Privacy Policy

Overview

Heuristic Studio (“we”, “us”, or “our”) provides a platform for running UX heuristic evaluations. This policy explains what information we collect when you use the service, how we use it, where it is stored, and the choices you have. We collect only what we need to run the product, and we never sell your data.

Information we collect

We collect the following categories of information:

• Account information. When you sign in with Google, we receive your name, email address, and profile picture through Google OAuth, handled via Supabase Auth. We do not receive or store your Google password.
• Evaluation data. The projects, evaluations, findings, severity ratings, and notes you create while using the product.
• Screenshots and annotations. Images you upload for evaluation, along with any annotations you draw on them. Please avoid uploading screenshots that contain personal data of others unless you have permission to do so.
• Technical information. Basic logs required to operate and secure the service, such as authentication events.

How we use your information

• To provide the service: storing and displaying your projects, evaluations, findings, and screenshots.
• To authenticate you and keep your account secure.
• To power optional AI analysis: when you request AI-assisted analysis, the relevant screenshot is processed to suggest findings. AI analysis runs only when you explicitly trigger it.
• To respond to support requests you send us.
• To maintain, debug, and improve the product.

We do not sell your personal information, and we do not share it with third parties for advertising purposes.

Where your data is stored

Your account information, evaluation data, and screenshots are stored with Supabase, our hosting and database provider. Data is protected by row-level security policies so that each user can only access their own projects and evaluations. Data is encrypted in transit.

Cookies and local storage

We use cookies and browser local storage strictly for the operation of the product:

• Authentication cookies keep you signed in between visits.
• Local storage may hold interface preferences and in-progress work so you do not lose it while navigating.

We do not use third-party advertising or cross-site tracking cookies.

Your rights

You can access and edit your evaluation data at any time from within the app. You may also request:

• Access — a copy of the personal data we hold about you.
• Deletion — removal of your account and all associated data, including screenshots.
• Correction — fixes to inaccurate account information.

To exercise any of these rights, email us at hello@heuristicstudio.design. We aim to respond within 30 days.

Data retention

We keep your data for as long as your account is active. If you request deletion, we remove your account data and uploaded screenshots from our systems, except where a short retention period is required for backups or legal compliance.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the service after a change means you accept the updated policy.

Contact

Questions about this policy or your data? Email us at hello@heuristicstudio.design.