Privacy Policy

Effective Date: January 21, 2025

Introduction

This Privacy Policy tells you how InverseUI ("we," "us," or "our") collects, uses, shares, and protects your personal information. This policy applies when you use our website, browser extension, and all related services (together called "Services").

We follow UK and European Union privacy laws (including GDPR) and United States privacy laws (including CCPA and other state laws).

By using our Services, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

Contact Us

For questions about this Privacy Policy or data requests, please contact us at support@inverseui.com.

Information We Collect

We collect different types of information when you use our Services. This section tells you exactly what we collect, how we collect it, and why we need it.

1. Account and Profile Information

When you create an account or sign in using Google, we collect:

  • Your email address
  • Your name (if you provide it through Google login)
  • Your Google profile picture (if you use Google login)
  • Your Google user ID (a unique number from Google)
  • Account creation date and time
  • Your password (if you create a password account - we store this encrypted)
  • Account settings and preferences you choose

2. Browser Extension Interaction Data

Our browser extension captures your web page interactions to help you create automation code. We collect:

  • Mouse clicks, button presses, and keyboard inputs you make on web pages
  • Form fields you fill out and data you enter
  • Web pages you visit and URLs you navigate to (only when using the extension)
  • Screenshots and visual snapshots of web pages you interact with
  • HTML content and page structure of sites you use
  • Time stamps of when you perform each action
  • The automation code and scripts generated from your actions

Note: This data is processed on your local computer first. We only send this data to our servers when you choose to save, share, or sync your automation workflows. You control what gets sent to us.

Important:

You are solely responsible for making sure you have permission to capture and automate any websites or data. We are not responsible for your misuse of captured data, violations of website terms of service, or any legal issues that arise from your use of generated code.

3. Usage and Analytics Data

We automatically collect information about how you use our Services, including:

  • Which features you use and how often
  • API calls you make (what actions you request from our servers)
  • Number of automations you create
  • Error messages and crashes you encounter
  • Performance data (how fast things load, response times)
  • Your usage patterns and session times
  • Which pages of our website you visit
  • How you found our website (referral source)

4. Device and Technical Information

We automatically collect technical data from your device:

  • Your IP address (internet address)
  • Browser type and version (Chrome, Firefox, etc.)
  • Operating system (Windows, Mac, Linux)
  • Device type (desktop, mobile, tablet)
  • Screen size and resolution
  • Time zone and language settings
  • Extension version you have installed

5. Cookies and Tracking Data

We use cookies and similar tracking technologies to collect:

  • Login session cookies (to keep you signed in)
  • Preference cookies (to remember your settings)
  • Analytics cookies (to understand how you use our site)
  • Advertising cookies (to show you relevant ads - see Advertising section below)
  • Web beacons and pixels (small images that track page views)

See our detailed "Cookies and Tracking" section below for more information and how to control cookies.

6. Payment and Billing Information

If you purchase a paid subscription, we collect:

  • Billing name and email
  • Payment method information (processed securely by Stripe - we do not see your full card number)
  • Billing address and country
  • Purchase history and transaction records
  • Subscription plan and renewal dates

We do NOT store your complete credit card numbers. Payment processing is handled by Stripe, a secure third-party payment processor.

7. Communications and Support

When you contact us or communicate with us, we collect:

  • Email messages and your email address
  • Support tickets and help requests
  • Feedback and survey responses
  • Any other information you choose to share with us

How We Use Your Information

We use the information we collect for many purposes. Here is a complete list of how we may use your information:

Core Service Operations:

  • Provide, operate, and maintain our Services (website, extension, features)
  • Create and manage your account
  • Generate automation code from your browser interactions
  • Save, sync, and organize your automation workflows
  • Process your payments and manage subscriptions
  • Authenticate you and keep you logged in
  • Remember your preferences and settings

Communication and Support:

  • Send you service updates, announcements, and technical notices
  • Respond to your questions and provide customer support
  • Send you account-related emails (password resets, security alerts, receipts)
  • Contact you about your account or our Services
  • Send you newsletters and product updates (you can opt out)

Product Improvement and Development:

  • Improve and develop new features and functionality
  • Understand how users interact with our Services
  • Fix bugs, errors, and technical issues
  • Test new features and conduct product research
  • Develop educational content and training materials (see Education section below)
  • Create anonymized and aggregated statistics about usage

Analytics and Business Understanding:

  • Analyze usage patterns, trends, and user behavior
  • Track performance metrics and system health
  • Understand which features are most popular
  • Measure the effectiveness of our marketing and advertising
  • Create internal reports and business analytics
  • Share aggregated, anonymized data with third-party analytics services

Marketing and Advertising:

  • Send you marketing emails about our products and services (you can opt out)
  • Show you personalized advertisements on our website and other platforms
  • Create targeted advertising campaigns based on your interests and usage
  • Measure the performance of our advertising campaigns
  • Work with advertising partners to show you relevant ads
  • Build custom audiences for advertising on platforms like Google, Facebook, and LinkedIn
  • Track conversions and user acquisition sources

See the "Advertising and Data Monetization" section below for more details about advertising practices.

