Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials (via Google OAuth or email magic link). We do not store passwords — authentication is handled by Supabase.

Payment Information

When you subscribe or purchase credits, we collect billing details through Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. Stripe processes and stores all payment data in compliance with PCI DSS Level 1.

Content You Provide

We collect the text prompts you submit for UI generation, screenshots or images you upload for enhancement or audit, and the generated code and preview output associated with your account.

Usage Data

We automatically collect information about how you use the Service, including: pages visited, features used, generation count, framework selections, timestamps of activity, IP address, browser type, and device information.

API Usage

If you use the UIPunch API, we log API requests including endpoint called, timestamp, credits used, and overage billing metadata. We do not log the full content of API responses in our API usage table.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your subscription
• Track credit usage and enforce plan limits
• Generate UI code based on your prompts (this requires sending your prompts to third-party AI providers — see Section 4)
• Send you service-related communications (account confirmations, billing receipts, credit warnings)
• Monitor for abuse, fraud, and violations of our Terms of Service
• Analyze aggregate usage patterns to improve the product (we do not sell your data)

3. Data Retention

Account Data

Retained for as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

Generation History

Your prompts and generated code are retained in your account history for as long as your account is active. If you want history removed before deleting your account, contact support. Upon account deletion, all generation history is permanently deleted within 30 days.

Payment Records

Billing records and transaction history are retained for 7 years as required for tax and accounting compliance.

Usage Logs

Anonymized, aggregated usage data (not tied to your identity) may be retained indefinitely for product analytics.

4. Third-Party Services and Data Processors

We use the following third-party services to operate UIPunch. When you use the Service, your data may be processed by these providers in accordance with their respective privacy policies:

If you use the BYOM (Bring Your Own Model) feature, your prompts are sent to whatever AI provider you specify via your own API key. We are not responsible for how third-party AI providers handle data sent through your own API keys.

5. Cookies and Tracking

We use strictly necessary cookies for authentication and session management. We use PostHog for product analytics, which may place cookies to track feature usage and session data in an anonymized manner. We do not use advertising cookies, tracking pixels, or third-party ad cookies. We do not engage in cross-site tracking or behavioral advertising.

6. Your Rights

For All Users

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Request a copy of your personal data
• Opt out of non-essential communications

For California Residents (CCPA/CPRA)

• Right to know what personal information is collected, used, and disclosed
• Right to delete personal information
• Right to opt out of the sale or sharing of personal information (we do not sell or share your personal information)
• Right to non-discrimination for exercising your privacy rights
• Right to limit the use of sensitive personal information

To exercise any of these rights, email us at support@jadetradeapp.com. We will respond within 30 days (or 45 days for complex requests, with notice).

For EU/EEA Residents (GDPR)

• We process your data under the legal basis of contract performance (to provide the Service) and legitimate interest (to improve the Service and prevent abuse)
• You have the right to access, rectify, erase, restrict processing, data portability, and object to processing
• You may lodge a complaint with your local data protection authority
• Contact our data protection point of contact at support@jadetradeapp.com

7. Data Security

We implement industry-standard security measures including: encryption in transit (TLS/HTTPS), encryption at rest for database storage, access controls and authentication for all systems, and regular security reviews. No system is 100% secure. If we discover a data breach that affects your personal information, we will notify you and applicable authorities as required by law.

8. International Data Transfers

If you are located outside the United States, your data will be transferred to and processed in the United States where our servers and service providers are located. By using the Service, you consent to this transfer. For EU/EEA users, transfers are conducted under Standard Contractual Clauses where applicable.

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

10. Do Not Track

We honor Do Not Track (DNT) browser signals. Because we do not engage in tracking or behavioral advertising, no change in behavior is necessary when a DNT signal is detected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights: