Privacy Policy
Last updated: May 2026
This Privacy Policy describes how UXtion ("we," "us," or "our") collects, uses, discloses, and protects information when you use our website and services.
1. Information We Collect
Depending on how you use UXtion, we may collect: account and contact information (such as name and email address); business profile information you provide during onboarding (for example, business name, website URL, industry, and billing address); tax-related identifiers where required for invoicing (handled with additional safeguards); payment information processed by our payment provider (we do not store full card numbers on our systems); audit inputs and outputs (such as URLs you submit, generated reports, and related metadata); and technical and usage data (such as device, browser, IP address, and logs) to operate and secure the Service.
2. How We Use Your Information
We use information to provide, maintain, and improve the Service; authenticate users; process subscriptions and invoices; run and deliver audits and reports; communicate about your account, security, and product updates; detect and prevent fraud, abuse, and illegal activity; comply with law; and enforce our Terms. We do not sell your personal information.
3. Third-Party Services
We use trusted processors and integrations to operate UXtion, including where applicable: Stripe for payments and billing events; Google OAuth for optional sign-in; Anthropic (or comparable AI providers) to generate audit analysis when you run audits; and Vercel and related infrastructure for hosting, storage, and edge delivery. These providers process data under their own terms and privacy policies and only as needed to perform services on our behalf.
4. Data Security
We implement administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, access controls, and least-privilege practices for production systems. No method of transmission or storage is 100% secure; if we become aware of a breach that affects you where notification is required, we will follow applicable law.
5. GDPR Rights (EU users)
If the GDPR applies to you, you may have rights to access, rectify, erase, restrict processing, object to certain processing, and data portability, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at the email below. For deletion requests, we will process them consistent with our retention schedule and legal obligations, including completing purge within 30 days of account deletion where applicable.
6. CCPA Rights (California residents)
California residents may have additional rights under the CCPA/CPRA, including to know categories of personal information collected, sources, purposes, disclosures, and retention; to request deletion subject to exceptions; to correct inaccurate personal information; and to opt out of certain sharing (we do not sell personal information). You may designate an authorized agent where permitted. We will verify requests as required by law.
8. Data Retention
We retain information for as long as needed to provide the Service and for legitimate business purposes (such as security, backups, and legal compliance). After you delete your account, we retain certain records only as long as necessary, and generally complete deletion of personal data associated with your account within 30 days after account deletion, subject to legal holds or regulatory requirements that require longer retention.
9. Data After Cancellation
When you cancel your subscription:
- 90-day grace period: Your data stays safe. You can reactivate anytime before permanent deletion to restore full access to your audit history.
- After 90 days: We delete your personal data and audit reports from our systems, except where we must retain records for legal compliance.
- Anonymous insights: Before deletion, we may use anonymized, aggregated audit patterns (with your identity completely removed) to improve our AI. This data cannot be traced back to you or your business.
- Billing data: Managed by Stripe per their privacy policy.
See also our Terms of Service — Privacy and Data for the full cancellation data policy.
10. Contact
For privacy questions or requests, contact us at privacy@uxtion.ai.