Skip to content
UxerProof

Privacy

Minimal by default. Ephemeral when required.

Last updated: draft.

Draft for legal review. This document is an accurate description of intended practice, written for engineering and product alignment. It has not yet been reviewed by counsel and is not final contractual language.

1. Who we are

UxerProof is operated by Cyclotron Technologies. This notice explains what we collect when you use the platform, why, and for how long.

2. The principle

We do not attempt to store nothing — accounts, collaboration, reports, baselines, regression testing, usage and billing all need durable records. We do refuse to store anything beyond that. Raw execution artefacts are treated as disposable by design.

3. What we store

  • Account and workspace metadata
  • Project and environment configuration
  • Domain-verification state
  • AI User and Circuit definitions
  • Structured run results
  • Findings and Proof Scores
  • User-selected or redacted evidence
  • Baselines
  • Retention settings
  • Usage and billing ledger records
  • Security-relevant audit events

4. What we do not retain

  • Credentials in plaintext
  • Complete browser profiles
  • Raw HTML or DOM dumps
  • Network request or response bodies
  • Session cookies
  • Full videos
  • Unredacted form data
  • Unnecessary page content

Ephemeral raw execution artefacts are encrypted at rest and automatically deleted within 24 hours after report generation.

5. Retention modes

Standard retention

Structured reports, findings and baselines are kept for your plan's retention window. Raw execution artefacts are deleted within 24 hours of report generation.

Ephemeral Mode

Raw screenshots, traces and execution artefacts are deleted immediately after report synthesis. Structured reports and baselines are retained only when you explicitly choose to retain them.

No report retention

You export the report and all run data is scheduled for deletion. Nothing is kept beyond the usage ledger and audit record.

6. Default evidence retention by plan

  • Free: 7 days
  • Builder: 30 days
  • Team: 90 days
  • Scale: 180 days
  • Enterprise: configurable

7. Credentials

We do not store reusable credentials in any form, and there is no plaintext secrets table. Where Authenticated Circuits require access, the design uses short-lived encrypted secrets injected at execution time and destroyed with the worker. That mechanism is not yet implemented; until it is, Authenticated Circuits are unavailable.

8. Analytics

Customer application data, screenshots, findings and Circuit contents are never sent to marketing analytics or advertising platforms.

9. Your controls

  • Workspace-level export of reports, findings, baselines and the usage ledger.
  • Workspace-level deletion, which schedules all run data for removal.
  • Per-workspace retention mode, including No report retention.
  • Per-evidence redaction before anything is retained.
  • Account deletion, which removes profile data and ends membership of every workspace.

These controls live in workspace settings.

10. Processors

We use infrastructure providers for hosting, database, authentication and, once the execution service is deployed, browser execution and AI inference. A current subprocessor list will be published before general availability.

11. Contact

Privacy requests go through support.