Privacy Policy

Percio ("we," "us," or "our") operates the Percio platform at percio.app, including the web application, CLI tool, and MCP server (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2.1 Account Information

When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign up via a third-party provider (e.g., Google, GitHub), we receive your name, email, and profile picture from that provider.

2.2 Test Data

When you run a usability test, we collect and store the target URL you submit, screenshots captured during automated browsing sessions, AI-generated flow steps and interaction logs, and persona evaluation results including identified usability issues. Screenshots are captured from the target URL's publicly accessible pages and are stored solely for the purpose of generating and displaying your test results.

2.3 Payment Information

Payments are processed by Stripe. We do not store your full credit card number or payment details on our servers. Stripe may collect and store payment information in accordance with its own privacy policy. We receive only a transaction reference, the last four digits of your card, and billing information necessary for invoicing.

2.4 Usage & Analytics Data

We collect anonymized usage analytics to improve the Service, including pages visited, features used, session duration, browser type, operating system, device type, and general geographic location (country/region level). We use third-party analytics tools to collect this data. These tools may use cookies or similar tracking technologies.

2.5 Cookies

We use essential cookies for authentication and session management. Analytics cookies may be used to understand how the Service is used. You can control cookie preferences through your browser settings.

We use the information we collect to provide, maintain, and improve the Service, process your usability tests and deliver results, process payments and manage your subscription, send transactional emails (account confirmation, password resets, test completion notifications), analyze usage patterns to improve product experience, detect and prevent fraud, abuse, or security incidents, and comply with legal obligations.

We do not sell your personal information to third parties. We do not use your test data (URLs, screenshots, or results) to train AI models.

We may share your information with the following categories of third parties, solely for the purposes described above:

• Anthropic — screenshots and test context are sent to Anthropic's Claude API for AI-powered analysis during test execution. This data is processed per Anthropic's usage policies and is not used to train their models.
• Supabase — provides authentication and database hosting.
• Stripe — processes payments securely.
• Analytics providers — anonymized usage data for product improvement.

We may also disclose information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Percio, our users, or the public.

We retain your account information for as long as your account is active. Test data (screenshots, URLs, results) is retained for the duration of your account unless you delete individual tests. Upon account deletion, we remove your personal data and test data within 30 days, except where retention is required by law.

We implement industry-standard security measures including encryption in transit (TLS/HTTPS) and at rest, secure authentication via Supabase Auth, role-based access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, export your data in a portable format, and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at privacy@percio.app.

Your data may be processed in jurisdictions outside your country of residence, including the United States. We rely on our service providers' data protection measures and, where applicable, standard contractual clauses to ensure adequate protection.

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@percio.app