Privacy Policy

UIworm (“UIworm”, “we”, “us”, or “our”) provides a hosted design system and MCP server that helps AI coding agents build higher-quality web UI. This Privacy Policy applies to uiworm.com and related services we operate (the “Service”).

We collect information in the following categories:

• Account information. When you sign up, our authentication provider (Clerk) processes identifiers such as your name, email address, and authentication credentials. We store a mirrored user record (for example Clerk user id and email) so we can operate accounts, billing, and support.
• Billing information. Paid plans are processed by our payment provider (Dodo Payments). We receive subscription and payment status metadata needed to entitle your plan. Card numbers and full payment credentials are handled by the payment provider, not stored by UIworm as raw card data.
• API keys and usage. If you create API keys, we store a secure hash of each key (not the plaintext secret after creation), key metadata, call counts, and last-used timestamps. We also record usage events for metering and plan enforcement.
• Project and MCP activity (optional context). When your AI client sends a project name or related tool-call context, we may store compact activity summaries (for example which tools were used) for product operation, abuse prevention, and admin diagnostics.
• Technical logs. Like most web services, we may process request metadata such as timestamps, IP address, user agent, route, and error diagnostics to keep the Service reliable and secure.

We use the information above to:

• Provide, operate, and improve the Service
• Authenticate users and secure accounts and API keys
• Meter usage, enforce plan limits, and process subscriptions
• Communicate about account, billing, security, or product changes
• Detect, investigate, and prevent abuse or fraud
• Comply with legal obligations

We do not sell your personal information. We do not use the content of your private product code as a training corpus for third-party foundation models simply because you connect to UIworm.

We rely on trusted processors to run the Service. These include, as applicable:

• Clerk — authentication and session management
• Convex — application database and backend functions
• Dodo Payments — checkout, subscriptions, and billing portal
• Hosting and infrastructure providers used to serve the website and MCP endpoint

These providers process data on our behalf under their own terms and privacy practices. We only share what is reasonably necessary for them to perform their services.

We and our authentication provider may use cookies or local storage that are necessary to keep you signed in, protect sessions, and remember essential preferences. We do not run advertising trackers as a core part of the product experience.

We retain account, billing, and usage records for as long as your account is active and for a reasonable period afterward where needed for security, fraud prevention, accounting, dispute resolution, or legal compliance. You may request deletion of your account data as described below, subject to those legitimate retention needs.

We use industry-standard safeguards appropriate to a SaaS product, including hashed API keys, authenticated access controls, and transport encryption (HTTPS). No method of transmission or storage is perfectly secure; please protect your API keys and account credentials.

The Service may be hosted or processed in countries other than where you live. By using UIworm, you understand that your information may be transferred to and processed in those locations, subject to applicable law and our providers’ safeguards.

Depending on where you live, you may have rights to access, correct, export, or delete personal information, or to object to certain processing. To exercise these rights, email support@uiworm.com. We may need to verify your identity before fulfilling a request.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. If changes are material, we may also provide additional notice (for example via email or an in-product message).

For privacy questions or requests, contact support@uiworm.com. Related policies: Terms of Use and Refund Policy.