Privacy policy.

What we collect, why, and your rights.

Beta — this policy is provided in good faith and should be reviewed by legal counsel before launch.

Who we are

Ultimath (“we”, “us”) operates the Ultimath math-evaluation API and MCP server at ultimath.ai. For any privacy question, contact contact@ultimath.ai.

What we collect

  • Account data — your email address, chosen username, and a one-way hash of your password. We never store your password in clear text.
  • API keys — we store only a hash of each key; the key itself is shown to you once and cannot be recovered by us.
  • Usage metrics — timestamps, the endpoint called, and response status, associated with your account, to operate the service and prevent abuse.
  • Technical data — standard request metadata (e.g. IP address) processed transiently by our hosting/CDN layer for security and delivery.
  • To provide the service (performance of a contract) — authenticate you, issue keys, evaluate your requests.
  • Security & abuse prevention (legitimate interest) — rate limiting, fraud and misuse detection.
  • Beta improvement (legitimate interest) — aggregate, non-identifying usage trends to improve the product.

Retention

We keep account data while your account is active. Usage metrics are kept only as long as needed to operate and secure the service, then deleted or aggregated. Delete your account and we erase your personal data, save where law requires us to keep it.

Sharing

We do not sell your data. We use infrastructure providers (hosting, TLS) that process data on our behalf under appropriate safeguards. We disclose data only where legally required.

Cookies

We use a single functional session_token cookie to keep you signed in. No advertising or third-party tracking cookies.

Your rights (GDPR)

If you are in the EU/EEA you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data. To exercise any of these, email contact@ultimath.ai. You may also lodge a complaint with your local supervisory authority.

Changes

We may update this policy as the product evolves; we will reflect the date above and, for material changes, notify account holders.

Last updated: June 2026