Cookie Policy

This Cookie Policy explains how Orqestra LLC (operating as Unify) uses cookies and similar technologies on our website at weunify.io and in our mobile applications. It is a companion to our Privacy Policy. If anything is unclear, email support@weunify.io.

1. What is a cookie?

A cookie is a small text file that a website saves on your device (computer, phone, tablet) when you visit. The next time you come back, the site can read that file to remember things like whether you're signed in, your language, or what was in your cart on another site. "Similar technologies" — things like local storage, session storage, web beacons, and device identifiers — work the same way but use slightly different mechanisms. For simplicity, we use the word "cookies" throughout this policy to cover all of them.

Cookies can be set by the site you're visiting ("first-party") or by a third party whose code is embedded on that site ("third-party" — for example, a payment processor or an error-monitoring service).

2. Categories of cookies Unify uses

We group cookies by what they do. Essential cookies are required for the platform to work and cannot be turned off. All other categories are optional and can be controlled through our cookie banner or your browser settings.

Essential (required for the platform to work)

These cookies are strictly necessary. Without them, you can't sign in, submit forms safely, or use the site at all. They cannot be disabled through our banner.

• Authentication session cookie (Supabase Auth): keeps you signed in as you move between pages. Without this, every click would log you back out.
• CSRF token: a short-lived random value used to protect form submissions and API requests from cross-site request forgery attacks.
• Language / locale preference:remembers the language you selected so we don't re-detect it on every page load.

Functional (improve experience but optional)

These remember small preferences and in-progress work so you don't lose data when you refresh. You can turn them off without breaking the site, but parts of the experience will feel less polished.

• Onboarding-progress saved form (sessionStorage): if you start filling out the contractor or company onboarding form and refresh the page, we restore what you'd typed so far. Cleared automatically when you close the tab.
• Toast notification preferences:remembers whether you've dismissed certain in-app banners so we don't show them again.

Analytics / error monitoring (optional)

We use one third-party service in this category to detect bugs and crashes. It is opt-in via the cookie banner.

• Sentry (error tracking + session replay): when a page crashes or throws an unexpected error, Sentry records the JavaScript console output and a short replay of the DOM mutations leading up to the error so we can reproduce and fix it. Session replays mask sensitive form fields by default and are anonymized — we do not capture keystrokes in password fields, payment fields, or your government ID uploads. We use this data only to diagnose bugs.

Third-party SDKs that may set cookies

Some features rely on third-party services whose code runs on our pages. When you use those features, the third party may set its own cookies, which are governed by that party's privacy and cookie policies — not ours.

• Stripe (payment elements): when you enter payment information, Stripe loads its secure payment widget inside our checkout pages and sets cookies for fraud prevention and session continuity.
• Paddle (subscription checkout):when you subscribe to Unify Pro, Paddle's checkout overlay loads on our page and sets cookies for the duration of the transaction. Paddle is the merchant of record for Unify Pro.
• Stytch (phone OTP): phone-number verification calls are server-side only. Stytch does not set browser cookies through our integration.
• Checkr (background checks):the background-check disclosure and consent form is hosted on Checkr's own domain. Cookies set on that page are Checkr's, not ours, and are covered by Checkr's privacy policy.

3. How to control cookies

You have several ways to control what gets set:

Our cookie banner

The first time you visit weunify.io, you'll see a cookie banner at the bottom of the page. You can accept all optional categories, reject all optional categories, or customize by category. Your choice is saved on your device and we honor it on subsequent visits. You can change your choice at any time through the "Your Privacy Choices" link in our footer.

Browser controls

Every modern browser lets you view, block, or delete cookies on a per-site or global basis. Blocking essential cookies will prevent you from signing in. Brief instructions:

• Chrome: Settings → Privacy and security → Third-party cookies (or Cookies and other site data).
• Safari: Safari menu → Settings → Privacy → Manage Website Data.
• Firefox:Settings → Privacy & Security → Cookies and Site Data.
• Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data.

Global Privacy Control (GPC)

Unify honors the Global Privacy Control signal. If your browser or a browser extension sends a GPC header on a request to our site, we treat it as an opt-out of all optional analytics and any third-party data "sharing" for cross-context behavioral advertising, automatically — you do not need to also interact with our cookie banner.

4. State privacy law disclosures (CCPA / CPRA and others)

Unify does not"sell" personal information in exchange for money under any state privacy law. We do not run advertising networks, behavioral ad targeting, or data-broker relationships.

Under the California Privacy Rights Act (CPRA), the use of certain third-party analytics services may technically qualify as "sharing" personal information for cross-context behavioral purposes. Even though our analytics is limited to error monitoring and not advertising, we treat it conservatively as "sharing" for transparency. The same is true for residents of Colorado, Connecticut, Texas, and other states with similar laws.

To opt out, use the "Your Privacy Choices" link in our website footer, decline analytics in the cookie banner, or send a GPC signal from your browser. Your opt-out is honored on the device and browser you set it from.

5. Questions

If you have questions about this Cookie Policy or how to exercise your choices, email support@weunify.io. For broader questions about how we handle your data, see our Privacy Policy.