Privacy Policy

1. Introduction and Scope

Welcome to Stukt UI Kit Builder ("Service", "Platform", "Application"). Stukt Design Studio ("we," "our," or "us") operates the uikit.stukt.com website and associated services. This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information and data when you access, visit, or use our Service.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Policy, please discontinue use of our Service immediately.

2. Information Collection and Categories

2.1 Personal Information Directly Provided

We collect personal information that you voluntarily provide to us through various interactions with our Service, including but not limited to:

• Account registration and profile creation (name, email address, authentication credentials)
• UI Kit creation, customization, and management activities
• Customer support inquiries and communications
• Feedback, suggestions, and feature requests
• User-generated content including component configurations and design preferences

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain technical and usage information through various technologies:

• Device information (operating system, browser type and version, device identifiers)
• Network information (IP address, internet service provider, geographic location data)
• Usage analytics (pages visited, time spent, click patterns, feature utilization)
• Session data (login timestamps, session duration, authentication status)
• Performance metrics (page load times, error logs, system responsiveness)

2.3 Third-Party Authentication Data

When you authenticate using third-party services (Google OAuth, GitHub OAuth), we receive limited profile information as permitted by your privacy settings with those providers, including display name, email address, and profile image.

3. Data Processing and Usage

3.1 Primary Processing Purposes

We process your information for the following legitimate business purposes:

• Service provision, operation, maintenance, and technical support
• User account management, authentication, and access control
• UI Kit creation, storage, modification, and retrieval functionality
• Platform performance optimization and user experience enhancement
• Security monitoring, fraud prevention, and abuse detection
• Analytics and usage pattern analysis for service improvement
• Customer support and technical assistance
• Legal compliance and regulatory obligations

3.2 Data Retention and Storage

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is retained while your account remains active and for a reasonable period thereafter to accommodate potential account reactivation.

4. Third-Party Integrations and Data Sharing

4.1 Service Providers and Infrastructure

We engage trusted third-party service providers to support our operations:

• Google OAuth Services: Authentication and identity verification
• GitHub OAuth Services: Developer authentication and profile integration
• Vercel Platform: Cloud hosting, content delivery, and infrastructure services
• Database Providers: Secure data storage and management

4.2 Data Sharing Limitations

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Data sharing occurs only as necessary for service operation, legal compliance, or with your explicit consent.

5. Security Measures and Data Protection

We implement comprehensive technical, administrative, and physical security measures to protect your personal information:

• Industry-standard encryption for data transmission and storage
• Multi-factor authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy practices
• Incident response procedures and breach notification protocols

While we strive to protect your information using commercially reasonable methods, no electronic transmission or storage system is completely secure. We cannot guarantee absolute security of your data.

6. Your Privacy Rights and Controls

6.1 Individual Rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Access: Request copies of your personal information
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information
• Restriction: Limit processing of your information
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Withdrawal: Withdraw consent where processing is based on consent

6.2 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 8. We will respond to your request within the timeframe required by applicable law.

7. International Data Transfers and Jurisdictional Considerations

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards to ensure your information receives adequate protection.

8. Contact Information and Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

9. Policy Updates and Modifications

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Policy on our website and updating the "Last updated" date. Your continued use of our Service after such modifications constitutes acceptance of the updated Policy.