Unison Privacy Policy

Who we are

Unison is a workplace operations service provided by Tremiva LLC (“Tremiva,” “we,” or “us”). This policy covers the Unison app, venue dashboard, public request forms, and support. A venue is the business or location using Unison to organize its work.

Your venue decides who joins its workspace, which permissions members receive, and what business records it enters. Tremiva operates and secures the service. For workplace decisions or corrections to a venue’s records, contact your venue administrator. You can also contact us about your information at unison-support@tremiva.com.

Information in Unison

Account and profile information includes your name, sign-in email, account identifier, venue memberships and role. You may add a profile photo, other email addresses, phone numbers, a birthday, and emergency contacts. Passwords are handled by our authentication provider; we do not need your password to provide support.

If you choose Apple or Google sign-in, that provider sends us an account identifier and the name and email information you authorize. Apple may supply a private relay email instead of your usual address. We do not receive your Apple or Google password, and signing in does not give Unison access to your email inbox, contacts, or files.

Workplace information includes the requests, notes, announcements, acknowledgments, task responses, contacts, vendor details, uploaded files, images, and activity history entered into Unison. Depending on the tools used, this can include time-off dates and reasons, time-punch adjustments, uniform sizes and payment schedules, guest contact information, receipts, and order details. Do not include medical records, full payment-card numbers, government identifiers, or other sensitive information that the task does not require.

Public forms send the information you enter to the venue named on the form. They do not give you membership or access to that venue. You can use these forms without a Unison account.

Technical information can include IP addresses, request times, browser or app details, error information, security events, and a device token used to deliver notifications. Our hosting and authentication providers process technical information to deliver and protect the service.

For venue subscriptions, Stripe processes payment details. Unison receives subscription, invoice, payment-status, and billing-contact information needed to manage the subscription. Payment-card entry happens on Stripe’s pages.

How we use information

We use information to create accounts, verify access, deliver the tools you use, share authorized updates within your venue, send account and activity notifications, manage subscriptions, answer support requests, and prevent misuse. We also use technical records to investigate failures and protect the service.

We do not sell personal information or use it for targeted advertising. Unison does not include advertising trackers. We do not use workplace content to train our own AI models.

Who can see it

Information is available to authorized people in your venue according to their role and the tool’s permissions. Team profiles and workplace records are not public directories. PTO requests are available to the requester and members with permission to manage PTO. Venue owners and administrators manage membership and permissions; billing access is reserved for the owner.

We use service providers to run Unison: Supabase for accounts, database and file storage; OpenAI for written-content translation and optional receipt reading; Resend for transactional email; Stripe for subscriptions; Apple for push notifications and optional Apple sign-in; Google for optional Google sign-in; and OpenAI Sites and its hosting infrastructure, including Cloudflare, for the websites. Providers receive information needed for their work and operate under their applicable data-protection terms. They are not given permission by Tremiva to use your workplace information for advertising.

We may access information when needed to provide support, investigate abuse, secure the service, or comply with a legal obligation. We may disclose information where required by law or necessary to protect people and the service. If the business changes hands, information may transfer with the service subject to this policy and any required notice.

Translation and optional AI receipt reading

After you take a receipt photo, Unison asks for permission before sending it to OpenAI to extract a guest name, phone number, address, and order or transaction number. The entire image is sent, so anything visible in the image may be processed. Only share receipts you are authorized to provide, and keep unnecessary information out of the photo.

You can enter the details manually instead. Camera permission alone does not authorize AI processing. Permission for AI receipt reading is saved for your account on that device and can be withdrawn in Unison Settings. Withdrawing permission stops future scans from being sent automatically; it does not recall a photo already sent.

When a note, comment, announcement, task response, or other written workplace content is created or edited, Unison sends that text to OpenAI to identify its language and prepare English and Spanish versions. This happens in the background after saving, including for supported public-form submissions. Text may include personal information written by you or another venue member. Profile details, contact addresses and numbers, images, and files are not sent as part of translation. Built-in labels use prepared language files and do not require an AI request.

