Userfront Privacy Policy

Thanks for visiting Userfront! This Privacy Policy describes what information we collect and how it's used and shared.

Note that any capitalized terms not defined in this Privacy Policy have the meanings set forth in our Terms of Service. If you don't agree with the terms of this Privacy Policy, you may not access or use the Services. If you have any comments or questions about this Privacy Policy, feel free to contact us at team@userfront.com.

1. Privacy Principles

We believe in transparency about how we handle your information and we believe in the following principles: first, we don't sell your personal information to anyone. It's just not the type of business we're in. Second, we don't ask for your personal information unless we need it to provide or improve the Services for you. Third, we don't share your personal information unless you've specifically allowed it, or for the very limited purposes described below. Finally, we appreciate that when you use our Services, you trust us with your information, and we take that responsibility very seriously. This Privacy Policy holds us accountable for protecting your rights and your privacy.

By submitting information through our Service, you agree to the terms of this Privacy Policy (or, if you are acting on behalf of your employer or other organization, you agree on behalf of such organization) and you expressly consent to the processing of such information according to this Privacy Policy.

In particular, you understand that information may be processed in the country where it was collected as well as other countries (including the United States) where laws regarding processing of information may be less stringent than the laws in your country, and you consent to such processing.

If you are submitting information pertaining to third parties for processing through our Service, you represent and warrant that you have adequately disclosed to such third parties that information about them would be processed by a service provider, and that these third parties did not object to the use of such services.

3. Collection

When you use the Services, we collect the following information, and use it only as described below:

3.1. Account Information. This may include your name, address, email address and phone number. We use this information in the ways you would expect, such as to set up your Account or contact you.

3.2. Third Party Account Information. If you use Third Party Services, such as social media or photo-sharing services, you may provide us with your Third Party Services account information, such as your username (note that we don't store any passwords you use to access Third Party Services). We transmit, and may store, such account information, only as needed to provide the Services, and only in accordance with the terms and policies of the Third Party Services.

3.3. Payment Information. When you initially provide or update your payment information, we transmit it via an encrypted connection to our Payment Processor, Stripe. Stripe uses and processes your payment information in accordance with Stripe's Privacy Policy. We don't store your payment information, other than your zip code and country, which we require for billing and to comply with tax and other government regulations.

3.4. Communications With Us. When you send us emails or other communications, such as customer support inquiries, we maintain those communications and their contents so that we can resolve your inquiries or otherwise assist you.

3.5. Public Comments On The Services. We maintain any comments, contributions to discussions or messages submitted to users of the Services, in order to provide the Services.

3.6. Files You Provide Us. When you use the Services, we store, process and transmit your User Content (such as your photos) and information related to your User Content. We process and store such files and information in order to provide the Services, as described in our Terms of Service.

3.7. Usage Information. This includes information about your activity on and interaction with the Services, such as your IP address, your device or browser type, the web page you visited before coming to our sites and identifiers associated with your devices. This information enables us to analyze how the Services are being accessed and used, and to track performance of the Services.

3.8. Location Information. Your devices (depending on your settings) may transmit location information to the Services. We use this information to customize, improve and protect the Services. For example, we may use your location information to determine local language preferences.

3.9. Cookies And Other Technologies. We use these technologies to do things such as remember your preferences, keep you safe and improve and promote the Services.

Cookies are small pieces of text sent to your browser when you visit a site. They serve a variety of functions, like enabling us to remember certain information you provide to us as you navigate between pages on the Services. We use cookies for the following purposes:

Authentication, Personalization And Security. Cookies help us verify your Account and device and determine when you're logged in, so we can make it easier for you to access the Services and provide the appropriate experiences and features. We also use cookies to help prevent fraudulent use of login credentials.
Performance And Analytics. Cookies help us analyze how the Services are being accessed and used, and enable us to track performance of the Services. For example, we use cookies to determine if you viewed a page or opened an email. This helps us provide you with information that you find interesting. We also use cookies to provide insights regarding Your Sites' performance.
Third Parties. Third Party Services may use cookies to help you sign into their services from our Services. We also may use third party cookies, such as Google Analytics, to assist with analyzing performance. Any third party cookie usage is governed by the privacy policy of the third party placing the cookie.
Opting Out. You can set your browser to not accept cookies, but this may limit your ability to use the Services.

3.10. Data Provided by Your End Users. We may store information submitted by End Users of your website via tools that you develop on Userfront, such as forms or other modules you have built with Userfront. We do this for the purpose of maintaining these records in a convenient format on your behalf, and we store this information only as needed to provide the Services. We do not otherwise collect or store personal information about End Users of your website.

When you use the Services, we may share your information only as described below:

4.1. Third Parties You Authorize. You can give third parties access to your and your End Users' information on the Services. For example, you may wish to integrate Your Components with a third party newsletter service that requires access to the email addresses you collect from your End Users, in order for that newsletter service to send emails on your behalf and at your direction. Just remember that such third party's use of this information will be governed by the terms and privacy policies of the third party.

4.2. Following The Law. We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to comply with the law, protect our rights or prevent fraud or abuse of Userfront or our users. When we receive law enforcement or national security requests for information, we strongly believe in privacy and transparency. We scrutinize such requests carefully and challenge vague, overbroad or otherwise unlawful requests. And when legally permitted, we provide our users with notice that their information is being requested. This notice is provided so that you have the opportunity to challenge such requests.

