Privacy Policy

This Privacy Policy explains how Ucanvas (“we”, “us”) collects, uses, and protects your personal data when you use our website and join our waitlist. We are committed to protecting your privacy and complying with the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Information we collect

When you join our waitlist or create an account, we collect:

• Information you provide: your name, email address, and — if you complete the waitlist questionnaire — your user type (individual, agency, enterprise), role, country, and intended use case.
• Account data: if you sign up, your email and a securely hashed password (handled by our authentication provider, Supabase).
• Content you post: feedback, feature requests, and votes you submit on our feedback board.
• Technical data collected automatically: your IP address (used for security and rate-limiting), your browser’s referring URL, and marketing attribution parameters (UTM tags) if present in the link you arrived from.

2. How we use your information

• To add you to our launch waitlist and notify you when Ucanvas becomes available.
• To send you product updates and marketing emails about our launch (only with your consent — you can unsubscribe at any time).
• To understand our audience and prioritize what we build (aggregated segmentation).
• To operate the feedback board and your account.
• To protect our service from spam and abuse (rate-limiting via IP).
• To measure which channels our signups come from (attribution).

3. Legal basis for processing (GDPR)

If you are in the EU/UK, we process your data on these legal bases:

• Consent — for sending you marketing and launch emails. You give this when you tick the consent box, and may withdraw it at any time.
• Legitimate interests — for security, spam prevention, and understanding our audience, balanced against your rights.
• Contract — to provide the account and services you request.

4. How we share your information

We do not sell your personal data. We share it only with service providers who help us operate, under contract and only as needed:

• Supabase — database, authentication, and hosting of your data.
• Vercel — website hosting and delivery.
• Email delivery providers we may use to send you launch emails.

We may also disclose data if required by law.

5. Data retention

We keep your waitlist data until you ask us to delete it or until it is no longer needed for the purposes above. You can request deletion at any time (see your rights below).

6. Your rights under GDPR

If you are in the EU/UK, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

7. Your rights under CCPA/CPRA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it (described above).
• Request access to, or deletion of, your personal information.
• Opt out of the “sale” or “sharing” of personal information — note that we do not sell or share your personal information as those terms are defined under the CCPA.
• Not be discriminated against for exercising your privacy rights.

8. Cookies

We use only essential cookies required to keep you signed in (session cookies set by our authentication provider). We do not use advertising or third-party tracking cookies. If we add analytics in the future, we will update this policy and ask for consent where required.

9. Data security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), access controls, and row-level security on our database. No method of transmission is 100% secure, but we take reasonable steps to safeguard your information.

10. Children

Ucanvas is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the “Last updated” date.

12. Contact us

To exercise any of your rights, or for any privacy question, contact us at privacy@ucanvas.app. We will respond within the timeframes required by applicable law.