Translations are stored with the venue’s content and shared only with people who are allowed to read the source record. Originals remain unchanged. Identical text in the same venue can reuse a translation; changed text receives a new translation. When no remaining source record uses a text version, its prepared translations are removed. Removing a venue removes its translations. Deleting an account does not remove translations of workplace records that the venue retains; those records follow the retention and deletion rules below. Translate Written Content in App Preferences controls whether you see these prepared translations. Turning it off shows originals; it does not stop background preparation or recall text already sent to OpenAI. You can also show the original next to a translation.

We use OpenAI’s API with response storage disabled. That setting does not eliminate provider security logs: OpenAI’s standard API controls may retain content for up to 30 days for abuse monitoring, with exceptions for legal or safety needs. API data is not used to train OpenAI models by default. See OpenAI’s API data controls for its current terms. AI results can be wrong; review the extracted details before saving.

When you save a checkout, its receipt and the details you save become part of the venue record, whether or not you used AI.

OpenAI API data controls

Device permissions and website storage

Camera access is requested when you choose to take a photo. You can deny or revoke it in device Settings and continue using tools that do not require a photo. Selecting an existing file or photo shares the item you choose; it does not give Unison unrestricted access to your device’s files or photo library.

Notifications are optional. You can change available notification types in Unison Settings or turn off notifications in device Settings.

The dashboard uses necessary browser storage to keep you signed in, protect account flows, and remember interface choices. Clearing browser storage or signing out removes local session information. We do not use advertising cookies.

How long information stays

Your account and profile remain while your account is active. Venue records remain while the venue uses the service, unless an authorized user deletes them or an account-deletion process removes associated content. Venues should review and remove records they no longer need.

Account deletion removes your sign-in and profile and removes or redacts content attributable to your account, including authored notes and uploaded attachments. Non-content operational history may remain without your account identity, labeled “Former member.” Records another person independently created about you may need a separate review because we cannot reliably identify every mention in text or a file. Contact us with the venue and enough detail to locate those records; do not email sensitive documents unnecessarily.

Files scheduled for deletion are removed from normal venue access and passed to a retrying storage-deletion process. Backups and provider logs do not disappear at the instant of deletion; they expire under the providers’ retention schedules and are not used to restore deleted content to normal service. We may retain information necessary for a legal obligation, an actual dispute, fraud prevention, or billing records, only for that purpose and as long as needed. We do not treat all workplace history as automatically exempt from deletion.

For Apple-linked accounts, we keep an encrypted authorization token so we can disconnect Apple sign-in when the Unison account is deleted. If Apple is temporarily unavailable, we retry the revocation and remove the token once it succeeds. This does not delete your Apple account.

Our Account & Data Deletion page explains the available deletion routes and how venue ownership affects deletion.

Your choices and requests

You can edit your profile, change notification settings, withdraw permission for AI receipt reading, choose whether to display translated written content, and delete your account in the app or dashboard. You may ask us for access, correction, a copy, or deletion of personal information at unison-support@tremiva.com. Where applicable law provides additional rights, including objection, restriction, portability, or appeal, you can use the same address. We will verify the request, explain any limits, and respond within the applicable legal period. We will not penalize you for making a privacy request.

If your request concerns a venue-controlled employment or business record, we may need to work with that venue. This does not prevent you from contacting us directly. We cannot delete copies someone has independently downloaded or records maintained outside Unison; we can help identify the appropriate contact.

Security, location, and younger users

We use access controls and encrypted connections to protect information. No service can promise perfect security. Keep your credentials private and report suspected unauthorized access promptly.

Tremiva is based in the United States. Our providers may process information in the United States and other countries where they operate. Privacy laws may differ from those where you live. We use provider agreements and applicable safeguards for the services we operate.

Unison is a workplace service, not a service directed to children under 13. Do not create an account or submit information if you are under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and remove it as appropriate.

Changes and contact

We will update the effective date when this policy changes. For material changes, we will provide notice through the service or another appropriate channel. If a change requires new permission, we will ask before using information in that way.

For privacy questions, data requests, or concerns, email unison-support@tremiva.com. Tremiva LLC provides Unison.