Privacy Policy

U2L.AI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at u2l.ai and related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address (used for authentication via magic link or OTP)
Display name (if provided)
Profile photo (if provided)
Account preferences and settings

1.2 Link and Content Data

When you use the Service to create links, QR codes, or bio pages, we store:

Original (long) URLs and shortened URLs
Link titles, tags, and folder assignments
QR code styling preferences
Bio page content and design settings
UTM parameters, A/B testing configurations, and other link settings

1.3 Analytics Data

When someone clicks a link created through U2L.AI, we may collect:

Timestamp of the click
Approximate geographic location (country, city) derived from IP address
Device type, operating system, and browser information (from User-Agent)
Referrer URL (the page the click came from)
Language preference

We do not store the full IP address of link visitors. IP addresses are used only in real-time for geographic lookup and are not retained.

1.4 Usage Data

We automatically collect certain information when you visit our website, including pages visited, time spent, and interactions with the Service. This data helps us improve the user experience.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Authenticate your identity and manage your account
Process link redirects and serve QR codes and bio pages
Provide click analytics and reporting to link creators
Send transactional communications (authentication codes, account alerts)
Detect and prevent abuse, spam, and prohibited content
Improve and develop new features for the Service
Comply with legal obligations

3. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential cookies: Required for authentication and core functionality (e.g., session tokens)
Preference cookies: Remember your settings and preferences
Analytics cookies: Help us understand how users interact with the Service

You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

4. Third-Party Services

We use the following third-party services to operate the platform:

Cloudflare: CDN, DNS, DDoS protection, edge computing (Workers), and data storage (KV, D1, R2)
Firebase Authentication: Secure user authentication via magic links and one-time passwords
Payment processors: For processing subscription payments (we do not store your payment card details)

These third-party services have their own privacy policies. We encourage you to review them.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service providers: With trusted third-party providers who assist in operating the Service (as described above)
Legal requirements: When required by law, regulation, or legal process
Safety: To protect the rights, safety, or property of U2L.AI, our users, or the public
Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your account information for as long as your account is active. Link data and analytics are retained for the duration of your account or as specified by your plan. When you delete your account, we will delete your personal information within 30 days, except where retention is required by law. Anonymous, aggregated analytics data may be retained indefinitely.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS/TLS), secure authentication, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Portability: Request a copy of your data in a portable format
Objection: Object to certain processing of your data
Restriction: Request restriction of processing of your data

To exercise any of these rights, please contact us at support@u2l.ai. We will respond to your request within 30 days.

9. International Users and GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent legislation. Our legal basis for processing your data includes: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), consent (where applicable), and compliance with legal obligations. You may withdraw consent at any time by contacting us.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@u2l.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@u2l.ai.