Terms & Privacy
This page is shown before you buy anything. Every purchased copy also carries these terms in its LICENSE.md, and the included first-time setup records your explicit "I AGREE" before it configures the software.
Terms of sale — sold as-is
- Subscription — cancel anytime. HERO is sold as a monthly subscription. Cancel whenever you like and no further charges are made; access runs to the end of the paid month. Months already paid are not refunded — the free 7-day trial is the evaluation period, so try everything before you subscribe. (Nothing here limits rights your local law grants and does not allow to be waived.)
- Sold as-is, no guarantees. This software is provided exactly as it is, with no warranty of any kind — no promise that it is error-free, fit for any particular purpose, or always available. You use it at your own risk.
- Your data is your responsibility. Keep backups (a mirror script is included). The seller is not liable for lost, corrupted, or exposed data, or for anything the AI reads, writes, or does inside your folder.
- Nothing it says is advice. Output from any mode — trading, budgeting, planning, anything — is not financial, legal, medical, or professional advice. Decisions you make from it are yours alone, and the seller is not liable for their results.
- Third-party services. The AI behind HERO is a third-party service. On a bring-your-own plan you may connect whatever AI service or subscription you choose; whichever you use, its terms are its own — between you and that provider, and you agree to adhere to them. The seller doesn't control any third-party provider's pricing, limits, or availability. On AI-included plans the underlying AI likewise runs on a third-party service.
- Liability cap. If liability is found despite the above, the maximum remedy is a refund of the purchase price.
- Governing law & disputes. These terms are governed by the laws of [SELLER'S STATE], without regard to conflict-of-law rules. Before any formal action, both sides agree to try in good faith to resolve the matter by email first. Any dispute not resolved that way will be handled in the state or federal courts located in that state. If any part of these terms is held unenforceable, the rest still applies.
Privacy Policy
Last updated 2026-07-07. This policy explains what information Ultraultima ("we") collects through this website and the HERO product, how we use it, who we share it with and how, and how we protect it. The product itself is local-first: your brain lives on your own drive, and its contents are never sent to us.
1. Information we collect
- You give us: your email address (launch-notify, trial signup, purchase, or contact form); your name and optional phone if you use the contact form; and the account password you set (see security below).
- Created when you buy or trial: a license key, its activation records (a random per-install identifier we generate — not your hardware, name, or location), and the account we create for you.
- Collected automatically for security: your IP address and browser user-agent on form submissions (abuse and spam defense) only. We use no cookies, no analytics, no trackers, and load no third-party scripts on any page.
- Payment details: collected by Stripe at checkout — we never receive or store your card number.
2. How we use it
- To deliver what you asked for: send your license key, run activation and periodic license checks, provide product updates, and reply to you.
- To keep your account and record that you accepted these terms.
- To protect the service against fraud and abuse.
- We do not sell, rent, or share your information for advertising, and we do not use it for anything beyond the purposes above.
3. Who we share it with, and how
We disclose the minimum necessary to these service providers ("processors"), each only for the function named, by encrypted (HTTPS/TLS) transmission to their APIs — never by public posting, sale, or bulk transfer:
- Stripe, Inc. — payment processing and merchant-of-record; receives your email and payment details and stores your terms-acceptance record. Governed by Stripe's privacy policy.
- Cloudflare, Inc. — website hosting and encrypted data storage (Cloudflare KV); holds your account record, license data, and form submissions.
- Resend — transactional email delivery; receives your email address and message content solely to send your key and our replies.
We may also disclose information if required by law (e.g. a valid legal request), or to protect our rights or users' safety. If the business is ever transferred, this policy travels with the data.
4. How we protect it
- All traffic to this site and all transmission to our processors is encrypted with HTTPS/TLS.
- Account passwords are never stored in readable form — only a salted PBKDF2-SHA-256 hash. We cannot see your password.
- Secrets and API keys are held in an encrypted secrets store, never in our website code.
- Stored data sits in access-controlled Cloudflare infrastructure; contact/form submissions are deleted automatically after 90 days.
- We practice data minimization — we collect only what a feature needs (for example, license checks send only your key and the random install id, nothing else).
- No method is perfectly secure, but we take commercially reasonable measures to safeguard your information.
5. Your choices and rights
- Access or deletion: email us and we'll delete your form records and, on request, your account and license data (note: deleting an active license disables the product on your devices).
- Children: the product is not directed to anyone under 16, and we do not knowingly collect their information.
Contact
Questions, access, or deletion requests: [email protected]