Privacy Policy
Uilora ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights over it. It applies to the website uilora.com and all associated services.
1. Information We Collect
- Account information you provide when registering: name, email address, and password (stored hashed).
- Usage data: pages visited, components viewed, copy events, and MCP session metadata — collected anonymously via server-side analytics.
- Technical data: IP address, browser type, device type, and referrer URL for security and debugging purposes.
- API keys you generate for MCP access — stored as irreversible hashes; the plaintext key is shown once at creation and never stored.
- Voluntary feedback, bug reports, or messages you send to us.
- We do not collect payment card data directly. Payments (if applicable) are processed by third-party providers under their own PCI-DSS compliance.
2. How We Use Your Information
- To create and manage your account and authenticate your sessions.
- To deliver the Uilora component library and MCP services you request.
- To analyse usage patterns and improve the product — all analytics data is aggregated and anonymised before review.
- To send transactional emails: account verification, password reset, and critical service notifications. We do not send marketing emails without your explicit consent.
- To detect, investigate, and prevent fraudulent or abusive activity on the platform.
- We do not sell, rent, or trade your personal data to third parties for advertising or any other commercial purpose.
3. Data Security
- All data is transmitted over HTTPS using TLS 1.2 or higher.
- Passwords are hashed using bcrypt before storage; we never store plaintext credentials.
- API keys are stored as hashed values; only a preview prefix is retained for display.
- Access to production databases is restricted to essential personnel and protected by multi-factor authentication.
- We conduct periodic security reviews of our infrastructure and dependencies.
- In the event of a data breach that materially affects you, we will notify you within 72 hours of discovery.
4. Third-Party Services
- Hosting and content delivery: Vercel, Inc. — your requests may be routed through Vercel's global edge network.
- Authentication: we use industry-standard OAuth 2.0 providers (Google). Their privacy policies govern data handled by those providers.
- Analytics: server-side, privacy-respecting analytics — no third-party tracking scripts are loaded in your browser.
- Email delivery: transactional emails are sent via a reputable email relay service. Only your email address and message content are shared with the relay.
- These service providers act as data processors on our behalf and are contractually bound to process your data only as instructed.
5. Data Retention
- Account data is retained for as long as your account is active.
- If you delete your account, your personal data (name, email, hashed password) is permanently deleted within 30 days, except where retention is required by law.
- Aggregated, anonymised analytics data may be retained indefinitely as it cannot be linked back to you.
- Server logs containing IP addresses are retained for up to 90 days for security auditing and then deleted.
6. Your Rights
- Access: you may request a copy of the personal data we hold about you.
- Correction: you may ask us to correct inaccurate or incomplete data.
- Deletion: you may request deletion of your account and associated personal data at any time.
- Portability: you may request an export of your data in a machine-readable format.
- Objection: you may object to processing of your data for analytics purposes by contacting us.
- To exercise any of these rights, email us at support@uilora.com. We will respond within 30 days.
7. Governing Law
This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of India. If you are located in the European Economic Area, you may also have rights under the GDPR — please contact us to exercise them.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email to your registered address. Continued use of Uilora after changes take effect constitutes acceptance of the revised policy.
Contact Us
For privacy-related questions, data access requests, or to report a concern, contact us at:
support@uilora.com