Privacy Policy

This Privacy Policy explains how SecretUXD (“SecretUXD”, “we”, “us”) collects, uses, shares and protects information when you visit our website, create an account, or use the SecretUXD platform to audit websites, screenshots and design files (together, the “Services”).

We built SecretUXD to find UX problems, not to collect personal data. We collect only what we need to run audits, operate your account and improve the product, and we never sell your personal information.

Information you give us

• Account details such as your name, email address, password (stored hashed), company name and role.
• Sign-in information from Google if you choose “Continue with Google”, limited to your name, email address and profile picture.
• Payment records for plans you buy: the plan, billing period, amount, currency, payment status and the order and payment references from our payment partner, Razorpay. Your card, UPI and bank details are entered with Razorpay and never reach or are stored on our servers. If you ask for a GST invoice, we also keep the billing details you give us for it.
• Communications you send us through the contact form, email or support chat.

Content you submit for audits

• URLs you ask us to audit, and the pages, DOM structure and screenshots we capture from them.
• Screenshots and images you upload.
• Figma files or frames you connect through our integration.
• Audit results, reports, comments and settings you create in your workspace.

Information collected automatically

• Device and browser type, operating system, IP address and approximate location derived from it.
• Pages you visit, features you use, and the date and time of your activity.
• Cookies and similar technologies, described in the Cookies section below.

We use the information we collect to:

• Run the audits you request and generate findings, screenshots, reports and code suggestions.
• Create and secure your account, and authenticate you when you sign in.
• Process payments, activate and track your plan, and count your page audits against its allowance.
• Send service messages such as audit completion notices, security alerts, payment confirmations and reminders before your plan ends.
• Respond to support requests and feedback.
• Understand how the product is used so we can fix bugs and improve features.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Comply with legal, tax and accounting obligations.

We only send marketing emails if you have opted in, and every marketing email includes a one-click unsubscribe link.

SecretUXD combines deterministic checks with AI models to analyse the interfaces you submit. To do this, audit content such as page screenshots and DOM structure may be processed by carefully selected AI infrastructure providers acting on our behalf.

• Audit content is used to produce your results. It is not used to train third-party AI models.
• We do not use content from your private workspace to train our own models without your explicit permission.
• Please avoid submitting pages or screenshots that contain sensitive personal data, such as payment details or health records. If you audit a page behind a login, you are responsible for making sure you have the right to share that content with us.

We do not sell or rent your personal information. We share it only in these situations:

• Service providers that help us operate SecretUXD, such as cloud hosting, AI infrastructure, payment processing (Razorpay), email delivery and analytics. They may only use the data to provide services to us.
• People you choose to share with, for example when you send a client a live report link or invite teammates to your workspace.
• Integrations you connect, such as Figma, Jira or Linear, when you ask us to send or receive data from them.
• Legal reasons, when we believe disclosure is required by law or needed to protect the rights, safety or property of our users, the public or SecretUXD.
• Business transfers, if SecretUXD is involved in a merger, acquisition or sale of assets. We will notify you before your information becomes subject to a different privacy policy.

We use a small number of cookies and similar technologies:

• Essential cookies keep you signed in, remember your preferences and protect against fraud. The Services cannot work without them.
• Analytics cookies help us understand which features are used so we can improve them.
• Live chat cookies from Crisp, our chat provider, keep your conversation with us open as you move between pages of our website. They're only set on our public pages, and what you write in the chat is shared with Crisp to deliver it.

You can control or delete cookies through your browser settings. Blocking essential cookies may stop parts of the Services from working.

We keep information only for as long as we need it:

• Account information is kept while your account is active.
• Payment records are kept for as long as tax and accounting laws require, even after your account is closed.
• Audit content and reports are kept until you delete them or close your account.
• After you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements.
• Backups are overwritten on a rolling schedule and are not used for any purpose other than disaster recovery.

We protect your information with industry-standard safeguards, including encryption in transit (TLS), encryption at rest, hashed passwords, role-based access controls and regular security reviews. Access to customer data is limited to staff who need it to run the Services.

No system is completely secure. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities as required by law.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your account and personal data.
• Withdraw consent you have given, such as for marketing emails.
• Object to or restrict certain processing.
• Nominate another person to exercise your rights if you are unable to.
• Raise a complaint with us, and with your local data protection authority.

You can update most account details in your settings. For any other request, contact us and we will respond within the time required by applicable law. We may need to verify your identity first.

SecretUXD is operated from India, and our service providers may process data in other countries. When we transfer personal data across borders, we take steps to ensure it receives an appropriate level of protection in line with applicable law, including India's Digital Personal Data Protection Act, 2023.

SecretUXD is a professional tool and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and notify you by email or in the product before the changes take effect.