# Data, security and IP

How to protect your account, how to report a security problem, who owns what you make, and where to report copyright or abuse. A plain-language summary, last checked 2026-10-10.

> **Summary only:** This page summarises UOVA's security and intellectual property statements as last checked on 2026-10-10. It is not legal advice and does not replace the full text at [/legal/security](https://www.uova.com/legal/security), [/legal/copyright](https://www.uova.com/legal/copyright) and [/legal/terms](https://www.uova.com/legal/terms).

## Protecting your account

- The Security page asks you to use a strong, unique password, keep your credentials confidential, and tell security@uova.com straight away about any suspected unauthorised access.
- In the product, passwords are at least 8 characters, and changing one signs out your other devices.
- Two-factor sign-in uses an authenticator app. Once a device is verified, it is enforced at every login. There are no recovery codes, so keep the setup key and a backup device. See [Sign-in and security](https://www.uova.com/help/account/sign-in-and-security).
- You can sign out of this device or of all devices.

## What UOVA says about its own security

UOVA describes encryption in transit and at rest, access controls, secure authentication, vulnerability monitoring, logging and alerting, and incident response. It says it cannot guarantee absolute security, and that after a personal-data breach it will notify affected users and authorities as the law requires.

## Reporting a security problem

Send reports to security@uova.com with enough detail to reproduce the issue. The Security page offers a safe harbor: if you make a good-faith effort to follow its guidelines, UOVA will treat your research as authorised and will not pursue or support legal action over your report.

- Give UOVA reasonable time to fix an issue before any public disclosure.
- Avoid privacy violations, data destruction and service disruption, and only test accounts you own or have permission to test.
- Out of scope: denial-of-service attacks, social engineering of staff or users, physical attacks, spam, and automated scanning that degrades the service.

## What you own

- You keep ownership of your content, including AI-generated output.
- You may use AI-generated content from your account commercially, including on websites. UOVA makes no representations about copyright ownership.
- The Copyright Policy notes that AI-generated content may not qualify for copyright protection under current U.S. law, as copyright generally requires human authorship.
- Templates are licensed, not sold. You may customise and publish them but not redistribute or resell them unmodified.

## Reporting copyright or abuse

- Every published site has a small **Report** link to [/report-abuse](https://www.uova.com/report-abuse). It appears on every plan.
- Copyright complaints follow the DMCA process in the [Copyright Policy](https://www.uova.com/legal/copyright): a written notice to the designated agent at copyright@uova.com, and a counter-notice process for content removed by mistake. UOVA may terminate repeat infringers.
- For what is not allowed, see the [Acceptable Use Policy](https://www.uova.com/legal/acceptable-use). Abuse reports can also go to abuse@uova.com.

## Your data

You can export your data as a JSON file and delete your account from Account settings. See [Privacy policy](https://www.uova.com/help/legal/privacy-policy) and [Account settings](https://www.uova.com/help/account/settings). For which service providers handle data, read the [Privacy Policy](https://www.uova.com/legal/privacy-policy) in full.

Source: https://www.uova.com/help/legal/data-security-and-ip