Privacy Policy

1. Data We Collect

We collect the following types of information when you use UXOverflow:

• Account information: Name, email address, and authentication data when you sign up.
• Uploaded content: Design files, screenshots, and URLs you submit for analysis. When you use our Figma plugin, this includes the frames, components, and instances you select — rendered as images plus a structured layer summary (layer names, types, positions, colors, typography, spacing, and layout).
• Usage data: How you interact with the Service, including pages visited and features used.
• Payment information: Billing details processed through our payment provider (we do not store full card numbers).

2. How We Use Your Data

• To provide and improve the UXOverflow service, including AI-powered analysis.
• To process payments and manage your account.
• To communicate with you about your account, updates, and support requests.
• To detect and prevent fraud, abuse, and security issues.
• To comply with legal obligations.

3. Third-Party Services

We use the following third-party services to operate UXOverflow:

• Supabase: Database hosting, authentication, and file storage. Your data is stored securely on Supabase infrastructure.
• AI providers (Google Gemini, Anthropic Claude): Power the AI analysis engine. The designs you submit — including frames and layer data imported from Figma — are sent to these providers for processing. They may process this data according to their respective API terms and do not use it to train their models.
• Dodo Payments: Handles payment processing. Your payment information is managed by Dodo Payments and subject to their privacy policy.

4. Figma Plugin

Our Figma plugin only reads data from your Figma file when you explicitly select frames and start an analysis — it never accesses your file in the background. For each selected frame, component, or instance, the plugin reads:

• A rendered image of the frame (exported as a JPG).
• A structured summary of the layer tree — layer names, node types, positions and sizes, colors, typography, spacing, and layout properties.

This data is sent over HTTPS to our backend, stored under your account, and used solely to generate your UX analysis (including being passed to the AI providers listed above). It is never shared with other users. The plugin stores only your session token and last-used project/flow locally in Figma’s sandboxedclientStorage, which is inaccessible to other plugins. You can delete uploaded designs and their analysis at any time from your dashboard.

5. Cookies

We use essential cookies to maintain your authentication session and remember your preferences. We do not use third-party tracking cookies or advertising cookies. Essential cookies are required for the Service to function and cannot be disabled.

6. Data Retention

We retain your account data for as long as your account is active. Uploaded designs and analysis reports are retained until you delete them or close your account. When you request account deletion, your account is deactivated immediately and scheduled for permanent deletion after a 30-day grace period. During this window you may cancel the deletion by contacting support. After the 30-day period, all personal data — including your profile, projects, uploaded designs, analysis reports, and subscription records — is permanently and irreversibly deleted. We may retain anonymized, aggregated data for analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Delete your account directly from Settings → Security. Your account will be deactivated immediately and permanently deleted after 30 days.
• Export: Request an export of your data in a portable format.

To exercise any of these rights, contact us at the email below.

8. Contact

For privacy-related questions or requests, please contact us at uxoverflow@gmail.com.