Privacy Policy

1. Who we are

This Privacy Policy explains how Uxory LLC ("Uxory", "we", "us" or "our"), a limited liability company organized in the State of Wyoming, USA with its registered address at 30 N Gould St Ste N, Sheridan, WY 82801, United States, collects, uses, discloses and protects personal information when you visit uxory.co (the "Website"), contact us or use our services.

Uxory LLC is the business (and, for visitors in Europe and the UK, the controller) responsible for the personal information described in this policy.

When we handle personal information on behalf of a client as part of a project, for example the customer data in a website or app we build or host for them, the client is responsible for that data and we act as its service provider or processor under our agreement with it. This policy does not cover that data; the client's own privacy policy does.

This policy includes our Notice at Collection for California residents and information for visitors in the European Economic Area, the United Kingdom and Switzerland.

2. Information we collect

We collect only what we need to respond to you, run our business and keep the Website secure. Most of it you give us directly.

Information you give us

• Contact and inquiry forms: your name, email address, phone number, company name and message.
• Instant Estimate: your answers about your project (such as the type of project, features, timeline and any notes you add) and, if you ask us to email the estimate to you, your name, email address, company and phone number.
• Newsletter: your email address and whether you are subscribed.
• Reviews: your name, company name (optional), email address, star rating, review text, and the city and country you enter. We use your email address only to verify the review with a one-time code and never publish it. Your name, company, city, country, rating and review are published on the Website, and your city is shown as an approximate point on our reviews map.
• Referrals: your name and email address, and the name, email address and any note you give us about the person or business you refer. If someone referred you to us, we received your name and email address from them.
• AI chat: the messages you type into the Uxory AI assistant on the Website.
• Calls and messages: the details you give us when you book a call through Calendly, email or call us, or send a text message to our phone line.
• Clients: contact, billing and tax details, project information, files and communications we need to deliver our services and invoice you. Payments are processed by Stripe; we do not see or store your full card or bank details.

Information collected automatically

• Technical data: your IP address, browser and device type, and the pages you request. Our hosting provider records these in server logs to keep the Website running and secure.
• Usage data: how you use the Website, such as pages viewed, buttons clicked, forms started or sent and Instant Estimate steps, collected by Google Analytics. With analytics cookies this is linked to a random browser identifier; without them, only limited signals without cookies are sent.
• Approximate country: worked out from your IP address when you arrive, only to send you to the right country site. We do not store it.
• Hashed IP address: a one-way scrambled form of your IP address, stored with estimate requests, reviews, referrals and AI chat usage so we can limit spam and abuse. We do not store your raw IP address with these records.
• Security signals: information Google reCAPTCHA collects to tell people from bots (see "Cookies and similar technologies" below).

We do not ask for sensitive information such as passwords to your personal accounts, financial account numbers, health information or government identification numbers through the Website, and we ask you not to include them in forms or messages. If a project needs access to your systems, we will agree a secure way to share it.

3. How we use your information

• To reply to your inquiries, prepare estimates and proposals, and arrange calls.
• To deliver, support and invoice our services, and to manage our relationship with clients.
• To send the newsletter you subscribed to. Every newsletter email has an unsubscribe link.
• To verify, publish and moderate reviews, and to let you delete your own review.
• To run our referral program, contact the people referred to us and pay referral rewards.
• To keep the Website secure and to prevent spam, fraud and abuse.
• To improve the Website, our services and our estimates.
• To comply with our legal, tax and accounting obligations, and to establish, exercise or defend legal claims.

We do not use your personal information for decisions made solely by automated means that have legal or similarly significant effects on you. The Instant Estimate is an automated calculation, but it is only indicative; a member of our team reviews every project before we send a binding proposal.

4. How we disclose information

We share personal information with service providers that help us run our business. They may use it only to provide their services to us and must protect it under their contracts or terms with us:

• Vercel: hosts the Website, keeps server logs, and works out your approximate country from your IP address so we can show you the right country site.
• Supabase: our database, where we store contact form submissions, estimate requests, reviews, referrals and newsletter subscriptions.
• Resend: sends the emails our Website generates, such as replies to forms, emailed estimates, newsletter emails and the one-time codes used to verify reviews.
• Google reCAPTCHA: checks that form submissions come from people, not bots.
• Google Gemini: powers the AI parts of the Instant Estimate and the Uxory AI chat, and helps us draft blog posts. We send it your project answers and notes, or your chat messages, but not your name or contact details. Depending on the Google service tier we use, Google may use this content to improve its services, so please do not include confidential or sensitive information in estimate notes or chat messages.
• Calendly: schedules the calls you book with us and collects the details you enter when booking.
• Stripe: processes payments. Stripe collects your card or bank details directly; we do not see or store them.
• Google Analytics and Google Tag Manager: measure how the Website is used, such as pages viewed, buttons clicked, forms started or sent, device and browser type, and approximate location. Analytics cookies are set only if you allow them in the cookie banner. If you do not, our pages still send Google limited signals without cookies (for example that a page was viewed, with your browser type and approximate location), which Google uses only in aggregate to estimate overall traffic. We never send Google your name, email address, phone number or message text, and we have not turned on advertising features.
• Twilio: runs our US business phone line, for calls and text messages you send us.

