Privacy policy

When you create an account, we collect your email address, organisation name, and optional avatar. This information is used to identify and manage your access to the UXON AI platform.

When subscribing to a paid plan, billing details are processed by Stripe, UXON AI’s payment provider.

UXON AI does not store or process credit card numbers or billing credentials. Stripe may collect and store billing address and payment information in accordance with its own privacy policy.

When you use the platform, UXON AI automatically collects basic technical data such as your IP address, browser type, device information, referrer URL, session timestamps, and usage logs.

This data is used for security, performance monitoring, and traffic analytics.

UXON AI uses its own analytics pixel to collect event data for landing pages and experiments.

Captured fields include:

• Session ID, Visitor ID, Timestamp, Event ID, Event Value, and Event Currency
• Page URL, Referrer URL, and UXON page or experiment identifiers
• Campaign tracking indicators (UTMs), Device type, and User type (new or returning)

This data is collected to perform analytics and optimise campaign performance. No personal identifiers are attached to these records unless provided by the Customer through lead collection forms.

Customers may use UXON AI landing pages to collect lead information (for example, through forms or events).

In these cases, the Customer acts as the Data Controller, and UXON AI acts as the Processor.

Customers are responsible for ensuring that the collection and handling of Lead Data comply with applicable privacy laws. UXON AI automatically deletes stored lead data after 90 days.

UXON AI uses cookies and tracking tools for its own marketing and performance analytics on the marketing site and registration page only.

These may include Google Analytics 4 (GA4), Meta Pixel, and Google Ads click-tracking tools.

Cookies are not used within the /dashboard environment, and no tracking occurs on published customer pages other than the UXON analytics pixel.

Users may control or disable cookies through their browser settings.

We use Account, Log, and Pixel Data to:

• Provide access to the UXON AI platform and related features
• Manage accounts, subscriptions, and billing
• Deliver requested functionality such as landing page deployment, A/B testing, and analytics

We analyse anonymised usage data to improve platform performance, reliability, and user experience.

This includes identifying bugs, optimising user flow, and developing new features.

UXON AI may use your contact details to communicate about:

• Account-related notifications, security alerts, and service updates
• Product improvements, maintenance, or billing matters
• Future marketing emails or product updates (via Intercom) once implemented

Users will be able to customise or opt out of marketing communications through Intercom’s subscription preference system.

We use technical data, access logs, and automated monitoring to detect and prevent fraudulent or abusive activity, protect accounts, and ensure platform integrity.

We may process or disclose information when necessary to:

• Comply with applicable laws, regulations, or lawful requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of UXON AI, its users, or the public

UXON AI uses OpenAI GPT-5 mini to generate landing page copy and AI-assisted content.

User inputs and generated outputs may be processed by OpenAI’s systems outside Australia but are not used by OpenAI to train or improve its models.

Users remain responsible for reviewing and approving AI-generated content before use or publication.

We engage carefully selected third-party providers (“Subprocessors”) to deliver infrastructure, functionality, and integrations essential to UXON AI’s operation.

Each provider processes data in accordance with strict confidentiality, security, and privacy standards consistent with Australian privacy requirements.

Our current subprocessors are listed below:

Certain data may be processed or stored outside Australia, including through third-party services such as OpenAI and Stripe, located in the United States or other jurisdictions.

UXON AI ensures that all subprocessors handling overseas processing provide data protection consistent with Australian privacy requirements.

We may disclose information where required to comply with Australian law, enforce our legal rights, respond to lawful government or regulatory requests, or prevent actual or suspected unlawful activity.

UXON AI may use or share aggregated and anonymised data for analytical, research, or statistical purposes. Such data does not identify any individual and is not considered Personal Information.

Users may access or update their account details at any time through the UXON AI platform.

If you believe that any information UXON AI holds about you is inaccurate, incomplete, or outdated, you may contact us at ops@uxon.ai to request correction.

Upon request, UXON AI can provide you with a copy of your account or lead data in a structured, commonly used, and machine-readable format.

This applies only to information you have directly provided to us.

Where processing of personal information is based on consent (such as marketing communications), you may withdraw that consent at any time.

Marketing preferences can be managed through Intercom’s subscription settings or by contacting UXON AI directly.

You may request the deletion of your account data at any time.

Upon cancellation of your subscription:

• Account data is deleted within 30 days
• Lead data is automatically deleted within 90 days
• Deleted data cannot be restored once removal is completed

If you believe UXON AI has breached the Privacy Act 1988 (Cth) or mishandled your personal information, you may contact us at ops@uxon.ai. We will investigate and respond promptly.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

• All databases are hosted on Neon, deployed on AWS Asia Pacific 2 (Sydney), providing HIPAA-compliant storage and encryption.
• Application deployment is managed through Vercel, which offers global distribution and TLS/SSL encryption by default.
• Domains and SSL certificates are managed by saascustomdomains.com, including DDoS protection and automated certificate renewal.

• Data in transit is encrypted using HTTPS (TLS).
• Access to production systems is limited to authorised UXON AI personnel and protected through secure authentication measures.
• Administrative access is restricted on a need-to-know basis.

Users are responsible for maintaining the confidentiality of their account credentials and for all activities conducted under their account.

UXON AI does not have access to user passwords and cannot retrieve or reset them manually.

In the event of a data breach, UXON AI will promptly investigate the incident and notify affected users and relevant authorities as required by the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth).

Personal and lead data are retained only as long as necessary to provide the Service or meet legal obligations.

Data is automatically deleted in accordance with UXON AI’s retention schedule:

• Account data — deleted within 30 days of cancellation
• Lead data — deleted within 90 days of collection or cancellation