Privacy Policy

1. Scope

This Privacy Policy applies to:

• Website visitors
• Registered users
• Customers (individuals and businesses)
• Agencies using UiChemy for client data

It does not apply to third-party services.

2. Information We Collect

We collect the following categories of data:

A. Account Information

• Name
• Email address
• Company name (if provided)
• Account credentials

B. Billing Information

Payments are processed by Paddle.com (Merchant of Record).

We do not store full credit card details.

Paddle may collect:

• Billing address
• Payment method details
• Transaction history

C. Usage Data

• IP address
• Device/browser information
• Log data
• Interaction data
• Feature usage metrics

D. Content & User Data

• Files uploaded
• Project data
• AI prompts and outputs
• Stored assets

Some prompts may be stored for version history and functionality. Some temporary prompts may not be stored.

E. Analytics Data

We use:

• Plausible Analytics
• Mixpanel

These services may collect anonymized usage data.

3. How We Use Information

We use data to:

• Provide and operate the Service
• Process transactions
• Improve functionality
• Maintain security
• Provide customer support
• Send service-related communications
• Comply with legal obligations

We may use aggregated, anonymized data for product improvement.

We do not sell personal data.

We do not use user data for AI training except in anonymized form to improve system performance.

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process data under:

• Contract performance
• Legitimate interest
• Consent (where required)
• Legal obligations

5. International Data Transfers

UiChemy is hosted across:

• United States
• European Union
• India

By using the Service, you acknowledge that your data may be processed in these jurisdictions.

We implement commercially reasonable safeguards for cross-border transfers.

6. Data Retention

We retain personal data:

• For the duration of the account
• For legal compliance purposes
• As required for security and backup

Unverified inactive accounts may be deleted 12 months after signup.

After cancellation:

• 30-day export window
• Data may be deleted thereafter
• Backup copies may persist for a limited period

7. Your Rights

Depending on jurisdiction, you may have rights to:

• Access your data
• Correct inaccurate data
• Delete your data
• Request portability
• Restrict processing
• Object to processing
• Withdraw consent

California residents may request disclosure under CPRA.

To exercise rights, email: [email protected]

We may verify identity before processing requests.

8. Agencies & Client Data

If you use UiChemy to process client data:

• You are the data controller
• We act as data processor

A Data Processing Addendum (DPA) is available upon request.

9. Subprocessors

We may use third-party service providers including:

• Paddle (billing)
• Plausible (analytics)
• Mixpanel (analytics)
• OpenAI (AI services)
• Google (AI services)
• Anthropic (AI services)
• Hetzner (cloud hosting)
• DigitalOcean (cloud hosting)

We may update this list from time to time.

10. Security

We implement commercially reasonable administrative, technical, and organizational safeguards.

However, no system is completely secure. We do not guarantee absolute security.

11. Cookies

We use cookies and similar technologies.

A separate Cookie Policy explains details.

You may manage preferences via our cookie consent banner.

12. Children

The Service is not intended for individuals under 18.

We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Privacy Policy.

We will update the version date.

Material changes may be communicated via email or in-app notice.

14. Contact Us

For privacy inquiries:

[email protected]