Run free audit
Legal

Privacy policy

What we collect when you run an audit or contact us, why, who it goes to, and how to have it deleted.

1. Who we are

ProCurveUX is an automated UX audit for websites, at procurveux.com. It is run by ProCurveUX, which is the controller of the personal data described here.

This policy covers the website, the audits it runs and the ProCurveUX Chrome extension. Using the service is also covered by our Terms of service.

2. What we collect

When you run an audit

  • Your email address, which an audit asks for.
  • The address of the website you audit and the goals you pick for it.
  • The report we produce: screenshots of the page at desktop and mobile sizes, and the findings.
  • A record of the run: when it ran, how it ended, your approximate city and country (worked out from your IP address), your browser and operating system, whether it came from the website or the Chrome extension, and a scrambled code made from your IP address. We store that code, not the IP address itself.

Your browser also remembers the email you typed, in its own local storage, so you do not have to type it again. You can clear it by clearing this site’s data in your browser.

When you contact us or request a plan

  • Your name, email address and message, and the website address if you give one.
  • The plan you ask about (Starter, Pro, Agency or Not sure yet), if you choose one.
  • If you send a message from a report, a link to that report, its score and how many issues it found.
  • For paid plans, the details needed to invoice you: your name, billing email and, if you want them on the invoice, your company name and address. Payment is made through Payoneer; we receive confirmation of the payment, never your card or bank login details.

If you create an account

Your email address, which you sign in with by a link we email to you, and your audit history and plan.

Cookies and analytics

The site uses the cookies it needs to work, such as the one that keeps you signed in, and Cloudflare Turnstile may set its own when it checks the contact form for robots. We do not use analytics, tracking or advertising cookies.

If you use the ProCurveUX Figma plugin

The plugin checks your designs inside Figma; your designs, layer and file names and any text in them never leave Figma. Unless you turn off “Share anonymous usage” in the plugin’s Settings, it sends us counts: a random install id the plugin creates for itself, the plugin version, your approximate country, when it was opened, and for each audit the score, the number of frames, layers and findings, and which checks failed. We use these to see how the plugin is used and to improve it.

The sites you audit

An audit views a public page the way a normal visitor would. It does not log in, submit forms or get past access controls. If a page shows personal information to every visitor, that can appear in the screenshots we take of it.

3. Why we use it

  • To run the audits you ask for and show you the report.
  • To reply to your messages and set up the plan you request.
  • To invoice paid plans and keep the records the law requires.
  • To keep the service working and fair: limiting how many free audits one person or network can run, and stopping abuse.
  • To improve ProCurveUX, by looking at which audits fail or run slowly and why.
  • To contact you about your results. We only send marketing emails if you have agreed to them, and every one lets you stop them.

5. Who we share it with

We do not sell your personal data. We share it only with the companies that help us run the service, and only what each needs:

  • Vercel: hosts the website and runs the audits, and stores reports and screenshots (Vercel Blob).
  • Anthropic: its Claude AI model reviews the page and the findings to write parts of the report. It receives the page content and screenshots, not your email address. Under Anthropic’s commercial terms, data sent through its API is not used to train its models.
  • Resend: sends our emails, such as sign-in links and replies to the contact form.
  • Cloudflare: Turnstile checks the contact form for robots.
  • Neon: stores account records, when accounts are switched on.
  • Payoneer: sends invoices for paid plans and processes the payments.

Anyone with the link to a report can open it, so share report links with care. Reports are not listed in search engines. We may also disclose information when the law requires it, or to protect our rights or someone’s safety.

6. How long we keep it

  • Reports and screenshots: 12 months after the audit, then deleted. You can ask us to delete one sooner.
  • Audit run records (email, approximate location, browser): 12 months.
  • Contact messages and plan requests: 24 months.
  • Account records: for as long as your plan or account is active, then 12 months after it ends.
  • Invoices and billing records: 6 years, as tax law requires.

7. Your rights

Wherever you are, you can ask us to:

  • Give you a copy of the personal data we hold about you.
  • Correct anything that is wrong.
  • Delete your data, including your reports.
  • Send your data to you in a format you can take elsewhere.
  • Stop using your data for a purpose you object to, or withdraw your consent.

To ask, email sales@zeeframes.com or use the contact form, from the email address the request is about. We will reply within 30 days. When you ask us to delete a report, we delete it with its screenshots.

If you are in the EEA or the UK and are unhappy with how we handled your data, you can complain to your local data protection authority.

8. Security

The site is served only over HTTPS. Data is stored with the providers above, who protect it with access controls and encryption. Only the people who run ProCurveUX can see audit records and messages. No system is perfectly secure, and if a breach affects your data we will tell you as the law requires.

9. International transfers

ProCurveUX is run from Pakistan, and our providers process data in other countries, including the United States. When data from the EEA or the UK is transferred, we rely on the safeguards our providers offer, such as the European Commission’s standard contractual clauses. The website, the audits and stored reports run on Vercel in the United States.

10. Children

ProCurveUX is not meant for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

When we change this policy we will update the date at the top of the page. If a change matters, we will also say so on the site or by email before it takes effect.

12. Contact

Questions about this policy or your data: sales@zeeframes.com, or the contact form.