Last updated: March 2026
UOVA, Inc. and its affiliated companies (together: "UOVA", "us", or "we") are dedicated to providing users with the highest level of transparency and control over the use of their information. In order for us to provide you with our Services, we are required to collect and process certain personal information about you and your activity. By entrusting us with your information, we would like to assure you of our commitment to keep such information private. We have taken measurable steps to protect the confidentiality, security, and integrity of this information.
When you use our Services, you consent to the collection, storage, use, disclosure, and other uses of your Personal Data as described in this Privacy Policy. We urge you to read this Privacy Policy carefully and make sure that you fully understand and agree to it. If you do not agree to this Privacy Policy, please discontinue and avoid using our Services.
This Privacy Policy does not apply to the practices of third parties that UOVA does not own or control, or to individuals that UOVA does not employ or manage.
You are not legally required to provide us with your "Personal Data" (meaning any information which may potentially allow your identification with reasonable means), but without it we might not be able to provide you with the full range of, or the best experience while using our website(s), mobile application(s), or any other affiliated service (together, the "Services").
Processing of Personal Data is necessary for the performance of our contractual obligations towards you, for provision and operation of our Services, to protect our legitimate interests, and for compliance with legal and regulatory obligations to which we are subject.
In the course of using the Service, we may ask you to provide us with certain Personal Data to provide and improve the Service, to contact or identify you, to enable you to access certain parts of the Service, and as otherwise indicated in this Policy. We collect the following Personal Data about you:
Registration Information — When you sign up to use our Services, we will collect your name, your email address, and other information you provide during the registration process, including information about your company and your position.
Payment Information — We process your payment details via our payment processing provider, Stripe. We do not retain your payment information but only a pseudonymized "token" thereof, or a reduced amount of such payment details which is received from our payment processors.
Account Information — Information you voluntarily provide via contact forms, support channels, surveys, or other forms of communication with us.
Usage Data — Information about how you interact with our Service, including pages visited, features used, actions taken, time spent on pages, AI prompts submitted, projects created, and other behavioral data.
Device and Technical Data — Internet Protocol (IP) address, browser type and version, operating system, device type, screen resolution, unique device identifiers, referring URL, and access times.
Content Data — The content you create, upload, generate, or publish through the Service, including website designs, AI prompts, AI-generated images and videos, text content, and media assets.
Communication Data — Records of communications between you and UOVA, including support tickets, emails, chat messages through our in-app chat (powered by Crisp), and feedback you provide.
Third-Party Sign-In Data — If you sign in using a third-party provider (e.g., Google, GitHub), we receive certain information from that provider, such as your name, email address, and profile picture, as authorized by your privacy settings with the third-party provider.
When you visit or access our Services or interact with our electronic communications (such as emails or newsletters), we use (and authorize 3rd parties to use) pixels, cookies, events, unique tracking links, and other technologies (collectively, "Tracking Technologies"). Those allow us to automatically collect information about you, your device, and your online behavior, in order to enhance your navigation in our Services, improve our Services' performance, perform analytics, and customize your experience.
We use a tool called "Google Analytics" to collect information about use of our Service. Google Analytics collects information such as how often Users visit our site, what pages they visit when they do so, and what other sites they used prior to coming to this site. We use the information we get from Google Analytics only to improve our Services. Google Analytics collects only the IP address assigned to you on the date you visit our site, and plants a cookie on your web browser to identify you as a unique user the next time you visit our site.
We also use tools such as Vercel Analytics and Sentry for performance monitoring and error tracking. These tools collect anonymized data about page load times, errors, and other technical metrics to help us maintain and improve the Service.
For more detailed information about the cookies we use and how to manage your cookie preferences, please see our Cookie Policy.
We use your Personal Data for the following purposes:
Provision of service — We will use your Personal Data for the provision of our Services, including for support and to respond to your queries.
Improvement of our services — We are constantly looking for ways to improve our Services and we may analyze information on user profiles and insights of how users interact with our Services, e.g., the type of social media channels and the type of business they are active in, how our Assets are used, and how they are perceived when published in content on social media platforms or other media channels.
Service announcements — We will use your Personal Data to communicate with you and to keep you informed of our latest updates to our Services and offer you service offers.
Service customization — We will use your Personal Data in order to customize the Services, including the content offered through them, to your needs and preferences, so that the Services and your experience of using them will be optimal.
Marketing purposes — We may use your Personal Data (such as your email address or phone number) for marketing purposes. This may include using tracking technologies within our emails to monitor your engagement. For example, our users will receive promotional materials concerning our Services or our partners' services, including tips and announcements straight to their email account.
Analytics and research — We use aggregated and anonymized data to conduct research and analytics about usage patterns, platform performance, and to develop new features and services.
Legal and compliance — We may use your Personal Data to comply with applicable laws and regulations, to respond to legal process, to enforce our Terms of Service, and to protect the rights, property, and safety of UOVA, our users, and the public.
Opt-out of receiving marketing materials: You may choose not to receive our promotional or marketing emails (all or any part thereof) by clicking on the "unsubscribe" link in the emails you receive from us. Please note that even if you unsubscribe from our promotional or marketing emails, we may continue to send you service-related communications.