We also work with our affiliated company under common ownership, based in India, which shares our team and internal systems. It may access your personal information only to help us respond to you and deliver our services, and it is bound to protect it in the same way we do.

We may also disclose personal information: to our professional advisers, such as lawyers, accountants and auditors, under a duty of confidentiality; to courts, regulators, government authorities or law enforcement when the law requires it; to protect the rights, property or safety of Uxory, our clients or others; and to a buyer or successor if our business is reorganized, merged or sold, who must continue to protect it in line with this policy.

We do not sell or rent your personal information, and we do not share it with advertisers.

5. Notice at collection for California residents

This section applies to residents of California under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), and adds to the rest of this policy.

Categories of personal information we collect

• Identifiers, such as your name, email address, phone number and a hashed form of your IP address.
• Personal information described in California Civil Code section 1798.80(e), such as your name, address, phone number and billing details. Card and bank details are collected directly by Stripe.
• Commercial information, such as the services you asked about or bought, estimates, proposals and invoices.
• Internet or other electronic network activity, such as browser and device type, pages requested, server logs and reCAPTCHA security signals.
• Approximate geolocation, such as the country worked out from your IP address and the city and country you enter in a review. We do not collect precise geolocation.
• Electronic information, such as the content of emails, text messages, form messages and AI chat messages you send us.
• Professional information, such as your company name and job title, if you share them.

Sensitive personal information. We do not set out to collect sensitive personal information. If you give us log-in credentials for your systems so we can work on a project, we use them only to provide the services you asked for. We do not use or disclose sensitive personal information for any purpose other than those permitted by section 7027(m) of the CCPA regulations, and we do not use it to infer characteristics about you.

Sources

Directly from you; automatically from your browser or device; from people who refer you to us; and from service providers such as Calendly and Stripe when you use them to deal with us.

Purposes

The business purposes listed in "How we use your information" above.

Disclosures

We disclose each category above to the service providers, contractors and affiliate described in "How we disclose information", for those business purposes, and to professional advisers or authorities where the law requires it.

We do not sell or share personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as "sell" and "share" are defined in the CCPA. We have not done so in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

Retention

We keep each category of personal information for as long as the record it belongs to, as described in "How long we keep it" below. For example, identifiers in an inquiry that does not lead to a project are kept for up to 24 months, and the same identifiers in a client's invoices are kept for as long as tax law requires.

6. Your California and US state privacy rights

If you are a California resident, you have the right to:

• Know and access the categories of personal information we have collected about you, the categories of sources, our purposes, the categories of third parties we disclose it to, and the specific pieces of personal information we hold about you.
• Delete personal information we collected from you, subject to exceptions the law allows, such as records we must keep for tax purposes.
• Correct inaccurate personal information we hold about you.
• Opt out of the sale or sharing of your personal information. We do not sell or share personal information, so there is nothing to opt out of today. We still treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request.
• Limit the use and disclosure of sensitive personal information. We use sensitive personal information only for the purposes the law permits, so this right does not currently require any action, but you can contact us at any time.
• Non-discrimination: we will not deny you services, charge you a different price or give you a lower quality of service because you exercised any of these rights.

How to make a request

Email contact@uxory.co with "Privacy request" in the subject line, or call us on +1 513-413-7427. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, up to another 45 days, we will tell you why. To protect your information, we will verify your identity by matching details you give us with details we already hold, for example by replying to the email address we have on file.

Authorized agents. You may ask an authorized agent to make a request for you. We will need the agent's signed permission from you, and we may ask you to verify your identity directly with us, unless the agent holds a power of attorney under California Probate Code sections 4121 to 4130.

Residents of other US states

Residents of other US states with consumer privacy laws may have similar rights, such as to access, correct, delete or obtain a copy of their personal data and to opt out of targeted advertising, the sale of personal data or certain profiling. We do not engage in any of these. To make a request, contact us as described above. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line, and we will respond within the time your state's law requires.

Other notices

Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes. Do Not Track. Because we do not track visitors across websites, the Website does not change its behavior in response to Do Not Track browser signals; we honor GPC signals as described above.

7. Visitors outside the United States

If you are in the European Economic Area, the United Kingdom or Switzerland, the EU General Data Protection Regulation, the UK GDPR or the Swiss Federal Act on Data Protection may apply to our processing of your personal data. Uxory LLC is the controller.

