Privacy Policy

Last updated: October 2026

Usermaven Inc. ("Usermaven", "we", "us", "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, interact with our marketing pages, request or attend a demo, or use our products and services (collectively, the "Services").

This Policy describes our practices under privacy laws that may apply to us, including the GDPR (EU & UK), CCPA/CPRA (California), LGPD (Brazil), and the DPDP Act (India).

1. Who we are & scope of this policy

1.1 Company details

• Legal entity: Usermaven Inc.
• Address: 16192 Coastal Highway, Lewes, Delaware 19958, USA
• Email: privacy@usermaven.com

1.2 Our roles in data processing

Usermaven operates in different roles depending on how personal data is collected and used.

A. When we act as a data controller

We act as a Data Controller when we determine the purposes and means of processing personal data. This includes situations such as:

• Visitors browsing our website
• Individuals who submit contact forms, request or attend demos, or receive proposals from us
• Sales leads and marketing communications
• Individuals who sign agreements or manage invoices with us on behalf of their organization
• Account owners, administrators, and invited users
• Customer support communications

In these cases, we decide why and how personal data is processed in order to operate, improve, and secure our services.

B. When we act as a data processor

We act as a Data Processor when our customers, including prospective customers during an evaluation, use Usermaven's analytics tools to collect and analyze data about their own website or application users.

In this context:

• We process data solely on behalf of our customers.
• We act only under our customers' documented instructions.
• We do not determine the purposes for which that data is collected.
• We do not use customer analytics data for our own independent purposes.

Our data processing activities in this role are governed by our Data Processing Agreement (DPA) at https://usermaven.com/dpa, which forms part of our Terms of Service, and by any other applicable agreement with our customers.

Customers are responsible for ensuring they have an appropriate legal basis for collecting and sharing data with Usermaven.

2. Personal information we collect

2.1 Information you provide directly

We collect personal information that you voluntarily provide to us, including:

• Contact data: Name, work email address, phone number (if you provide it), company name, and job title.
• Sales and demo data: Information you share when you request or attend a demo, or discuss a purchase with us, such as your company website, website traffic or event volume, the CRM and advertising platforms you use, your advertising spend, your goals, meeting times, and notes from our calls.
• Call recordings: If we record or transcribe a sales or support call, we will tell participants at the start of the call and ask for their agreement where the law requires it. Recordings and transcripts may include your voice, image, what you say, and anything shared on screen.
• Contract data: Names, job titles, signatures, and signing records (such as time stamps and IP addresses) when you sign an Order Form or other agreement electronically.
• Account data: Account credentials and authentication-related information.
• Billing data: Billing contact details, invoices, payment status, and tax information needed to process subscriptions and transactions. Card payments are handled by third-party payment providers, and we do not store full payment card details. If you pay by bank transfer, we receive the payment details shown on the transfer, such as the name of the paying account.
• Communications: Information you provide when contacting us for support, submitting inquiries, or managing communication preferences.

2.2 Information collected automatically

When you visit our website or use our services, we automatically collect certain information, including:

• Technical data: IP address, approximate geographic location (derived from IP), browser type, device type, and operating system.
• Usage data: Pages viewed, features accessed, referring URLs, timestamps, and interaction data related to website navigation.
• Diagnostic data: System logs, error reports, and performance metrics used to maintain and improve our services.

If you submit a form or book a demo, we may link the information you submit with your earlier activity on our website, so that we can understand what you are interested in and prepare for our conversation.

2.3 Information from third parties

We may receive information about you from:

• Scheduling tools, when you book a meeting with us, such as the time you chose and the details you enter.
• E-signature and payment providers, about the status of agreements and payments.
• Advertising platforms, about how our ads perform, such as whether an ad led to a website visit or a form submission.
• Public and professional sources, such as LinkedIn and company websites, and business-contact data providers, when we identify companies and people who may be interested in Usermaven and contact them about it.

3. Cookies & tracking technologies

3.1 Use of cookies and consent

We use cookies and similar technologies to support essential website functionality, security, user preferences, analytics, and advertising.

Non-essential cookies, including analytics and marketing-related technologies, are deployed only after users provide consent where required by applicable law.