Security and Fraud Prevention:

  • Detect, prevent, and investigate fraud and abuse
  • Protect against security threats and unauthorized access
  • Monitor for suspicious activity and violations of our Terms of Service
  • Verify your identity when needed
  • Maintain the security and integrity of our Services

Legal and Compliance:

  • Comply with legal obligations and law enforcement requests
  • Enforce our Terms of Service and other agreements
  • Protect our legal rights and property
  • Resolve disputes and investigate violations
  • Keep required business records for tax and accounting

Business Operations:

  • Manage business relationships and partnerships
  • Conduct mergers, acquisitions, or sale of assets (see Data Sharing section)
  • Create financial reports and business planning
  • Manage internal operations and administrative tasks

Note:

We may use your information for additional purposes in the future as we grow and develop new features. If we plan to use your information in ways not described in this Privacy Policy, we will update this policy and notify you before implementing those changes.

Advertising and Data Monetization

We may use your information for advertising and analytics purposes, both now and in the future. This helps us offer you better services and may allow us to keep some features free or at lower cost.

Personalized Advertising:

We may show you personalized advertisements based on:

  • Your usage patterns and behavior within our Services
  • The features you use most often
  • Your account type and subscription level
  • Information we infer about your interests
  • Your demographic information (age range, location, language)

Advertising Partners:

We may work with third-party advertising companies and networks, including:

  • Google Ads and Google Analytics
  • Facebook/Meta advertising platforms
  • LinkedIn advertising
  • Other ad networks and affiliate marketing platforms

These partners may use cookies, pixels, and similar technologies to track your activity and show you relevant ads both on our site and on other websites across the internet.

Analytics and Data Sharing:

We may share aggregated, anonymized, or de-identified data with third parties for:

  • Industry research and trend analysis
  • Product development and improvement
  • Marketing and advertising optimization
  • Business intelligence and analytics

This anonymized data cannot be used to identify you personally.

Data Monetization:

While we do not currently sell your personally identifiable information to third parties, we reserve the right to monetize aggregated, anonymized, or de-identified data in the future. This may include selling anonymized usage statistics, trend reports, or market insights to business partners, researchers, or other third parties.

Note:

You can opt out of personalized advertising by adjusting your browser settings, using ad blockers, or opting out through industry tools like the Network Advertising Initiative (NAI) opt-out page. California residents have additional rights - see the "California Privacy Rights" section below.

Educational and Research Use

We may use anonymized and aggregated data from user interactions to develop educational content, training materials, and research publications. This helps improve automation education and advance the field of web automation technology.

Educational Uses Include:

  • Creating tutorials and learning materials showing common automation patterns
  • Developing case studies and best practice guides
  • Training machine learning models to improve code generation
  • Publishing research on web automation trends and usage
  • Creating anonymized example workflows for educational purposes
  • Improving our AI and automation algorithms

All data used for educational or research purposes will be anonymized so it cannot be traced back to you personally. We will never publish your personally identifiable information or specific automation workflows without your explicit consent.

How We Share Your Information

We share your personal information with third parties only in the specific situations described below:

1. Service Providers and Business Partners:

We share information with trusted third-party companies that help us operate our Services:

  • Google OAuth: For user authentication and login (we receive your email, name, profile picture, and Google user ID)
  • Stripe: For payment processing (receives billing information and payment details)
  • Google Analytics: For website analytics and usage tracking
  • Cloud hosting providers: For data storage and server infrastructure
  • Email service providers: For sending emails and communications
  • Customer support tools: For providing support and responding to inquiries
  • Advertising networks: For showing you relevant ads (Google, Facebook, LinkedIn, etc.)

These service providers are bound by confidentiality agreements and are only allowed to use your information to perform services for us. They cannot use your data for their own purposes.

