Privacy Policy

UI Parity ("we", "us", "our") operates the UI Parity platform at uiparity.com, including the Storybook addon and dashboard. For privacy enquiries, contact us at privacy@uiparity.com.

We collect the following categories of data:

• Account data — name, email address, and authentication tokens provided via Google OAuth or email sign-in (via Clerk).
• Project data — Figma file URLs, component mappings, and review configurations you set up.
• Review data — component screenshots, Figma frame images, AI-generated issue reports, and compliance scores produced during reviews.
• Usage data — feature interactions, API call logs, and error reports used to improve the Service.
• Payment data — billing is handled by Paddle. We do not store your card details. We receive subscription status and transaction records from Paddle.

• To provide, maintain, and improve the Service.
• To process payments and manage your subscription.
• To send transactional emails (account setup, review results, billing receipts).
• To detect and prevent abuse, fraud, or security incidents.
• To comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties.

When you run a design review, component screenshots and Figma frame data are sent to Anthropic's Claude API for AI-powered analysis. Anthropic processes this data solely to return results to us and does not use it to train their models. See Anthropic's Privacy Policy.

Figma frame images are fetched from the Figma API using your OAuth access token and are cached temporarily in Azure Blob Storage to reduce redundant API calls. Cached images are scoped to your project and are deleted when you clear the cache or delete your account.

We use the following sub-processors:

• Clerk — authentication and user management
• Paddle — payment processing and subscription billing
• Anthropic — AI analysis (Claude API)
• Figma — design file access via OAuth
• Supabase (PostgreSQL) — primary database
• Microsoft Azure — blob storage for screenshots and Figma image cache
• Vercel — hosting and edge infrastructure
• Resend — transactional email delivery

• Account data: retained until you delete your account.
• Review results and issues: retained until you delete the project or account.
• Figma image cache: retained until you clear cache or delete your account.
• Payment records: retained for 7 years as required by applicable law.
• Usage logs: retained for 90 days.

We use TLS encryption for data in transit and AES-256 encryption for data at rest. Access to production systems is restricted to authorised personnel. We conduct regular security reviews and use Clerk's enterprise-grade authentication infrastructure.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, email privacy@uiparity.com. We will respond within 30 days.

We use essential cookies for authentication (session management via Clerk) and preference storage. We do not use third-party advertising or tracking cookies.

We may update this policy from time to time. Material changes will be communicated by email or a notice in the Service at least 14 days before taking effect.

For privacy questions or requests, contact us at privacy@uiparity.com.