UnicPages ("we", "us", "our", or "Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, browser extension, and related services (collectively, the "Services"). This policy complies with the Brazilian General Data Protection Law (LGPD - Law No. 13,709/2018), the European General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
1. Data Controller Information
Company: UnicPages
Website: https://unicpages.com
Email: privacy@unicpages.com
Data Protection Officer (DPO): privacy@unicpages.com
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, password (encrypted), and profile picture when you create an account
- Payment Information: Billing address, payment method details (processed securely through third-party payment processors such as Stripe)
- Communication Data: Messages, support requests, and feedback you send to us
- User Content: Projects, pages, designs, and other content you create using our Services
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent on the platform, click patterns
- Cookies and Tracking Technologies: Session cookies, persistent cookies, pixels, and similar technologies (see our Cookie Policy)
- Log Data: Server logs, error reports, access timestamps
2.3 Information from Third Parties
- OAuth Providers: If you sign in using Google, we receive your name, email, and profile picture
- Payment Processors: Transaction confirmations and billing information from Stripe
- Analytics Providers: Aggregated usage statistics from Google Analytics and Microsoft Clarity
2.4 Chrome Extension Data
Our browser extension captures web page content only when you explicitly click the import button. We collect:
- HTML content of the page you choose to import
- Page URL and title
- Images and media from the imported page
Important: The extension does not collect browsing history, does not track your activity across websites, and only activates when you explicitly initiate an import action.
3. Legal Basis for Processing (GDPR/LGPD)
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide our Services and fulfill our contractual obligations
- Legitimate Interests: Improving our Services, preventing fraud, ensuring security
- Consent: Marketing communications, cookies for analytics and advertising
- Legal Obligation: Compliance with applicable laws, tax requirements, legal requests
4. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our Services
- Process transactions and manage your subscription
- Send transactional emails (account confirmations, password resets, billing)
- Provide customer support and respond to inquiries
- Personalize your experience and recommend features
- Analyze usage patterns to improve our platform
- Detect, prevent, and address technical issues and security threats
- Send marketing communications (with your consent)
- Comply with legal obligations
5. Information Sharing and Disclosure
We do not sell your personal data. We may share your information with:
5.1 Service Providers
- Cloud Hosting: DigitalOcean, Cloudflare (data storage and delivery)
- Payment Processing: Stripe (payment transactions)
- Analytics: Google Analytics, Microsoft Clarity (usage analysis)
- Email Services: For transactional and marketing emails
- AI Services: Google Gemini, OpenAI (for AI-powered features)
5.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
6. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data internationally, we implement appropriate safeguards:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with all service providers
- Encryption in transit and at rest
7. Data Retention
We retain your personal data for as long as necessary to:
- Provide our Services while your account is active
- Comply with legal obligations (typically 5-7 years for financial records)
- Resolve disputes and enforce our agreements
After account deletion, we may retain anonymized data for analytics purposes. Backup copies may persist for up to 90 days before complete deletion.
8. Your Rights
8.1 Rights Under LGPD (Brazil)
Brazilian residents have the right to:
- Confirm the existence of data processing
- Access your personal data
- Correct incomplete, inaccurate, or outdated data
- Request anonymization, blocking, or deletion of unnecessary data
- Request data portability
- Request deletion of data processed with consent
- Obtain information about public and private entities with whom we shared data
- Revoke consent at any time
- File a complaint with the ANPD (National Data Protection Authority)
8.2 Rights Under GDPR (European Economic Area)
EEA residents have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Not be subject to automated decision-making
- Lodge a complaint with a supervisory authority
8.3 Rights Under CCPA (California)
California residents have the right to:
- Know what personal information is collected
- Know whether personal information is sold or disclosed and to whom
- Opt-out of the sale of personal information (we do not sell your data)
- Access your personal information
- Request deletion of personal information
- Not be discriminated against for exercising these rights
8.4 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@unicpages.com. We will respond within 15 days (LGPD), 30 days (GDPR), or 45 days (CCPA) as required by applicable law.
9. Data Security
We implement industry-standard security measures to protect your data:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for data at rest
- Secure password hashing using bcrypt
- Regular security audits and vulnerability assessments
- Access controls and authentication for internal systems
- DDoS protection and Web Application Firewall (WAF)
- Regular backups with encrypted storage
While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
Our Services are not directed to children under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us at privacy@unicpages.com, and we will take steps to delete such information.
11. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will send an email notification to registered users.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@unicpages.com
- Website: https://unicpages.com