2. With Your Consent:

We will share your information when you give us explicit permission to do so, such as when you choose to share your automation workflows publicly or connect with third-party integrations.

3. Legal Requirements and Protection:

We may disclose your information when required by law or to protect rights and safety:

  • To comply with legal obligations, court orders, or government requests
  • To respond to law enforcement requests or legal processes
  • To protect our rights, property, or safety, or that of our users or the public
  • To enforce our Terms of Service or other agreements
  • To detect, prevent, or investigate fraud, security issues, or illegal activity
  • To defend ourselves in legal proceedings

4. Business Transfers:

If we are involved in a merger, acquisition, sale of assets, bankruptcy, or reorganization, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

5. Aggregated and Anonymized Data:

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with:

  • Business partners and affiliates
  • Advertisers and advertising networks
  • Analytics providers and research organizations
  • Industry groups and trade associations
  • The public (in blog posts, reports, or presentations)

Note:

Under some privacy laws (like CCPA), sharing data with advertising partners for targeted advertising may be considered a "sale" of personal information. While we do not sell your data in the traditional sense, we may share information with advertising partners as described in the Advertising section. California residents have the right to opt out of this - see the California Privacy Rights section below.

Data Security

We implement industry-standard security measures to protect your information:

  • End-to-end encryption for sensitive data
  • Secure HTTPS connections for all communications
  • Regular security audits and monitoring
  • Access controls and authentication protocols
  • Data backup and recovery procedures

How Long We Keep Your Information

We keep your personal information only as long as necessary for the purposes described in this Privacy Policy, or as required by law. Here are the specific retention periods:

Account Information:

  • We keep your account information (email, profile, settings) as long as your account is active
  • If you delete your account, we will delete or anonymize your account information within 30 days
  • Some information may be retained longer if required by law (e.g., financial records for tax purposes)

Automation and Interaction Data:

  • Your saved automation workflows are kept as long as your account is active
  • If you delete specific workflows, they are permanently deleted within 7 days
  • Anonymized versions may be retained indefinitely for product improvement

Usage and Analytics Data:

  • Server logs and technical data: 90 days
  • Analytics and usage statistics: up to 26 months
  • Anonymized aggregated data: retained indefinitely

Payment and Billing Information:

  • Transaction records: 7 years (required by tax law)
  • Billing history: as long as your account is active, plus 7 years
  • Payment method information: stored by Stripe according to their retention policy

Communications:

  • Support tickets and emails: 3 years from last contact
  • Marketing email preferences: until you unsubscribe or delete your account

Important:

You are responsible for maintaining your own backups of any important automation workflows or data. We reserve the right to delete data if your account is terminated for violations of our Terms of Service, without notice.

Even after deletion, anonymized or aggregated data that cannot identify you personally may be retained indefinitely for analytics, research, and product improvement.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. A "cookie" is a small data file stored on your device that helps us recognize you and remember your preferences.

Types of Cookies We Use:

1. Strictly Necessary Cookies (Essential)

These cookies are required for our Services to work properly. They enable core functions like logging in, security, and accessing your account. You cannot opt out of these cookies.

  • Authentication cookies (keeping you logged in)
  • Security cookies (preventing fraud and abuse)
  • Session cookies (maintaining your session state)

2. Functional/Preference Cookies

These cookies remember your choices and preferences (like language, theme, or settings) to provide a personalized experience.

  • User preferences and settings
  • Language selection
  • Display preferences

3. Analytics and Performance Cookies

These cookies help us understand how visitors use our website so we can improve performance and user experience.

  • Google Analytics cookies (tracking page views, sessions, and user behavior)
  • Performance monitoring cookies
  • Error tracking and debugging cookies
  • A/B testing cookies (to test new features)

4. Advertising and Marketing Cookies

These cookies track your activity to show you personalized ads and measure advertising effectiveness. They may be set by us or by third-party advertising partners.

