Privacy Policy

1. Introduction

Ubenie ("we", "us", or "our") operates the website www.ubenie.com and the Ubenie platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered SEO content generation service. We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, username, and profile image. Account authentication is managed by our third-party authentication provider, Clerk. If you sign up using a social login provider (such as Google), we receive the profile information you authorize that provider to share.

2.2 Business and Project Information

During onboarding and ongoing use of the Service, you may provide:

• Website URL, blog URL, and sitemap URL
• Project and business descriptions
• Target audience details, including ideal customer profiles, pain points, and interests
• Competitor domains and URLs
• Products and services (including features and benefits)
• Brand voice and content preferences (tone, writing rules, formatting options)
• Localization preferences (country, language, locale)

2.3 Content Data

We store the content you create and generate using the Service, including keywords, article text (in Markdown and HTML formats), generated images, article templates, and publishing history.

2.4 Payment Information

Payments are processed by LemonSqueezy. We do not directly collect or store your credit card number or full payment details. We receive and store order identifiers, customer identifiers, purchase amounts, currency, and credit transaction records from LemonSqueezy to manage your account balance.

2.5 Integration Credentials

If you connect third-party publishing platforms (such as Shopify, WordPress, or Google Search Console), we store the necessary authentication credentials (such as OAuth tokens or API keys) in encrypted form to maintain those connections on your behalf.

2.6 Automatically Collected Information

• Usage Data: Pages visited, features used, click interactions, scroll depth, and time spent on the Service
• Device Information: Browser type, operating system, screen resolution, IP address, and user agent
• Cookies: Session data, consent preferences, and analytics identifiers (see Section 10 for details)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating AI-powered content based on your inputs
• Process keyword research and SEO analysis using third-party data providers
• Process payments and manage your credit balance
• Publish content to your connected third-party platforms on your behalf
• Send you transactional emails, including onboarding guidance, low-credit alerts, and service updates
• Analyze usage patterns to improve the user experience and develop new features
• Detect, prevent, and address technical issues, fraud, and abuse
• Send you marketing communications (you can opt out at any time via email preferences or unsubscribe links)

4. AI and Data Processing

Our Service uses artificial intelligence to generate content, research keywords, create images, and perform SEO analysis. When you use these features, your inputs (such as keywords, topics, project descriptions, and brand voice settings) are sent to third-party AI providers for processing.

Our primary AI provider is Google (Gemini). Your content inputs are processed by these providers solely to generate the requested output. We select AI providers that do not use your submitted data to train their general models.

AI-generated content is stored in our database and associated with your account. Generated images are stored on our cloud storage infrastructure (Cloudflare R2).

5. Third-Party Services and Data Sharing

We share your information with the following categories of third-party service providers, solely for the purposes described in this policy:

5.1 Infrastructure and Database

We use Convex as our backend database and serverless functions provider. Your account data, project data, content, and credentials are stored in Convex. Generated images and media files are stored on Cloudflare R2.

5.2 Authentication

Clerk manages user authentication, including sign-up, sign-in, session management, and account security. Clerk receives your name, email, and profile image.

5.3 Analytics

We use PostHog for product analytics. If you consent to analytics cookies, PostHog receives your user ID, email, name, page views, click interactions, and scroll depth data. PostHog analytics are loaded only after you provide consent. We do not enable session recording.

5.4 Advertising

We use Meta Pixel for conversion tracking and advertising measurement. If you consent to marketing cookies, Meta receives page view events and conversion data. We also use Meta's server-side Conversion API, which may send hashed email addresses, IP addresses, and user agent strings to Meta for ad attribution purposes. Meta Pixel is loaded only after you provide consent.

5.5 Payments

LemonSqueezy processes all payments. When you make a purchase, LemonSqueezy receives your email address, payment details, and billing information. We receive order confirmations and customer identifiers via webhooks.

5.6 Email

We use Resend to deliver transactional and marketing emails. Your email address and name are shared with Resend for this purpose. You can manage your email preferences or unsubscribe at any time.

5.7 SEO Data

We use DataForSEO for keyword research, search volume data, SERP analysis, and competitor intelligence. Your keywords, website URLs, and competitor domains may be sent to DataForSEO for processing.

5.8 AI Providers

Google (Gemini) is our primary AI provider for content generation and image creation. Your content inputs, project context, and brand voice settings are sent to Google for processing.

5.9 Publishing Integrations

If you connect Shopify, WordPress, Google Search Console, or custom webhook integrations, article content and associated metadata are transmitted to those platforms when you publish. We store encrypted authentication credentials for these connections.

5.10 Legal and Business Transfers

We may disclose your information when required by law, to enforce our terms, or to protect our rights. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your information. These measures include:

• Encryption of sensitive credentials (OAuth tokens, API keys) using AES-256-GCM encryption
• Webhook signature validation for all inbound webhooks (Clerk, LemonSqueezy)
• HTTPS encryption for all data in transit
• Authentication and authorization checks on all protected routes and API endpoints

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data is retained until you delete your account
• Generated content and images are retained as long as your account is active
• Payment records are retained as required by applicable tax and accounting laws
• Analytics data is subject to PostHog's retention policies
• Cookie consent preferences are stored for 365 days

You can request deletion of your data at any time by contacting us. When you delete your account, we will delete or anonymize your personal data, except where retention is required by law or for legitimate business purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

8.1 GDPR Rights (European Economic Area)

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing of your data for specific purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

8.2 Additional Rights

Regardless of your location, you can:

• Update your account information through your profile settings
• Manage your cookie preferences through our cookie consent banner
• Unsubscribe from marketing emails using the link provided in each email
• Disconnect third-party integrations (Google Search Console, Shopify, WordPress) at any time through your project settings
• Delete your account through Clerk's account management

To exercise any of these rights, please contact us at [email protected].

9. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you signed up for (account management, content generation, publishing)
• Consent: Analytics tracking (PostHog) and advertising tracking (Meta Pixel), which are only activated after you provide consent via our cookie banner
• Legitimate Interest: Service improvement, security, fraud prevention, and transactional communications
• Legal Obligation: Retention of financial records as required by applicable law

10. Cookies and Tracking Technologies

We use cookies and similar technologies on our Service. Our cookie consent banner allows you to manage your preferences before any non-essential cookies are set.

10.1 Necessary Cookies

These cookies are required for the Service to function and cannot be disabled. They include session authentication cookies (managed by Clerk) and your cookie consent preference (stored as "ubenie_cookie_consent" for 365 days).

10.2 Analytics Cookies

If you consent, PostHog sets cookies to help us understand how visitors interact with our website. This includes page views, click tracking, and scroll depth measurement. PostHog is configured to use our reverse proxy (/ubenie-analytics/) and is hosted in the EU.

10.3 Marketing Cookies

If you consent, Meta Pixel sets cookies for conversion tracking and advertising measurement. These cookies are used to track visitor interactions for advertising purposes and may be used by Meta to show you relevant ads on their platforms.

10.4 Managing Your Preferences

You can change your cookie preferences at any time by clearing your cookies and revisiting our website, at which point the consent banner will appear again. You can also configure your browser to refuse cookies, though this may affect certain features of the Service.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States and other countries where our service providers operate. Our infrastructure providers (Convex, Cloudflare) and third-party services (Clerk, PostHog, Google, Meta, LemonSqueezy, Resend, DataForSEO) may process data in various jurisdictions. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

12. Third-Party Links

Our Service may contain links to third-party websites, including the platforms you connect for publishing. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party service before providing your information.

13. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete that information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

Email: [email protected]
Location: Belgrade, Serbia