Under the General Data Protection Regulation (GDPR) and similar laws, we are required to identify the legal basis for processing your Personal Data. Below is a summary of the purposes for which we process your data and the corresponding legal basis:
| Purpose/Activity | Type of Data | Lawful Basis for Processing |
|---|---|---|
| Registration and Account Setup | Registration information (name, email address, company information, job position) Payment details (pseudonymized token received from payment processors) | Performance of a contract Necessary to create and maintain your account and process payments |
| Customer Communication and Support | Information provided voluntarily (via contact forms, e-mail, support channels) Survey responses and additional profile information | Performance of a contract We may contact you when responding to inquiries, providing support, to facilitate your use of the services |
| Purchase Facilitation | Transaction information Account details | Performance of a contract Necessary to facilitate your purchases and provide you the purchased content |
| Newsletter and Marketing Communications | Email address URLs of media created by you | Legitimate interest Used for sending newsletters or marketing emails to promote our Services |
| Website Usage Analytics | Usage data Device and technical data Cookies and tracking technologies | Legitimate interest To improve our Services and understand how users interact with our platform |
| AI Content Generation | AI prompts Generated content metadata | Performance of a contract Necessary to provide AI Studio features as part of the Service |
| Legal Compliance | Any relevant personal data | Legal obligation Necessary to comply with applicable laws and regulations |
We share your Personal Data with third parties (or otherwise allow them access to it) only in the following circumstances:
Service Providers — We engage selected third-party companies and individuals to perform services complementary to our own. These service providers have access to your Personal Data only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose.
Our key service providers include:
| Provider | Service | Data Processed |
|---|---|---|
| Supabase | Authentication, database, and storage | Account data, user content, project data |
| Stripe | Payment processing | Payment information (tokenized), transaction records |
| Vercel | Website hosting and CDN | Published website content, analytics data |
| OpenAI | AI image generation | AI prompts, generated image metadata |
| Replicate | AI image and video generation | AI prompts, generated content metadata |
| Crisp | In-app customer support chat | Chat messages, email address, name |
| Google Analytics | Website analytics | Usage data, device data (anonymized IP) |
| Sentry | Error tracking and performance monitoring | Technical error data, device information |
| Cloudflare | CDN, DNS, and DDoS protection | IP addresses, request metadata |
| Resend / SendGrid | Transactional email delivery | Email addresses, email content |
Business Transfers — In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your Personal Data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your Personal Data.
Law Enforcement — We may disclose your Personal Data to law enforcement agencies, government authorities, or other third parties if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service; (c) protect the rights, property, or safety of UOVA, our users, or the public; or (d) detect, prevent, or address fraud, security, or technical issues.
With Your Consent — We may share your Personal Data with third parties when you have given us explicit consent to do so.
We do not sell, rent, or trade your Personal Data to third parties for their own marketing purposes.
UOVA is based in the United States. If you are accessing the Service from outside the United States, please be aware that your Personal Data may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
For transfers of Personal Data from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States or other countries that are not recognized as providing an adequate level of data protection, we rely on the following transfer mechanisms:
You have the right to request a copy of the safeguards used for international data transfers by contacting us at privacy@uova.io.
We implement appropriate technical and organizational security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:
While we take reasonable measures to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
We retain your Personal Data for as long as your account is active or as needed to provide you with the Service. We may also retain and use your data as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.
Specific retention periods:
Upon account deletion, we will delete or anonymize your Personal Data within 30 days, except where retention is required by law or for legitimate business purposes as described above. Backup copies may persist for up to 90 days before being purged.
If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
Right of Access — You have the right to request a copy of the Personal Data we hold about you.
Right to Rectification — You have the right to request that we correct any inaccurate or incomplete Personal Data.
Right to Erasure — You have the right to request that we delete your Personal Data, subject to certain exceptions (e.g., legal obligations, ongoing disputes).
Right to Restrict Processing — You have the right to request that we restrict the processing of your Personal Data in certain circumstances.
Right to Data Portability — You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object — You have the right to object to the processing of your Personal Data for direct marketing purposes or where processing is based on our legitimate interests.
Right to Withdraw Consent — Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint — You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe that our processing of your Personal Data violates applicable data protection laws.
To exercise any of these rights, please contact us at privacy@uova.io. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Right to Know — You have the right to request that we disclose what Personal Information we collect, use, disclose, and sell about you.
Right to Delete — You have the right to request that we delete your Personal Information, subject to certain exceptions.
Right to Correct — You have the right to request that we correct inaccurate Personal Information about you.
Right to Opt-Out of Sale/Sharing — We do not sell your Personal Information. We do not share your Personal Information for cross-context behavioral advertising purposes.
Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Right to Limit Sensitive Personal Information — You have the right to limit the use and disclosure of your sensitive personal information.
Categories of Personal Information collected in the preceding 12 months:
To exercise your rights, contact us at privacy@uova.io or use the "Manage Privacy" feature in your account settings. We will verify your identity before processing requests. Authorized agents may submit requests on your behalf with proper documentation.
The Service is not directed to children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect Personal Data from children under these age thresholds.
If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us at privacy@uova.io. If we become aware that we have collected Personal Data from children without verification of parental consent, we will take steps to remove that information from our servers within a reasonable time.
When you use our AI Studio features, the following data practices apply:
AI Prompts — Your text prompts are sent to third-party AI model providers (currently OpenAI and Replicate) for processing. We do not use your prompts to train our own AI models. Third-party providers may retain prompts temporarily for abuse monitoring purposes in accordance with their own privacy policies.
Generated Content — AI-generated images and videos are stored on our servers and associated with your account. They are not shared publicly unless you choose to publish them.
Prompt History — We retain your prompt history for 90 days to enable features like regeneration and history browsing. After 90 days, prompts are permanently deleted.
No Training — We do not use your prompts, generated content, or any other User Content to train, fine-tune, or improve AI models. Your creative inputs remain yours.
We recommend that you do not include Personal Data (such as real names, addresses, or other identifying information) in your AI prompts. We are not responsible for any Personal Data included in AI prompts or outputs.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through a prominent notice on the Service at least thirty (30) days before the changes take effect.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to all inquiries within 30 days.