Privacy Policy

Last updated: 2026-07-11

1. What Data We Collect

Depending on your region and choices, we may collect:

  • Page views and the pages you visit on our site
  • Advertising click identifiers (e.g. fbclid) and the _fbc / _fbp cookies
  • Your IP address and browser user-agent
  • An anonymous first-party identifier we generate (ulf_eid) to link your visits
  • Email, name, and phone number — only if and when you provide them
  • If you submit your email, we store a one-way hashed (SHA-256) version of it in a first-party cookie (ulf_em) — never the readable address — so we can match your later visits for advertising measurement. It is removed automatically if you opt out, withdraw consent, or enable Global Privacy Control, and is never stored without consent in the EU/UK.
  • If you use our free offer-building tool at build.ulfor.com: the answers you type into it (business, customer, and offer descriptions), stored under an anonymous session, and — only if you request your documents by email — your email address.

2. Who We Share It With

We share certain data with Meta Platforms, Inc. (Facebook/Instagram) for advertising measurement and retargeting, via the Meta Pixel and the Meta Conversions API (a server-side channel that transmits hashed identifiers, your IP address, user-agent, and ad click IDs). Data shared with Meta may include hashed email/name/phone (when provided), your IP address, user-agent, the pages you view, and Meta advertising identifiers. See Meta's Privacy Policy.

We also rely on service providers that process data on our behalf:

  • Vercel — hosts our websites and detects your approximate region (country) to apply the correct privacy rules
  • Supabase — stores our databases, including consent/opt-out records, leads, and tool sessions
  • Anthropic — provides the AI that generates your documents in the build.ulfor.com tool; it processes the business and customer descriptions you type there (never your email)
  • Resend — delivers the documents you request by email
  • n8n and Airtable — route and store lead and contact-form information so we can follow up with you

3. Why We Collect It

To measure the performance of our advertising, attribute conversions, and show you relevant ads (retargeting); and, on build.ulfor.com, to generate your persona and offer documents and deliver them to you. We do not use this data to make automated decisions about you.

4. Legal Basis

  • EU / EEA / UK: your explicit consent, collected via our cookie banner. No advertising tracking occurs until you accept, and you may withdraw consent at any time.
  • United States: our legitimate interest in advertising, with a right to opt out of the sale/sharing of your information at any time (see Section 6). We honor Global Privacy Control (GPC) signals automatically.

5. How Long We Keep It

Retargeting audience data is retained for up to 180 days. Records of customers or leads who have opted in are kept until you ask us to delete them. Consent and opt-out records are kept as long as required to demonstrate compliance.

6. Your Rights & Choices

  • Access & portability: request a copy of the personal data we hold about you
  • Deletion: request that we delete your personal data
  • Withdraw consent (EU/UK): use the “Cookie Settings” link in our footer at any time
  • Opt out of sale/sharing (US): use the Do Not Sell or Share My Personal Information link in our footer, or enable Global Privacy Control in your browser

To exercise access, deletion, or portability rights, email us at the address in Section 7. (A self-serve data-request form is planned for a future release.)

7. Contact Us

For any privacy request or question, contact privacy@ulfor.com.

8. Changes to This Policy

We may update this policy from time to time. The current version is dated 2026-07-11 (shown at the top of this page). Material changes will be reflected by an updated version date.