Our legal bases

• Contract: to take steps you ask for before entering into a contract, such as preparing an estimate or proposal, and to perform our contract with you.
• Legitimate interests: to respond to inquiries, contact people who were referred to us, keep the Website secure and prevent abuse, improve our services and keep business records. We only rely on this where our interests are not overridden by yours.
• Consent: for the newsletter, for publishing your review, and for analytics cookies. You can withdraw consent at any time, for analytics through Cookie settings at the bottom of every page.
• Legal obligation: to meet tax, accounting and other legal requirements.

International transfers

We are based in the United States, and our service providers and affiliate may process personal data in the United States, India and other countries that may not offer the same level of protection as your own. When we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum or Swiss amendments where applicable) or another lawful mechanism, such as a provider's certification under the EU-US Data Privacy Framework. You can ask us for a copy of the relevant safeguards.

Your rights

You have the right to access, correct or erase your personal data; to restrict or object to our processing (including objecting at any time to direct marketing); to data portability; and to withdraw consent at any time without affecting processing that happened before. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. To exercise these rights, email contact@uxory.co.

You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work or where you think an infringement happened (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concerns first.

8. How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it for, or as long as the law requires:

• Inquiries, estimates and referrals that do not lead to a project: up to 24 months after our last contact with you.
• Client records, including contracts, invoices and payment records: for as long as tax and accounting rules require, generally up to seven years.
• Newsletter: until you unsubscribe. We keep a record that you unsubscribed so we do not email you again.
• Reviews: for as long as the review is published. You can delete your review at any time.
• Server logs and abuse-prevention records: for as long as needed to keep the Website secure and as the law requires.

When we no longer need personal information, we delete it or make it anonymous.

9. How we protect it

We use reasonable administrative, technical and physical safeguards to protect personal information against unauthorized access, loss, misuse or alteration. These include encrypted connections (HTTPS), access limited to people who need it, storing IP addresses only in hashed form, one-time codes to verify reviews, and using reputable providers with strong security programs.

No system is completely secure. If a data breach affects your personal information, we will notify you and the relevant authorities where the law requires it.

10. Cookies and similar technologies

We use cookies and browser storage that are strictly necessary to run the Website and protect our forms. Analytics and marketing cookies are used only if you agree to them in the cookie banner. You can change your choice at any time with Cookie settings at the bottom of every page; withdrawing consent is as easy as giving it.

Strictly necessary

• uxory_site (cookie, kept for one year): remembers the country site you chose, so we do not redirect you again.
• uxory_consent (local storage): remembers your cookie choice and when you made it.
• Google reCAPTCHA: protects our contact, newsletter and careers forms from spam and abuse. It may set its own cookies and collects information about your device and how you use the page, which Google handles under its Privacy Policy and Terms of Service.
• uxory_review_tokens (local storage): remembers the reviews written in this browser, so you can delete them later.
• color-theme (local storage): remembers whether you chose light or dark mode.
• Session storage: keeps your Instant Estimate progress, your Uxory AI chat and whether you have seen the country-site notice, until you close the browser tab.
• Calendly: if you book a call through the scheduler embedded on our booking page, Calendly may set its own cookies under its own privacy policy.

Analytics (only with your consent)

• Google Analytics (cookies _ga and _ga_*, kept for up to two years): tell us how many people visit, which pages and buttons they use, where they came from and how our forms and Instant Estimate perform. We keep this data for 14 months.
• If you decline, no analytics cookies are set. Our pages still send Google limited signals without cookies, as described above, which Google uses only in aggregate to estimate overall traffic.

Marketing (only with your consent)

We do not currently use advertising or retargeting tools. If we add them, they will run only for visitors who allow marketing cookies, and we will update this policy first. If your browser sends a Global Privacy Control signal, we keep marketing cookies off unless you switch them on yourself.

You can also block or delete cookies and local storage in your browser settings. If you block reCAPTCHA, our forms may not work.

11. Children

Our Website and services are meant for businesses and adults and are not directed to children under 13. In line with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has given us personal information, contact us and we will delete it. We do not sell or share the personal information of anyone under 16.

12. Links to other websites

The Website links to websites and services we do not control, such as Calendly, our clients' websites and the providers named in this policy. Their own privacy policies apply when you use them, and we encourage you to read them.

13. Changes to this policy

We may update this policy when our services, providers or the law change. We will change the "Last updated" date at the top of this page and, if a change is significant, we will tell you by email or with a notice on the Website.

14. Contact us

For privacy questions, or to exercise your rights, contact Rajesh Chaudhari, who handles privacy requests for Uxory LLC, at contact@uxory.co, or reach us at:

• Uxory LLC
• Registered address: 30 N Gould St Ste N, Sheridan, WY 82801, United States
• Email: contact@uxory.co
• Phone: +1 513-413-7427

We work remotely, so email is the fastest way to reach us.