4.3. Others Working For Userfront. Userfront uses certain trusted third parties to help us provide, improve, promote and protect the Services. For example, we may use third parties to help us provide customer support, manage our ads on other sites or assist with data storage. These third parties may access, process or store your information to perform tasks only for the purposes we've authorized, and we require them to provide at least the same level of protection for your information as described in this Privacy Policy. We also may share with third parties aggregated or anonymized information that does not directly identify you.

4.4. Business Transfers. If we're involved in a reorganization, merger, acquisition or sale of our assets, your information may be transferred as part of that deal.

5. Protection

While no service is completely secure, our team is dedicated to keeping your information safe. We employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network (so that if one server goes down, another can cover for it) and testing for and protecting against network vulnerabilities. Payment information is transmitted using HTTPS encryption directly to our payment processor Stripe and never passes through our servers.

6. Retention

6.1. Information You Provide. We'll retain your personal information for as long as we need it to provide you with the Services. You can ask for your personal information to be deleted at any time by deleting your Account or contacting us at team@userfront.com. Please note that there may be latency in deleting your personal information from our servers and backup storage, and we may retain your personal information in order to comply with the law, protect our rights, resolve disputes or enforce our agreements.

6.2. Information Your End Users Provide. We'll retain data provided by your End Users consistent with Section 3.10 on your behalf for 24 months. You can change this retention period in your project settings, and you may ask that this information be deleted at any time by contacting us at team@userfront.com.

7. Location

Information that you submit through the Services may be transferred to countries other than where you live (for example, to our servers in the US). We also may store information locally on the devices you use to access the Services. We also may transfer information to third parties outside the US for processing or to support the Services, and we require them to provide at least the same level of protection for your information as described in this Privacy Policy.

8. Access

To modify or delete the personal information you have provided to us, simply email us at team@userfront.com. We may retain certain information as required by law or for necessary business purposes. On request, we'll provide you with a copy of your personal information that we maintain. This request may be subject to a fee not exceeding the prescribed fee permitted by law.

9. Communications

We may periodically email you service-related announcements. We may also send you marketing or promotional communications, but you can opt out of receiving subsequent marketing or promotional communications by clicking the link marked unsubscribe (or a similar phrasing) that's included in those communications.

10. End User Information

10.1. Collection And Use Of End User Information. You may use the Services to create Your Projects, and Your Projects may have End Users. We may collect, use or delete the same types of information described in Section 3, above, from your End Users, on your behalf and at your direction, and we treat such information in accordance with this Privacy Policy. We do this in order to enable you to use the Services, and to provide, improve and protect the Services.

10.2. Your Relationship With End Users. You can collect and view your End Users' information at any time. However, you're solely responsible for complying with any laws and regulations that apply to your End Users' information, including without limitation the posting of your own privacy policy. We're not liable for your relationship with your End Users, and we won't provide you with any legal advice regarding such matters.

10.3. A Message To The End Users. Hello, End User! We hope you create your own project with Userfront someday! However, Userfront has no direct relationship with you. If you'd like to make any requests regarding your personal information, please contact the owners of the site you've visited or used, as they control your data. They may then submit any such information requests to us, and we'll respond to them. We retain your information in accordance with this Privacy Policy.

11. Data Privacy Framework (DPF) Statement

This Data Privacy Framework Statement is effective as of February 3, 2024.

Userfront, Inc. (“Userfront”) adheres to the EU-U.S. DPF Principles, as set forth by the U.S. Department of Commerce, regarding the processing of personal information transferred from the European Union to the United States in reliance on the EU-U.S. DPF, and from the United Kingdom (and Gibraltar) to the United States in reliance on the UK Extension to the EU-U.S. DPF.

To learn more about the DPF program, and to view the scope of Userfront’s certification, please visit https://www.dataprivacyframework.gov. Userfront is subject to the investigatory and enforcement powers of the Federal Trade Commission.

If there is any conflict between the terms in this DPF Statement and the applicable DPF Principles, the applicable DPF Principles shall govern.

Userfront may also disclose personal information, in accordance with our Privacy Policy, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Userfront may be liable in accordance with the DPF Principles for onward transfers of personal data governed by the DPF program to third parties processing personal data on our behalf.

Userfront also commits to resolve complaints about your privacy and our collection or use of personal information transferred from the EU or United Kingdom (and Gibraltar) to the U.S. in compliance with the DPF Principles. If you have any questions about this DPF Statement or wish to make a complaint, you may contact us at team@userfront.com.

If you do not receive timely acknowledgment of your DPF-related complaint from us, or if your complaint is not satisfactorily addressed, you may contact or visit the BBB National Programs DPF Service for more information and to file a complaint, at no cost to you.

12. Modifications

We may modify this Privacy Policy from time to time, and will post the most current version on our site. If a modification meaningfully reduces your rights, we'll notify you in accordance with the procedures set forth in our Terms of Service. Contact Us

If you have any questions or feedback regarding this Privacy Policy, please let us know. Please contact us at team@userfront.com.