Privacy Policy

Last updated: July 9, 2026

At Uxia, we believe privacy should be simple to understand. This policy explains what information we collect, why we collect it, and how we protect it when you use our website and platform.

1. Quick Summary

Here's the short version:

• We only collect the information needed to provide Uxia.

• We never sell your personal data.

• Your test content belongs to you.

• We never use your content to train AI models unless you give us written permission.

• You can access, correct, or delete your data at any time by contacting hello@uxia.app.

2. Who We Are

Uxia Testing Solutions S.L. ("Uxia", "we" or "us") is a company based in Barcelona, Spain that provides AI-powered UX testing tools. We are responsible for the personal data we handle through our website, platform and related services.

If you have any questions or concerns, you can contact us at: hello@uxia.app.

3. What Information We Collect

Information you provide

• Name

• Email address

• Password

• Company name

• Job title

• Billing information (processed securely through Stripe)

• Test content and project settings

• Support requests and feedback
  
  

Information collected automatically

We also collect technical information such as:

• IP address

• Browser and device information

• Usage analytics

• Pages visited and interactions

• Anonymous session recordings and heatmaps

• Cookies and similar technologies

Our services are intended for users aged 18 or older.

4. MCP / AI Assistant Access

Uxia can be accessed through MCP-compatible AI assistants (such as ChatGPT, Claude, and other clients that support the Model Context Protocol). When you use Uxia this way, the AI assistant acts as the channel between you and Uxia.

What the assistant sends to us (tool inputs). Only the specific information you provide for a task, which may include:

• The website or page URL you want to test

• The test scenario, mission, and stop condition you define

• Audience or targeting criteria for the test

• The questions you want answered about the results

What we send back (tool outputs). The results directly relevant to your request, which may include:

• Test outcomes and metrics

• Session transcripts

• Insights, scores, and analysis

The provider of the AI assistant is both the channel through which this data reaches us and a recipient of the outputs we return. Their handling of your data is governed by their own privacy policy, not this one.

We only act on the information explicitly sent to us through these tool calls. We do not access, reconstruct, or infer your wider conversation or chat history with the AI assistant, and we do not collect data from the assistant beyond what is needed to perform the requested task. Our tool responses return only data relevant to your request and do not include internal identifiers or diagnostic metadata (such as session, trace, or request IDs, or logging data) unless strictly required to fulfil it.

Data minimization and Boundaries

We design our inputs to collect only what a task requires, rather than broad or "just in case" information. Where location or environment context is needed, we obtain it through the client's controlled channel rather than asking you to enter raw location fields. We do not engage in surveillance, behavioral profiling, or tracking of your activity across the AI assistant beyond what is disclosed in this policy and, for our website, in our Cookie Policy.

5. Data We Do Not Collect (Restricted Data)

To keep your data minimal and safe, Uxia does not collect, request, or intentionally process the following, and you should not submit them through any Uxia input or tool:

• Payment card data subject to PCI DSS (card processing is handled entirely by Stripe; we never receive full card numbers)

• Protected health information (PHI)

• Government identifiers (such as social security or national ID numbers)

• Access credentials or authentication secrets (such as passwords, API keys, or one-time/MFA codes)

If you provide any of the above to us inadvertently, please contact hello@uxia.app so we can delete it.

6. Sensitive / Special-Category Data

Uxia is not designed to collect personal data classified as "sensitive" or "special category" under the GDPR (such as data revealing health, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation). We do not solicit this data through our tools or inputs. If such data is strictly necessary for a specific feature, we will collect it only where we have a lawful basis and will disclose that collection clearly at or before the point it is collected.

7. How We Use Your Information

We use your data to:

• Create and manage your account

• Authenticate and secure your access

• Generate AI-powered UX insights

• Deliver and improve our services

• Process subscriptions and payments

• Provide customer support

• Send product updates and marketing communications (only if you've opted in)

• Meet our legal and security obligations

• Run usability and UX tests against the URLs and scenarios you submit

• Generate transcripts, insights, and scores from those tests and return them to you

8. Your Content Is Yours

Everything you upload or create inside Uxia remains your property.

We do not claim ownership of:

• Test inputs

• Uploaded assets

• AI-generated outputs

We will never use your content to train, improve, or build AI models unless you have explicitly given us written permission.

9. Who We Share Data With

We only share information with trusted providers that help us operate Uxia.

These include:

All providers are subject to appropriate data protection agreements.

We may also disclose information when legally required.

10. International Data Transfers

Some of our service providers operate outside the European Union.

Whenever personal data is transferred internationally, we apply appropriate safeguards approved by the European Commission, including Standard Contractual Clauses where required.

When possible, your data is stored in the region that matches your account.

11. Your Privacy Rights

Depending on applicable laws, you can request to:

• Access your personal data

• Correct inaccurate information

• Delete your personal data

• Restrict or object to processing

• Receive your data in a portable format

• Withdraw consent for marketing communications

To exercise any of these rights, contact us at hello@uxia.app.

If you believe we have not handled your data appropriately, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

As an EU-based controller, we process your personal data under one or more of the following lawful bases: performance of a contract (to provide the service and your account), legitimate interests (to secure, maintain, and improve the platform), consent (for marketing and non-essential cookies, which you can withdraw at any time), and legal obligation (for tax, accounting, and compliance).

12. Cookies

We use cookies to:

• Keep you signed in

• Remember your preferences

• Improve website performance

• Understand how our website is used

You can manage non-essential cookies through our cookie banner or your browser settings.

13. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy. Our typical retention periods are:

When data is no longer needed, it is securely deleted or anonymized.

*A Zero Data Retention (ZDR) policy service is also available for Enterprise customers under certain conditions. Contact our team for more information.

14. Security

Protecting your information is a priority.

We use industry-standard security measures, including:

• Encryption in transit and at rest

• Multi-factor authentication

• Role-based access controls

• Secure cloud infrastructure

• Regular security testing

We also encourage you to use a strong password and keep your account credentials secure.

15. Children's Privacy

Uxia is intended for users aged 18 and over.

We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can remove it promptly.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

If significant changes are made, we will notify you through the platform or by email when appropriate. The "Last updated" date at the top of this page reflects the latest version.

17. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, we'd love to help.

Contact here: hello@uxia.app.