Who we are
UserDemos.com is operated by the business trading as UserDemos, based in the United Kingdom. We are the data controller for the personal data described on this page. You can reach us at [email protected].
The short version
- This website, the account portal and our demos use PostHog for usage analytics and session replay. It sets a first-party cookie so we can recognise a returning visitor. If you log in, we attach that visitor to your account. There are no advertising cookies.
- Demos, including those embedded on other sites, record how they are watched (plays, pauses, completions) and the site they were watched on.
- The builder processes the public website address, brief and screens you select to generate your draft. Do not submit credentials or real customer data.
- We never sell personal data.
Data we collect and why
| Situation | Data | Purpose and legal basis |
|---|---|---|
| You create or use an account | Your name, email address, authentication records, account settings, usage, and (while you are logged in) the same identifiers sent to PostHog so product analytics can be tied to your account | To provide and secure the service, and to understand how the workspace is used. Contract and legitimate interests. |
| You email us | Your name, email address, company, and whatever you write | To reply and, if you order, to deliver the work. Legitimate interests, then contract. |
| You subscribe or buy a usage pack | Plan, Stripe customer and subscription identifiers, payment status, billing records and usage balance. Stripe handles card details. | To take payment, grant usage and manage hosting. Contract and legal obligation. |
| You build a demo | Public website address and page content, your brief, selected screenshots, generated files, model usage and cost records | To generate, store and meter your demo. Contract. |
| You visit this website | IP address, browser and request details in server logs | Security and keeping the site running. Legitimate interests. |
| Someone views an embedded demo | IP address and request details in server logs | Serving the files. Legitimate interests. Nothing is stored in the viewer’s browser by the player. |
Website and demo content
The builder reads public pages from the website address you provide, captures page material and sends the brief and selected content to an AI provider to generate a draft. Do not enter login credentials, private URLs, confidential information or real customer data. Review the generated draft before publishing because it can reproduce or infer information from the submitted material.
Cookies and browser storage
We use PostHog to measure which pages are visited, which buttons are used, how demos are played, and to replay sessions so we can see where visitors get stuck. PostHog stores a random identifier in a first-party cookie and in your browser’s local storage so that a returning visitor is recognised. On public pages and in embedded demos that identifier is anonymous. When you log in to the account portal we send your account id, name and email address so PostHog can attach later activity to you, and we clear that link when you log out. PostHog is loaded on this website, on the account portal, on demo pages and inside embedded demos. The demo player may also keep a small amount of data in the viewer’s browser, such as the muted or paused state, so the demo behaves consistently.
Third parties we rely on
- Vercel and Cloudflare provide application, network and optional browser-rendering infrastructure. They may process request details, IP addresses and public website material needed to capture and serve demos.
- Supabase provides account authentication and the PostgreSQL database used to store account, billing and demo data.
- Anthropic processes prompts and selected website material to generate demo files. Do not submit sensitive personal data.
- Stripe processes subscriptions, one-time usage purchases, billing details, payment status and tax. Stripe handles payment-card information; we store Stripe identifiers and billing state.
- Google Fonts serves the typefaces on this site. Your browser requests the font files from Google, which sees your IP address in the process. Demos embedded on your site do not load Google Fonts.
- PostHog (EU cloud) receives the page view, click, demo playback and session replay data described above, including your IP address, which it uses for approximate location. When you are logged in, it also receives your account id, name and email. See posthog.com/privacy.
- Email providers hold correspondence you send to us.
Some of these providers process data outside the UK. Where they do, we rely on the UK International Data Transfer Agreement or an adequacy decision.
How long we keep things
- Account and demo files: while the account is active, then normally up to 12 months after closure so the account can be restored or disputes handled.
- Model usage, subscriptions and payment records: for as long as needed to operate the account and meet accounting, fraud-prevention and legal obligations.
- Invoices and accounting records: 6 years, as UK tax law requires.
- Product credentials: until the project closes.
- Server logs: 30 days or less.
Your rights
Under UK GDPR you can ask us to confirm what personal data we hold about you, correct it, delete it, restrict how we use it, or give you a copy. You can object to processing based on legitimate interests. Email [email protected] and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Demos embedded on your website
When you embed a demo on your own website, you remain the controller for your visitors. The embedded player loads PostHog inside its frame and records playback and session data as described above, along with the address of the page it is embedded on. Depending on where your visitors are, you may need to cover this in your own privacy policy or consent banner; mention UserDemos as a hosting and analytics provider.
Changes
If we change this policy in a way that matters we will update the date at the top and, for current clients, let you know by email.