Privacy Policy

Last updated: September 4, 2026 Effective date: September 4, 2026

This Privacy Policy explains how Teamworks LLC, a Delaware limited liability company, doing business as Urio ("Urio," "we," "us," or "our"), collects, uses, shares, and protects information when you use our website, application, and related services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy. This Privacy Policy is incorporated into, and should be read together with, our Terms and Conditions.

1. Information We Collect

We collect information you provide directly to us, information generated through your use of the Services, and, where applicable, information received from third-party services you choose to connect to Urio.

Information you provide

Depending on how you use Urio, this may include:

• Name
• Email address
• Account and login information
• Company or business information
• Billing and subscription information
• Property and property-management information
• Content you submit to Urio, including prompts, instructions, and messages sent to our AI features
• Information you provide when communicating with Urio or our support team
• Other information you choose to provide through the Services

Information about guests and other individuals

Urio is used primarily by businesses, such as property managers. In providing the Services, we may process information about individuals other than the account holder — for example, guests, customers, employees, contractors, and service providers of our business customers, including their contact information and communications.

We process this information as a service provider (or "processor") on behalf of, and at the direction of, the business customer. The business customer is responsible for its own privacy practices and legal compliance with respect to that information. If you are a guest or other individual whose information is processed by Urio on behalf of one of our business customers, please direct privacy questions or requests to that business; we will assist them in responding as required by applicable law and our agreements.

Information from connected services

If you connect Urio to third-party services or platforms (for example, a property-management system, calendar, or messaging platform), Urio may receive information from those services as necessary to provide the requested functionality. Depending on the integrations you use, this may include information such as:

• Property and reservation information
• Guest communications and guest contact information
• Calendar information
• Task and operational information
• Contact information
• Messages and other content necessary for Urio to perform requested tasks

We only access information from connected services according to the permissions you authorize and the functionality of the integration. You can review or revoke these permissions at any time in your account settings or through the connected third-party service.

Information collected automatically

When you use our Services, we may automatically collect certain technical and usage information, such as:

• IP address
• Browser and device information
• Operating system
• Pages or screens viewed
• Features used
• Dates and times of activity
• Referring website or source
• Diagnostic and performance information

We may use cookies and similar technologies to operate, secure, analyze, and improve our Services. See Section 9 ("Cookies and Analytics") for more detail.

2. How We Use Information

We may use information we collect to:

• Provide, operate, and maintain the Services
• Create and manage your account
• Process transactions and subscriptions
• Provide customer support
• Process information from integrations you authorize
• Perform tasks and provide AI-powered functionality you request, as described in Section 3
• Personalize and improve the Services
• Understand how users interact with Urio
• Monitor security, prevent fraud, and protect our Services
• Communicate with you about your account, the Services, and important updates
• Send marketing communications where permitted by law and consistent with your preferences
• Comply with applicable legal obligations

3. AI Processing

Urio uses artificial intelligence, including large language models, to provide its functionality. Depending on how you use Urio, information you provide or make available through connected services — including guest communications, property data, and the instructions you give Urio — may be processed by our AI systems, including AI systems operated by third-party providers, to understand requests, generate responses, identify relevant information, and perform tasks on your behalf.

Third-party AI providers

We work with third-party AI and machine-learning providers to power certain features. These providers process data on our behalf under contractual terms that restrict their use of the data to providing services to Urio.

Model training

Urio does not build or train its own AI models, and we do not use your content or your guests' communications to train AI models. Our third-party AI providers are contractually prohibited from using your data to train their models. We may use de-identified and aggregated usage information to understand and improve how the Services perform.

Human review

Urio personnel do not routinely review your content or communications. Limited access by authorized personnel may occur in specific circumstances: to provide support you request, to investigate suspected abuse, fraud, or security incidents, or where required by law. Any such access is subject to access controls and confidentiality obligations.

Accuracy

AI-generated output may not always be accurate or complete. You are responsible for reviewing AI-generated content before relying on it, particularly for guest-facing or legally significant communications.

We use information only as necessary to provide and improve the Services and as otherwise described in this Privacy Policy. We do not sell your personal information.

4. How We Share Information

We may share information in the following circumstances:

Service providers

We may share information with trusted third-party service providers that help us operate Urio, such as providers of:

• Cloud hosting and infrastructure
• Authentication
• Payment processing
• Analytics
• Customer support
• Email and communications
• AI and machine-learning services (see Section 3)
• Security and fraud prevention

These providers are authorized to process information only as necessary to provide services to us, under contractual confidentiality and data-protection obligations.

Integrations you authorize

When you connect a third-party service to Urio, we may exchange information with that service as necessary to provide the integration and perform actions you request.

Legal requirements

We may disclose information if we believe disclosure is reasonably necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Protect the rights, safety, or property of Urio, our users, or others
• Detect, prevent, or address fraud, security, or technical issues

Business transfers

If Urio is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law. We will notify you (for example, by email or a notice on our website) of any change in ownership or use of your personal information, as well as any choices you may have.

5. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These may include encryption in transit, access controls, and regular security reviews.

However, no method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident that compromises your personal information in a manner requiring notification under applicable law, we will notify affected individuals and/or regulators as required by that law.

6. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, taking into account:

• The length of time we have an ongoing relationship with you and provide the Services
• Whether there is a legal obligation to which we are subject (for example, tax, accounting, or record-keeping laws)
• Whether retention is advisable in light of applicable statutes of limitations, litigation, or regulatory investigations

As general guidance: account and billing information is generally retained for the duration of your account plus a limited period thereafter for legal and accounting purposes; content processed through integrations or AI features is generally retained only as long as needed to provide the relevant functionality, unless you or your organization configure a different retention period.