  • Google Ads cookies (for remarketing and conversion tracking)
  • Facebook Pixel (tracking conversions and building custom audiences)
  • LinkedIn Insight Tag
  • Third-party ad network cookies
  • Affiliate tracking cookies

Other Tracking Technologies:

  • Web Beacons/Pixels: Small invisible images in emails and web pages that track whether you opened an email or visited a page
  • Local Storage: Similar to cookies but can store more data, used for saving your preferences and session data
  • Browser Fingerprinting: Collecting information about your browser and device configuration to identify you
  • Server Logs: Automatic recording of your IP address, browser type, and access times when you visit our site

How to Control Cookies:

You have several options to control or limit how we and our partners use cookies:

  • Browser Settings: Most browsers let you block or delete cookies. Check your browser's help section for instructions. Note that blocking all cookies may prevent some features from working properly.
  • Opt-Out Tools: Visit the Network Advertising Initiative opt-out page (optout.networkadvertising.org) or Digital Advertising Alliance opt-out page (optout.aboutads.info) to opt out of interest-based advertising.
  • Do Not Track: Some browsers have a "Do Not Track" (DNT) feature. Currently, we do not respond to DNT signals, but this may change in the future.
  • Global Privacy Control: We recognize and respect Global Privacy Control (GPC) signals for users in jurisdictions that require it.
  • Mobile Advertising: On mobile devices, you can limit ad tracking through your device settings (iOS: Settings → Privacy → Advertising → Limit Ad Tracking; Android: Settings → Google → Ads → Opt out of Ads Personalization).

Note:

If you are located in the European Union, United Kingdom, or other regions with cookie consent laws, we will ask for your consent before placing non-essential cookies on your device. You can withdraw your consent at any time by adjusting your cookie preferences or browser settings.

International Data Transfers

We serve users worldwide. Your personal information may be transferred to, stored in, and processed in countries other than your own, including where our servers, service providers, or business partners are located.

Legal Protections for International Transfers:

Different countries have different data protection laws, and some may not provide the same level of protection as your home country. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses with our service providers to ensure your data is protected when transferred outside the EU/UK
  • Adequacy Decisions: We may transfer data to countries that have been deemed to provide adequate data protection by the UK or EU
  • Binding Corporate Rules: For transfers within our corporate group (if applicable in the future)
  • Your Consent: In some cases, we may ask for your explicit consent for specific international transfers

Data Privacy Framework:

We work with service providers that comply with relevant data protection frameworks and regulations. We ensure that all service providers contractually commit to protecting your data in accordance with applicable data protection standards.

Note:

If you have questions about international data transfers or want to obtain a copy of the safeguards we have in place, please contact us.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). This section explains your California privacy rights and how to exercise them.

Your California Rights:

  • Right to Know: You can request to know what personal information we collect, use, disclose, and sell about you. You can request this information up to twice in a 12-month period.
  • Right to Delete: You can request that we delete the personal information we have collected from you (subject to certain exceptions).
  • Right to Correct: You can request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising purposes.
  • Right to Limit Use of Sensitive Personal Information: You can limit our use of sensitive personal information (though we do not currently collect or use sensitive personal information beyond what is necessary to provide our Services).
  • Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights. We will not deny you services, charge different prices, or provide different quality of service because you exercised your privacy rights.

Categories of Personal Information We Collect:

Under CCPA, we collect the following categories of personal information:

  • Identifiers: Email address, name, IP address, Google user ID, online identifiers
  • Commercial Information: Purchase history, subscription information, transaction records
  • Internet Activity: Browsing history, search history, interaction with our website and extension, usage data
  • Geolocation Data: Approximate location based on IP address
  • Professional Information: If you provide it, such as job title or company
  • Inferences: Preferences and characteristics inferred from your usage patterns

Do We "Sell" or "Share" Your Personal Information?

Under CCPA, "sale" has a broad definition that includes sharing data with third parties for advertising purposes. While we do not sell your personal information for money, we may "share" your information with advertising partners for targeted advertising, which may be considered a "sale" under CCPA.

Specifically, we may share the following categories with advertising partners:

  • Identifiers (like cookies and online identifiers)
  • Internet activity information
  • Inferences about your preferences

How to opt out:

To opt out of the sale or sharing of your personal information for targeted advertising:

  • Contact us (see Contact Us section above) with subject line "CCPA Opt-Out Request"
  • Use browser-based opt-out tools like Global Privacy Control (GPC)
  • Disable advertising cookies in your browser settings

We will process your opt-out request within 15 business days.

How to Exercise Your California Rights:

To exercise your California privacy rights, contact us (see Contact Us section above) and:

  • Include "California Privacy Request" in the subject line
  • Specify which right you want to exercise (know, delete, correct, or opt-out)
  • Provide enough information for us to verify your identity (we will ask for your email address and may ask additional questions to confirm your identity)

Response Timeframes:

  • We will acknowledge receipt of your request within 10 business days
  • We will respond to your request within 45 days (we may extend by an additional 45 days if necessary, and will notify you)
  • Opt-out requests will be processed within 15 business days

Authorized Agents:

You may designate an authorized agent to submit requests on your behalf. The authorized agent must provide proof of authorization (written permission from you), and we may still require you to verify your identity directly with us.

