Privacy Policy

We collect information that you provide directly to us, information we obtain automatically when you use our Service, and information from third-party sources.

Personal Information

We may collect the following personal information:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Company information (company name, size, industry)
• Payment information (credit card details, billing address)
• Communication preferences

Usage Information

We automatically collect certain information about your device and how you interact with our Service:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Session recordings and co-browsing data
• Log data and analytics information

We use the information we collect for various purposes, including:

• To provide, maintain, and improve our Service
• To process transactions and send related information
• To send administrative information, updates, and security alerts
• To respond to your comments, questions, and customer service requests
• To send you marketing and promotional communications (with your consent)
• To monitor and analyze trends, usage, and activities
• To detect, prevent, and address technical issues and security vulnerabilities
• To comply with legal obligations and enforce our terms

Where the GDPR applies, we process your personal data only where we have a legal basis to do so:

• Performance of a contract: to provide the Univerx platform, your account and the features you ask for.
• Consent: for optional cookies and any marketing communications. You may withdraw consent at any time, as easily as you gave it.
• Legitimate interests: to keep the service secure, prevent fraud and improve the product, where those interests are not overridden by your rights.
• Legal obligation: where we must retain or disclose data to comply with the law.

We may share your information in the following situations:

• Service Providers: With third-party vendors, consultants, and service providers who perform services on our behalf (including HubSpot for CRM, marketing automation, contact forms, and analytics; Resend for transactional email delivery; and Brevo for email marketing and communication)
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business
• Legal Requirements: When required by law or to respond to legal process, protect our rights, or ensure safety
• With Your Consent: With your explicit consent or at your direction

We do not sell your personal information to third parties.

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection and security best practices
• Incident response procedures for potential data breaches

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your information in a portable format
• Opt-out: Opt out of marketing communications or certain data processing activities
• Restriction: Request restriction of processing of your information
• Objection: Object to processing based on our legitimate interests, and to direct marketing at any time
• Withdraw consent: Withdraw any consent you have given, without affecting processing carried out before you withdrew it
• Complaint: Lodge a complaint with your local supervisory authority

To exercise these rights, please contact us using the information provided below. Where the GDPR applies, we respond within one month, as required by Article 12.

We use cookies and similar tracking technologies to collect and track information about your use of our Service. You can control cookies through your browser settings and other tools. However, disabling cookies may limit your ability to use certain features of our Service.

Which cookies we set, what each one is for, how long it lasts, and how to change or withdraw your choice at any time are described in full in our Cookie Policy.

We use HubSpot for marketing, analytics, and to manage contact form submissions and inquiries. HubSpot may set cookies and collect usage data (such as IP address, pages visited, and form submissions) in accordance with their privacy policy.

We use Resend to send transactional emails (e.g. confirmations and notifications). Resend processes email delivery on our behalf in accordance with their privacy policy.

We use Brevo for email marketing and communications. Brevo may set cookies and collect data related to email engagement and campaign analytics in accordance with their privacy policy.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Where we transfer personal data outside the EEA or the UK, we rely on an adequacy decision or on Standard Contractual Clauses, together with any additional safeguards the transfer requires. [LEGAL TO CONFIRM: list the actual recipient countries and sub-processors before launch.]

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: hello@univerx.com
• Data Protection Officer: hello@univerx.com
• Address: 123 Business Street, Suite 100, San Francisco, CA 94105

The data controller is Univerx, 123 Business Street, Suite 100, San Francisco, CA 94105. [LEGAL TO CONFIRM: registered entity name and, if a Data Protection Officer is appointed, their name and contact details.]

We are committed to compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). If you are a resident of the European Union or California, you have additional rights regarding your personal information.

For more information about your rights or to submit a request, please contact our Data Protection Officer at hello@univerx.com.