Privacy Policy
Effective October 1, 2026
The short version: UXexpert.ai runs the audit in your browser. Your code is analyzed on your device unless you choose the Claude AI engine, in which case it goes directly from your browser to Anthropic using your own API key — we never see your code, and we never see your key. To run an audit you create an account with your email (a one-time code, no password); we store that email and your plan in Supabase, our hosted database. If you subscribe to Pro, Stripe processes your payment and we never see your full card details. We use cookieless, aggregate analytics.
Who we are
UXexpert.ai is operated by TnTW LLC, a Wyoming (USA) limited liability company ("we"). The Service is operated from the United States, and any data we receive is processed and stored in the United States. UXexpert.ai is a website-audit tool served as a static web page, and the audit itself runs in your browser. The only server components we operate handle accounts and billing (described below) — your code is never processed on a server of ours. Contact: hello@uxexpert.ai.
Your code
- Local engine (default): analysis runs entirely inside your browser. The code you upload, paste, or fetch never leaves your device and is never transmitted to us or anyone else.
- Claude AI engine (optional): if you choose it and provide your own Anthropic API key, your submitted code, selected expertise skills, and audit settings are sent directly from your browser to Anthropic's API (api.anthropic.com). We are not in that path and never receive the content. Anthropic's handling of API data is governed by Anthropic's privacy policy and your agreement with them.
- GitHub fetching (optional): if you audit a public repository, your browser requests files directly from GitHub (api.github.com and raw.githubusercontent.com), subject to GitHub's privacy statement.
Your API key
Your Anthropic API key is used only to make requests from your browser to api.anthropic.com. It is never sent to us or to any other party. If you check "Remember on this device," the key is stored in your browser's local storage on your device; unchecking it (or clearing your browser data) removes it. We recommend using a key with a spending limit.
Your account
To run an audit you create an account with your email address. We send a one-time code to verify it — there is no password. Accounts, sign-in, and entitlement are handled by Supabase, a hosted database and authentication provider acting as our processor. Supabase stores your email, a count of how many free audits you have used, your plan (free or Pro), and — if you subscribe — your Stripe customer identifier and subscription status. This data is processed and stored in the United States under Supabase's own terms. We use it to verify it's you, enforce the free-audit limit, provide your subscription, and send occasional product and service updates (you can opt out of product updates anytime). We never sell or share it. Your audits themselves are not stored in your account — they run in your browser, as described above.
Analytics
We use Plausible, a privacy-first analytics service: no cookies, no cross-site tracking, no personal profiles, and data is aggregate. We record page views and feature-usage events (for example, "an audit ran with the local engine"). Event data never includes your code, your repository contents, your API key, or your email.
Waitlist emails
If you join the waitlist, the email address you enter (with the tier you chose) is delivered to us via Formspree, which acts as our form processor. We use it solely to contact you about UXexpert availability and product updates. We do not sell or share it. To be removed, email hello@uxexpert.ai and we will delete it.
Payments
If you subscribe to Pro, your payment is processed by Stripe, our payment processor, on Stripe-hosted checkout. Stripe collects your name, email, and card and billing details directly and handles them under its own privacy policy — we never receive or store your full card number. From our Stripe dashboard we can see your email, country, and subscription status (active, cancelled, last payment), which we use only to provide your subscription, send service and billing notices, and keep the tax and accounting records the law requires. We do not sell or share this information. To cancel, use the Manage billing link in the app, the link on your Stripe receipt, or email hello@uxexpert.ai.
Cookies and local storage
We set no cookies. Browser local storage is used only for your own preferences and data on your own device — currently your sign-in session (so you stay logged in on this device), your API key (if you ask us to remember it), and your most recent audit report, so it survives a page refresh. This stays in your browser and is never transmitted to us; clearing your browser data removes it and signs you out. Saved audit history and version comparison across audits are a planned Pro feature; when that ships it will store audits, and we will update this policy before it goes live.
Data retention
We retain little. Your account email and plan (held in Supabase) are kept while your account exists; email us and we will delete your account and its data on request. Subscriber records held via Stripe (email and subscription status) are kept while your subscription is active and afterward only as long as tax and accounting law requires. Waitlist emails, if you joined the waitlist, are kept until you ask us to delete them. Analytics data is aggregate and contains no personal identifiers. Your audit reports are not stored on any server of ours — the most recent one lives only in your own browser. Code sent to Anthropic through the AI engine is handled and retained under Anthropic's API data-retention policies, under your own agreement with them — we never receive or store it.
United States service; your rights
The Service is operated from, and directed to users in, the United States. It is not directed to residents of the European Union, EEA, or United Kingdom; if you access it from those regions, you do so on your own initiative and with the understanding that any data you submit is processed in the United States. US residents may have rights under state privacy laws (such as the CCPA) to access, correct, or delete personal data. The personal data we hold is your email and plan (in your account, via Supabase), your subscription status if you subscribe to Pro (via Stripe), and your email if you joined the waitlist. Email hello@uxexpert.ai and we will honor any access or deletion request promptly, wherever you live (deletion of an active subscription's records may wait until billing ends and the law no longer requires us to keep them).
Changes
If our data practices change, we will update this page and its effective date before the change takes effect.