Privacy Policy

Who we are

Uxelith is run from India. "We" on this page means Uxelith, the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023. Write to support@uxelith.com about anything on this page.

What we collect

• Your account: your email address, your password (stored only as a salted hash we can't read back), when you confirmed your email and when you signed up. We use it to sign you in, send the emails your account needs (confirming your address, resetting your password) and tell you about your purchases.
• Your orders: the plan, the price, the currency, the dates and whether the payment went through. We never see or store your card or bank details.
• Licence keys and installs: the name you give each key, when it was last used, and a record of each Pro item installed with it: the item, the time and a scrambled one-way code made from your IP address (not the address itself). It lets us spot a key that has leaked and check a refund request.
• Page speed: when a page loads, your browser reports how fast it was (Core Web Vitals) with the page's path. Nothing in it identifies you; we use it to keep the site fast.
• Server logs: like every website, our servers log requests: IP address, browser, the page asked for and the time. We use them to keep the site secure and working, and to limit abuse.
• What you send us: if you email us, we keep the conversation to help you.

What we don't do

• No advertising, no ad networks, no third-party analytics or tracking scripts.
• We don't sell, rent or trade personal data.
• Images you drop into the theme generator or the Studio stay in your browser; they're never uploaded to us.

Cookies and your browser

We set two cookies, both needed for the site to work, and only when you use your account:

• sessionid keeps you signed in, for up to 30 days. Your browser can't read it from JavaScript, and it's only sent over HTTPS.
• csrftoken protects your account forms from requests made by other sites.

Your browser's own storage keeps a few preferences, such as light or dark mode and the theme you were previewing. They never leave your device.

Who else handles it

We use a small number of service providers, each only for its own job:

• Dodo Payments takes your payment as the merchant of record: it collects your card or bank details, charges the tax that applies and sends your receipt, under its own privacy policy. It tells us the order's outcome.
• An email delivery provider sends the emails your account needs, so it receives your address and the message.
• Our hosting provider runs the servers that store the data above.

These providers may be outside India. We share only what each needs, and we may disclose data when the law requires it.

How long we keep it

• Your account, licence keys and install records: while your account exists, then deleted with it.
• Orders: as long as tax and accounting law requires, even after you close your account.
• Server logs: a few weeks.

Your rights

You can ask for a summary of the personal data we hold about you, ask us to correct it, or ask us to delete your account. If you live in the EU, the UK or elsewhere with similar laws, you have the rights those laws give you too. Write to support@uxelith.com from your account's address and we'll answer within 30 days.

Complaints go to our grievance officer, Anil Kumar, at the same address. If you're not satisfied with our answer and you're in India, you can complain to the Data Protection Board of India.

Children

Uxelith is for professionals. Accounts are for people 18 or older, and we don't knowingly collect data from children.

Changes and contact

If we change what we collect or why, we'll update this page and its date, and email account holders before a change that matters. The Terms of Service and Refund Policy cover the rest of how Uxelith works.