California "Shine the Light" Law:

California Civil Code Section 1798.83 allows California residents to request information about personal information shared with third parties for their direct marketing purposes. We do not currently share personal information with third parties for their own direct marketing purposes.

Your Privacy Rights (GDPR and Other Regions)

Depending on where you live, you may have certain rights regarding your personal information. If you are located in the European Union, United Kingdom, or other regions with data protection laws, you have the following rights under GDPR and similar laws:

Your Rights Include:

  • Right to Access: You can request a copy of the personal information we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete personal information.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal information, subject to certain legal exceptions.
  • Right to Restrict Processing: You can request that we limit how we use your personal information in certain circumstances.
  • Right to Object: You can object to our processing of your personal information based on legitimate interests or for direct marketing purposes.
  • Right to Data Portability: You can request to receive your personal information in a structured, commonly used, machine-readable format, or ask us to transfer it to another organization.
  • Right to Withdraw Consent: If we process your data based on your consent, you have the right to withdraw that consent at any time.
  • Right to Lodge a Complaint: You have the right to complain to a data protection authority about our collection and use of your personal information.

How to Exercise Your Rights:

To exercise any of these rights, please contact us using the email addresses provided in the Contact Us section above.

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

Data Protection Authority:

If you are in the UK or EU and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority:

  • UK: Information Commissioner's Office (ICO) - ico.org.uk
  • EU: Your local Data Protection Authority

Note:

Some rights may be limited by law. For example, we may need to retain certain information for legal compliance or to complete transactions you requested. We will explain any limitations when responding to your request.

Third-Party Services and Links

We use third-party services to help operate our Services. Each of these third parties has their own privacy policies that govern how they collect and use your information. We encourage you to review their privacy policies.

Third-Party Service Providers:

  • Google OAuth: For user authentication and login. Google's Privacy Policy: policies.google.com/privacy
  • Stripe: For secure payment processing. Stripe's Privacy Policy: stripe.com/privacy
  • Google Analytics: For website analytics and usage tracking. Google's Privacy Policy: policies.google.com/privacy
  • Cloud Infrastructure Providers: For hosting and data storage. These providers may process your data on our behalf.
  • Email Service Providers: For sending transactional and marketing emails.
  • Advertising Networks: Including Google Ads, Facebook/Meta, LinkedIn, and other ad platforms for targeted advertising.

Links to Other Websites:

Our Services may contain links to other websites, apps, or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

Browser Extension Interactions:

Our browser extension allows you to interact with third-party websites. When you use the extension on a website, you are subject to that website's terms and privacy policy. We are not responsible for the privacy practices of websites you visit or automate using our extension. You are solely responsible for ensuring you have the right to capture and automate those websites.

Children's Privacy

Our Services are not intended for children under the age of 13 (or under 16 in the European Union and United Kingdom). We do not knowingly collect, use, or share personal information from children under these ages.

Age Requirements:

  • United States (COPPA): You must be at least 13 years old to use our Services
  • European Union and United Kingdom (GDPR): You must be at least 16 years old (or the minimum age in your country)
  • Other countries: You must be at least 13 years old or the minimum age required by your local law

If We Discover a Child's Information:

If we learn that we have collected personal information from a child under the applicable minimum age without proper parental consent, we will take steps to delete that information as quickly as possible.

Note:

If you believe your child has provided personal information to us, or if you have questions about how we handle children's privacy, please contact us immediately. We will work with you to delete the information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We encourage you to review this Privacy Policy periodically.

How We Notify You of Changes:

  • We will update the "Last Updated" date at the top of this Privacy Policy
  • For material changes, we will post a notice on our website or send you an email notification
  • If required by law, we will obtain your consent before implementing changes that significantly affect your privacy rights

What Constitutes a Material Change:

Material changes include (but are not limited to):

  • Changes in what types of personal information we collect
  • Changes in how we use or share your personal information
  • Changes in your rights or how to exercise them
  • Changes in our data retention practices
  • Major changes to our security practices

Your Continued Use:

By continuing to use our Services after we post changes to this Privacy Policy, you accept and agree to the updated Privacy Policy. If you do not agree with the changes, you should stop using our Services and may request deletion of your account and personal information.

Previous Versions:

If you would like to review a previous version of this Privacy Policy, please contact us and we will provide it to you if available.