has been compromised, contact us promptly with the affected account or project reference, without sending passwords.

3. Recipients and hosting

3.1 Service providers and project connections

Information may be accessed by authorised team members and providers involved in the requested service: hosting, email delivery, AI processing, payment handling and external connections configured for a project. The categories of information shared depend on the task and service used. A link to another website does not by itself authorise that website to receive your project records. External services can have their own privacy notices.

We may disclose information where required by law or necessary to respond to a lawful request, establish or defend a legal claim, or investigate abuse affecting the service or its users.

3.3 Locations and transfers

Ultineo Studio infrastructure uses OVHcloud. A project's hosting region depends on the environment and hosting configuration selected for that project. EGOLEAP INTERNATIONAL LTD. is based in Hong Kong, and service providers or project connections may operate in other countries. We do not represent that selecting a hosting region prevents all access from another country. Contact us for the locations, recipients and any applicable transfer arrangements relevant to your project.

4. How long information is kept

Retention depends on the information and its purpose:

  • Contact messages are kept while handling the request and for relevant follow-up or evidence of the exchange.
  • Account and project records are kept for the period needed to provide the service, maintain the project history and deal with account closure or an ongoing dispute.
  • Invoices, payment status and accounting records are retained for the periods required by the applicable accounting and legal obligations.
  • Technical and security records are retained for the period needed to diagnose incidents, protect the service and handle related claims.
  • Website cookies are kept for the durations listed in the Cookie policy.

These criteria do not mean that every record has the same lifetime. A deletion request is assessed against the service purpose and any requirement to retain particular records. Ask us about the retention applicable to a specific account, project or type of information.

5. Your rights and requests

Hong Kong's Personal Data (Privacy) Ordinance provides rights of access and correction. Where the EU or UK GDPR applies, you may also have rights to erasure, restriction, objection and portability, subject to the conditions of the applicable law. When processing relies on consent, you can withdraw that consent without affecting the lawfulness of earlier processing. Cookie choices can be changed through Cookie preferences in the footer.

Send requests to contact@owoxo.ai, use the contact form, or write to EGOLEAP INTERNATIONAL LTD. at the registered address above. Specify the account email or project reference and the information or action concerned. We may ask for proportionate additional information when needed to confirm your identity; please do not send an identity-document copy unless it is requested through an appropriate channel.

We respond within the period required by the applicable law and explain any limitation that prevents the requested action. You can complain to the relevant data-protection authority, including the Hong Kong Privacy Commissioner, the CNIL in France or the ICO in the United Kingdom, according to your situation.

6. Changes to this policy

Changes to the service or its processing can require an update to this notice. The date above identifies the published version. Updating the policy does not itself provide consent for a new optional purpose.

Contact

For questions about privacy or personal data, contact EGOLEAP INTERNATIONAL LTD. at contact@owoxo.ai or through the contact form. Read the cookie policy for the website's preference controls.