Privacy Policy

Information we collect

Contact form: name, email, current website, the plan you are interested in and your message. They reach us by email through Resend.

Sign-up and payment: the answers to the pre-checkout questions, and the details you enter on Stripe Checkout (name, business name, email, billing address, tax ID if provided). Card details are handled only by Stripe; we never see or store them.

Briefing: the answers you send after purchase (company, contact, content, brand, domain and timeline). They reach us by email through Resend. The draft stays in your browser until you send it.

Free security check: the app address, your email, your answers about the app and the authorization you accept, together with the date and time, your IP address and browser, kept as the record of that authorization. They reach us by email through Resend and the record is stored with Upstash.

Spam protection: the contact and security check forms use Cloudflare Turnstile, which looks at technical signals from your browser to tell people from automated traffic. Our server also keeps short-lived counters, keyed by a one-way hash of the IP address, to limit repeated submissions.

Preferences: your language and theme choices are stored in your own browser (local storage) and never sent to us. Your cookie choice is stored the same way, for 12 months.

Location and prices

To show prices for your region, our hosting provider (Vercel) tells our server the country of your IP address. We use it only to choose the price table and to know whether your region requires consent before analytics: the country is not stored. Only the results are kept, in two functional cookies, each for one day: uz_market, with the region (United States and other countries, Europe or Japan), so prices appear without an extra request; and uz_cr, which only says whether consent is needed (1) or not (0).

Analytics

We use Vercel Web Analytics and Speed Insights to measure visits and performance in aggregate. They set no cookies and do not identify you individually.

Cloudflare, which delivers our domain, also counts page views and load times in aggregate with Cloudflare Web Analytics. It runs without your consent because it sets no cookies, uses no local storage and does not fingerprint you through your IP address, browser or any other data. It records the page visited, the referring site, your browser and device type and the approximate country, and does not identify you individually.

We also use Google Analytics 4 to understand which pages and steps help visitors. In the European Economic Area, the United Kingdom and Switzerland, and whenever we cannot tell where you are, its cookies (such as _ga, kept for up to 2 years) are set only if you accept them in the cookie notice; before you choose, or if you decline, Google receives only signals without cookies or identifiers, such as that a page was viewed, your browser type and approximate region, used for aggregate statistics. Everywhere else, Google Analytics is on by default and you can turn it off at any time.

If your browser sends a Global Privacy Control signal, we treat it as turning Google Analytics off, unless you choose otherwise in the cookie notice. Google Analytics 4 does not log or store IP addresses. We do not use advertising features, Google signals, ad personalization or session recording, and we do not sell or share your data for advertising. You can change your choice at any time with “Cookie settings” at the bottom of every page; turning analytics off deletes its cookies.

How we use your information

To reply to your messages, process payments, deliver the services you bought, send service emails (such as receipts and onboarding) and meet legal and tax obligations. We do not sell your data or use it for advertising.

Service providers

Stripe (payments, invoices and billing), Resend (service emails, including the contact form), Vercel (hosting and analytics), Google (Google Analytics; in the EEA, the UK and Switzerland, cookies only after your consent), Cloudflare (delivery of our domain, Web Analytics and Turnstile, the spam check on the forms) and Upstash (records of security check authorizations and the submission counters). Each processes data only to provide its service to us. Fonts and every other file are served from our own domain: no font CDN and no social widget. The third-party scripts are Google Analytics (cookies only with your consent in the EEA, the UK and Switzerland; you can turn them off anywhere), Cloudflare Web Analytics (no cookies) and Cloudflare Turnstile, loaded only when a form comes into view.

International transfers

These providers may process data in countries other than yours, including the United States. Transfers are limited to what is needed to provide the service.

Retention

We keep messages for as long as needed to reply and keep a record of the conversation. Payment and invoice records are kept for the period required by tax law.

Legal basis

Depending on your location (for example under the GDPR or the LGPD), we process data to take steps before a contract and to perform it, to meet legal obligations, and based on our legitimate interest in replying to you and improving the site. In the EEA, the United Kingdom and Switzerland, Google Analytics cookies are used only with your consent, which you can withdraw at any time; elsewhere we use them based on our legitimate interest in improving the site, and you can turn them off at any time with “Cookie settings”.

Your rights

You can ask to access, correct or delete your personal data, or object to some uses. Send your request to hello{'@'}uranoz.co or through the contact form and we will reply within 30 days.