Privacy Policy

Last updated: May 11, 2025

This Privacy Policy describes how UX Canvas ("we", "our", or "us") collects, uses, and shares your personal information when you use our website and application (collectively, the "Service").

1. Information We Collect

1.1 Personal Information

We may collect the following types of personal information:

• Account Information: When you create an account, we collect your name, email address, and password.
• Billing Information: If you subscribe to our paid services, we collect payment information, which may include credit card details, billing address, and phone number.
• Profile Information: Information you provide in your user profile, such as a profile picture or bio.
• User Content: Information you provide when using our Service, including project descriptions, design specifications, and chat messages with our AI assistant.

1.2 Usage Information

We automatically collect certain information about your use of our Service, including:

• Log Data: Information that your browser sends whenever you visit our Service, such as your IP address, browser type, browser version, pages visited, time and date of your visit, and time spent on each page.
• Device Information: Information about the device you use to access our Service, including hardware model, operating system, and unique device identifiers.
• Usage Patterns: Information about how you interact with our Service, including designs created, features used, and interactions with the AI assistant.
• AI Interactions: Messages, prompts, and other interactions you have with our AI design assistant.
• Email Engagement: Information about how you interact with emails we send, including open rates, click-through rates, and response actions.

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities and to track usage of our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

2. How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, maintain, and improve our Service
• To process and complete transactions, and send related information including confirmations and invoices
• To send technical notices, updates, security alerts, and support messages
• To respond to your comments, questions, and requests
• To personalize and improve your experience with our Service
• To develop new products, services, features, and functionality
• To monitor and analyze trends, usage, and activities in connection with our Service
• To train and improve our AI models to provide better design suggestions and UI generation
• To detect, investigate, and prevent fraudulent transactions and other illegal activities
• To send you marketing communications, newsletters, and product updates about our services (subject to your consent where required by law)
• To comply with legal obligations

2.1 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) or United Kingdom, we rely on the following legal bases to process your personal information:

• Contract: Processing necessary for the performance of our contract with you (providing our Service).
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our Service, preventing fraud, and ensuring network security.
• Consent: Processing based on your specific consent, such as sending marketing communications or processing certain types of cookies.
• Legal Obligation: Processing necessary to comply with our legal obligations.

2.2 Marketing Communications

When you create an account with us, we may add your email address to our communications list using our email service provider (Loops.so). We do this based on our legitimate interest to educate you about our products and services, or with your consent where required by applicable law.

You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email we send
• Updating your communication preferences in your account settings
• Contacting us using the information in the "Contact Us" section

3. Sharing Your Information

We may share personal information as follows:

3.1 Service Providers

We may share your personal information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. These may include payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

3.2 Analytics Services

We use Google Analytics to help analyze how users use our Service. Google Analytics uses cookies and similar technologies to collect information such as how often users visit the Service, what pages they visit, and what other sites they used prior to coming to our Service. We use the information we get from Google Analytics only to improve our Service.

Google Analytics collects the IP address assigned to you on the date you visit the Service, but not your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information.

Google's ability to use and share information collected by Google Analytics about your visits to our Service is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to the Service by disabling cookies on your browser, or by installing the Google Analytics opt-out browser add-on available at: https://tools.google.com/dlpage/gaoptout.

3.3 AI Service Providers

We use third-party AI services (including Anthropic, Google, and OpenAI) to power our design generation features. When you interact with our AI assistant, your prompts and design requests are processed by these services. These providers may receive and process your requests according to their own privacy policies.

3.4 Email and Marketing Service Providers

We use Loops.so as our email service provider to manage our email communications. When you sign up for our Service, your email address and name may be shared with Loops.so for this purpose. Loops.so processes this information according to their own privacy policy and our data processing agreement with them.

3.5 Public Projects

If you choose to make your projects public or unlisted, certain information about your projects, including design screenshots, descriptions, and your username, will be visible to other users of the Service or anyone with the link.

3.6 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

3.7 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

4. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

5. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please note that no electronic transmission or storage of information can be entirely secure. We cannot guarantee that the security measures we have in place will never be defeated or fail, or that those measures will always be sufficient or effective.

6. International Transfers

Your information, including personal information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including personal information, to the United States and process it there.

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to take necessary actions.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: You can request copies of your personal information.
• Correction: You can ask us to correct inaccurate personal information.
• Deletion: You can ask us to delete your personal information in certain circumstances.
• Restriction: You can ask us to restrict the processing of your personal information.
• Data Portability: You can ask us to transfer your personal information to another organization or to you.
• Objection: You can object to our processing of your personal information.
• Withdraw Consent: Where we process your information based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within the timeframe required by applicable law.

8.1 GDPR Rights for European Users

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent laws, including:

• The right to be informed about our collection and use of your personal data
• The right to access the personal data we hold about you
• The right to have inaccurate personal data rectified
• The right to have your personal data erased (the "right to be forgotten")
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing of your personal data
• Rights in relation to automated decision making and profiling
• The right to lodge a complaint with your local data protection authority

9. California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). These rights include:

• The right to know what personal information we collect about you and how we use and share it
• The right to delete personal information we collect from you
• The right to opt-out of the sale of your personal information
• The right to non-discrimination for exercising your CCPA rights

To exercise your rights under the CCPA, please contact us using the information provided in the "Contact Us" section.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: mike@flamelab.io

11.1 Data Protection Officer

For users in the European Economic Area, you may contact our Data Protection Officer at:

• By email: support@uxcanvas.ai