We use Cookiebot as our Consent Management Platform (CMP) to:

• Display required cookie notices and banners
• Obtain and record user consent choices
• Enable or disable non-essential cookies based on user preferences
• Maintain verifiable records of consent where applicable

Users may modify their cookie preferences at any time.

For detailed information about the cookies and similar technologies we use, please see our Cookie Policy.

3.2 Analytics and advertising technologies

Analytics: We use analytics technologies, including our own product, to understand how visitors use our website and to improve it.

Advertising: We may use advertising technologies from providers such as Google, Meta, Microsoft, and LinkedIn to measure our advertising campaigns and to show our ads to people who have visited our website when they use other websites and platforms. These technologies are activated only in accordance with user consent preferences where consent is required by law. We may also share limited information, such as a hashed email address or the fact that you requested a demo, with advertising platforms to measure our ads and to build or exclude audiences. See section 6.2 for your choices.

Usability & debugging tools: We may use limited interaction analytics tools (such as heatmaps or session-based usability analysis) to understand aggregate website behavior and improve functionality. These tools:

• Operate on a limited basis
• Mask or exclude sensitive input fields

We do not use these tools to capture payment information, for targeted advertising, or to identify individual visitors. The providers of these tools may also process data under their own privacy policies.

4. How we use personal information

We use personal information for the following purposes:

• Service delivery: To operate, maintain, and provide our platform and related services, including managing accounts, subscriptions, authentication, and transactions.
• Sales and onboarding: To respond to demo requests and inquiries, schedule and prepare for calls, send proposals and quotes, prepare and sign agreements, set up accounts, and onboard new customers.
• Customer support: To respond to inquiries, provide technical assistance, and resolve service-related issues.
• Communications: To send service-related notices, account updates, security alerts, and other administrative communications. Where permitted by law, we may send marketing communications, including follow-up emails after you contact us or request a demo, and you may opt out at any time.
• Advertising: To measure the effectiveness of our advertising and to show our ads to people who have visited our website, in line with your cookie choices.
• Service improvement & security: To analyze website and platform performance, monitor usage trends in aggregate, improve functionality, prevent fraud, and protect the security and integrity of our systems.
• Legal & compliance: To comply with applicable laws and regulations, respond to lawful requests, enforce our agreements, and protect our rights.

5. Legal foundations

5.1 Legal bases (GDPR/UK GDPR)

Where applicable under the GDPR or UK GDPR, we process personal data based on one or more of the following legal grounds:

• Contractual necessity: Where processing is necessary to provide our services, manage accounts, process subscriptions, or fulfill contractual obligations, or to take steps you have asked for before entering into a contract, such as arranging a demo or preparing a proposal.
• Legitimate interests: Where processing is necessary for our legitimate business interests, including identifying and contacting businesses that may be interested in our products, responding to and following up on business inquiries, maintaining platform security, preventing fraud, improving our services, and ensuring operational reliability. We rely on legitimate interests only where they are not overridden by individuals' rights and interests.
• Consent: Where required by law, including for some marketing communications, the use of non-essential cookies or tracking technologies, and call recordings. Consent may be withdrawn at any time.
• Legal obligations: Where processing is necessary to comply with applicable laws, regulatory requirements, or lawful requests.

5.2 AI & machine learning

Usermaven does not train artificial intelligence or machine learning models using customer data or end-user analytics data.

6. Data sharing & international transfers

6.1 Data sharing

We share personal data only where necessary to operate our business and our services, and in accordance with this Privacy Policy, including with:

• Service providers: Trusted third-party providers that support our operations, such as cloud hosting providers, content delivery networks (CDNs), analytics tools, customer relationship management (CRM) and sales tools, scheduling tools, e-signature providers, video conferencing tools, customer support tools, messaging providers, AI model providers, and payment processors and resellers. These providers process data on our behalf and under contractual confidentiality and data protection obligations. Some, such as our payment reseller Paddle.com, may also process data as independent controllers under their own privacy policies (Paddle's is at https://www.paddle.com/legal/privacy).
• Advertising partners: Advertising platforms that place cookies or similar technologies on our website, or that receive the limited information described in section 3.2, as described in that section and our Cookie Policy. These platforms may also use this data for their own purposes, as described in their own privacy policies.
• Affiliates: Affiliated entities under common ownership or control, subject to appropriate confidentiality safeguards.
• Business transfers: If we are involved in a merger, acquisition, financing, or sale of all or part of our business, personal data may be transferred as part of that transaction, subject to appropriate confidentiality protections.
• Legal & regulatory authorities: Where required to comply with applicable law, enforce our agreements, or protect our rights, property, or safety.