You may request deletion of your account and personal information at any time, subject to the legal and contractual exceptions above.

7. Your Choices and Rights

Depending on where you live, you may have certain rights regarding your personal information, which may include the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of certain processing
• Object to certain processing
• Request a copy of your information in a portable format
• Withdraw consent where processing is based on consent
• Opt out of certain marketing communications, or of the "sale" or "sharing" of personal information where applicable
• Appeal a decision we make regarding your request, where applicable law provides for an appeal

To exercise applicable rights, contact us using the information in Section 14. You may also designate an authorized agent to make a request on your behalf, subject to verification.

If Urio processes your information on behalf of one of our business customers (for example, if you are a guest of a property manager that uses Urio), please direct your request to that business. We will assist them in responding as required by applicable law and our agreements with them.

We may need to verify your identity before fulfilling certain requests, and we will not discriminate against you for exercising any privacy right.

8. Marketing Communications

You may unsubscribe from marketing emails by using the unsubscribe mechanism included in the communication or by contacting us.

Even if you opt out of marketing communications, we may still send transactional or service-related communications, such as account, security, billing, or product notices.

9. Cookies and Analytics

We use cookies, pixels, and similar technologies for purposes that may include:

• Essential — operating the Services, authentication, and security
• Functional — remembering preferences and settings
• Analytics — understanding usage and measuring performance
• Marketing (if applicable) — measuring the effectiveness of our marketing

You may be able to control cookies through your browser settings and, where applicable, through cookie-consent tools provided on our website.

Our Services do not currently respond to browser "Do Not Track" signals.

10. Children's Privacy

The Services are directed to adults and professionals, and are not intended for use by children. Account holders must be at least 18 years old. We do not knowingly allow anyone under 18 to create an account or knowingly collect personal information directly from children through account registration.

In the course of providing property-management functionality, Urio may process limited information about minors (for example, a child's name included in a reservation) that is submitted by an adult account holder or guest. This information is provided and controlled by our business customers and their guests, not collected by Urio directly from children, and is handled in accordance with the rest of this Privacy Policy and any applicable Data Processing Agreement.

If you believe a child has created an account or otherwise provided personal information to us directly, please contact us so we can investigate and take appropriate action, which may include deletion.

11. International Data Transfers

Urio is based in the United States, and our service providers and infrastructure are located primarily in the United States. If you use the Services from outside the United States, your information will be transferred to, processed, and stored in the United States and potentially other countries where our service providers operate.

Where required by applicable law, we use appropriate safeguards for international transfers of personal information.

12. Third-Party Services and Links

The Services may contain links to third-party websites, products, or services, and may integrate with third-party platforms you choose to connect. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service you use or connect to Urio.

13. Automated Decision-Making

Urio's AI features are designed to assist you in performing tasks; they are not intended to make legal or similarly significant decisions about individuals without human involvement. If this changes for a specific feature, we will provide additional information about the logic involved and your rights regarding that processing, as required by applicable law.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Teamworks LLC (d/b/a Urio) Privacy requests: privacy@urio.ai General inquiries: hello@urio.ai Website: www.urio.ai

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will update the "Last updated" and "Effective date" dates above. Where required by law, or where changes are material, we will provide additional notice (for example, by email or an in-product notice) before the changes take effect.

Additional Provisions for Business Customers

If you use Urio on behalf of a company, property-management business, or other organization, you may provide Urio with information about other individuals, including employees, contractors, guests, customers, or service providers. In those circumstances, you are responsible for:

• Ensuring you have the appropriate rights, notices, and permissions to provide that information to Urio and to instruct us to process it (including, where applicable, permission to provide information about minors, such as guests traveling with children); and
• Directing any privacy requests from those individuals to Urio in accordance with your Data Processing Agreement, where one is in place.

Where required, the relationship between Urio and a business customer is governed by a separate Data Processing Agreement ("DPA"), which will control in the event of a conflict with this Privacy Policy as to Urio's processing of personal information on the business customer's behalf.

California Privacy Notice

This notice supplements the Privacy Policy above and applies to California residents, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA").

Categories of Personal Information

In the past 12 months, we may have collected the categories of personal information described in Section 1, which may include identifiers, commercial information, internet or network activity, geolocation (approximate), and — depending on the content you or your guests submit — categories that may qualify as sensitive personal information (for example, precise location or account log-in credentials).

Sources

We collect this information from you directly, automatically through your use of the Services, and from connected third-party services you authorize.

Business/Commercial Purposes

We use and disclose personal information for the business and commercial purposes described in Section 2 and Section 4.

Sale/Sharing

Urio does not sell personal information for money, and does not "share" personal information for cross-context behavioral advertising as defined by the CCPA.

Your Rights

California residents may have the right to know, access, correct, delete, and limit the use of sensitive personal information, and to opt out of sale/sharing, as described in Section 7. You will not receive discriminatory treatment for exercising these rights.

You may submit a request by contacting us at privacy@urio.ai, and you may appeal a denied request by contacting us. Authorized agents may submit requests on your behalf, subject to our ability to verify the agent's authority and your identity.

Retention

See Section 6 for the criteria we use to determine how long we retain each category of personal information.

Other U.S. State Privacy Notices

Residents of certain other U.S. states with comprehensive privacy laws (for example, Virginia, Colorado, Connecticut, Utah, and others as they take effect) may have similar rights to those described above, including rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of certain processing, including targeted advertising, the sale of personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise these rights, contact us at privacy@urio.ai. We will not discriminate against you for exercising these rights, and, where applicable law provides for it, you may appeal a decision on your request.