6.2 Sale and sharing of personal information

We do not sell, rent, or trade personal information for money. We do use advertising cookies and similar technologies, as described in section 3.2 and our Cookie Policy. Under California and some other US state privacy laws, this may be treated as "selling" or "sharing" personal information, including for cross-context behavioral advertising.

You can opt out at any time by selecting "Do not sell or share my personal information" in our cookie banner, by rejecting marketing cookies in our cookie settings, or by emailing privacy@usermaven.com.

6.3 International transfers

We, our affiliates, and our service providers may process personal data in the European Union, the United States, and other countries. Where the law requires a transfer mechanism for personal data from the EU, EEA, or UK, we rely on one, such as the Standard Contractual Clauses (SCCs).

7. Security & retention

We use technical and organizational measures designed to protect personal data, which may include encryption where appropriate, access controls, authentication measures, and monitoring of our systems. No method of transmission or storage is completely secure, but we work to protect personal data against unauthorized access, loss, and misuse.

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to meet legal, accounting, or reporting obligations. For example:

• Sales and demo records are kept while we are discussing a possible purchase with you, and for a reasonable period afterwards so that we can follow up and keep an accurate record of our business relationship.
• Call recordings and transcripts are kept only for as long as needed for staff training, quality, and record-keeping.
• Data in demo or evaluation workspaces is kept for a limited period after the evaluation ends, so that it is available if you become a customer. You can ask us to delete it at any time.

Customer analytics data processed on behalf of our customers is retained and deleted in accordance with our DPA and customer instructions.

When personal data is no longer required, we delete or anonymize it in accordance with our internal retention policies.

8. Your privacy rights

Where required by applicable law, individuals may have certain rights regarding their personal information.

These rights may include:

• Access: The right to request confirmation of whether we process your personal information and, where applicable, obtain access to that information.
• Correction: The right to request correction of inaccurate or incomplete personal information.
• Deletion: The right to request deletion of personal information, subject to legal, contractual, or legitimate business limitations.
• Restriction or objection: The right, in certain circumstances, to request restriction of processing or to object to processing based on legitimate interests.
• Withdrawal of consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Data portability (where applicable): The right to receive personal information you provided to us in a structured, commonly used format, where technically feasible and legally required.
• Opting out of sale, sharing, and targeted advertising: The right to opt out of the sale or sharing of personal information, including for targeted advertising. See section 6.2 for how to opt out.
• Complaint: The right to lodge a complaint with a data protection authority, in particular where you live or work, or where you believe an infringement took place.

Regional specifics

• California (CCPA/CPRA): California residents may have the right to know about, access, correct, or delete personal information, and to opt out of its sale or sharing, subject to statutory exceptions. See section 6.2 for how to opt out. We will not discriminate against you for exercising these rights.
• Brazil (LGPD): Brazilian residents may have rights to confirmation of processing, access, correction, anonymization, portability, and deletion, subject to legal limitations.
• India (Digital Personal Data Protection Act, 2023): Indian residents may have rights to access, correction, erasure, and grievance redressal under applicable law.

9. Children's privacy

Our Services are not directed to children and are not intended for individuals under the age of 16, or the equivalent minimum age in the relevant jurisdiction. We do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child without appropriate authorization, we will take reasonable steps to delete such information.

10. Contact & exercise of rights

To exercise any applicable privacy rights, please contact us at:

Email: privacy@usermaven.com

If your request relates to personal data processed by Usermaven on behalf of one of our customers, we may direct your request to the relevant customer, as they act as the Data Controller for such data.

We may take reasonable steps to verify your identity before responding to your request. We will respond within the timeframes required by applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above.