Legal

1. Who we are

ur-i.am is run by Codebox Development Limited ("we", "us", "our"), a company registered in England and Wales under company number 08339880. Our registered office is at 7 De Havilland Drive, Liverpool, England, L24 8RN. You can contact us at legal@codebox.co.uk.

2. These terms

These terms apply whenever you use ur-i.am, whether as a visitor, a member with a free account, or a paying member. By taking the survey, creating an account or buying anything from us, you agree to them. If you do not agree, please do not use the service.

Our Privacy Policy explains how we handle your personal data and forms part of these terms. If the two documents say different things about data protection, the Privacy Policy applies.

3. Eligibility

You must be at least 16 years old to use ur-i.am. By using the service you confirm that you are. If we learn that someone under that age has created an account, we will close it and delete the personal data we hold, as described in our Privacy Policy.

ur-i.am is for your own personal use. You may not use it on behalf of a business, or to assess other people, unless we have agreed to that in writing.

4. Your account and security

You can take the survey and see a basic profile without an account. To save your results, connect with other members, share results or buy anything, you need an account. You can register with an email address and password, or with Sign in with Google.

You agree to:

• give us accurate information and keep it up to date;
• keep your password private and not let anyone else use your account;
• tell us straight away at legal@codebox.co.uk if you think someone else has used your account.

You are responsible for what happens under your account unless it results from our failure to keep the service reasonably secure. We may ask you to confirm your identity before we act on a request about your account.

5. The free service

The DISC survey, your basic profile and the ability to connect with other members and share results are free. Your results naturally lose confidence over time. When that happens we will invite you to answer more questions to refresh them. You do not have to, but your results will be shown with lower confidence until you do.

We may change what the free service includes, but we will not take away a paid feature you have already bought except as set out in section 14.

6. Paid features

We offer two kinds of paid feature:

• A one-off purchase, which unlocks the full profile and AI-tailored content for a single result.
• A subscription, billed monthly or annually, which includes a set number of AI tailorings in each billing period. The number is shown on the pricing page when you subscribe.

A one-off purchase is tied to the result you bought it for and does not transfer to other results. Unused AI tailorings do not carry over from one billing period to the next unless the pricing page says they do.

7. Prices and payment

Prices are shown in pounds sterling and include VAT where it applies. The price you pay is the price shown when you confirm your order. We may change our prices at any time. A change will not affect a purchase you have already made, and section 8 explains how we handle a price change to a subscription you already have.

If you are under 18, you need the permission of a parent or guardian before you buy a paid feature.

Payment is taken by our payment provider, Stripe. We never see or store your full card details. By making a payment you authorise Stripe to charge the payment method you choose. If a renewal payment fails, we may pause the related paid feature until payment is made.

8. Subscriptions, renewal and cancellation

Subscriptions renew automatically at the end of each monthly or annual period until you cancel. On each renewal date we will charge the then-current price to your saved payment method.

You can cancel at any time from your profile page. Cancellation takes effect at the end of the current paid period: you keep access until then, and you will not be charged again. We do not refund the unused part of a period, except where section 9, section 14 or section 16 says otherwise.

If we increase the price of your subscription, we will email you at least 30 days before the increase applies so that you can cancel first if you wish.

9. Your right to cancel and refunds

As a consumer you normally have 14 days from the day you buy something from us to change your mind and receive a full refund. This applies to one-off purchases and to new subscriptions (counted from the day you first subscribe, not from each renewal).

There is an important exception for digital content. When you make a one-off purchase or start a subscription, the paid content is made available to you straight away. By asking us to supply paid digital content immediately you acknowledge that you lose the right to cancel once supply begins.

If you start a subscription and cancel it within 14 days, we will refund what you paid less a fair amount for the part of the period you have used and any AI tailorings you have generated.

If a paid feature is faulty or not as described, you have rights under the Consumer Rights Act 2015, including the right to have it put right or to a price reduction. To ask for a refund or report a problem, email legal@codebox.co.uk. Refunds are made through Stripe to the original payment method, normally within 14 days of our agreeing to them. Nothing in these terms affects your statutory rights.

10. Acceptable use

You must not:

• harass, bully, threaten, impersonate or intimidate other members, or use connections, sharing or messages to do so;
• keep sending connection requests to someone who has declined or removed you;
• share another member's results outside the service, or with anyone they have not chosen to share with, without their agreement;
• upload a photo of someone else, any image you do not have the right to use, or anything unlawful, offensive, indecent or misleading;
• scrape, crawl, copy or bulk-download the service, its content or other members' data, or access it by automated means except through features we provide;
• try to get round any security, payment or access control, or probe the service for weaknesses;
• use the service, or anyone's results, for recruitment, hiring, promotion, dismissal or other decisions about people, or to build a competing product;
• break the law, or help anyone else to.

If we reasonably believe you have broken these rules we may remove content, remove connections, or suspend or close your account, as set out in section 16.

11. Your content and the licence you give us

You own the content you add to ur-i.am: your profile photo, the context you type in for AI tailoring, and anything else you provide. Your survey answers and results are personal data about you and are handled as described in our Privacy Policy.

So that we can run the service, you give us a non-exclusive, worldwide, royalty-free licence to store, copy, resize, display, process and back up your content, to show it to the members you choose to connect or share with, and to send the parts of your profile and context that are needed to our AI provider so that it can generate tailored content for you. The licence lasts for as long as the content is on the service and ends when you delete it or close your account, apart from backup copies, which are removed in our normal backup cycle. We will not use your content for any other purpose without asking you.

You promise that you have the right to upload what you upload and that it does not infringe anyone else's rights.

12. AI-generated content and DISC results

Some content on ur-i.am, such as tailored advice, is generated by an artificial intelligence model from your DISC profile and the context you provide. AI-generated content:

• may be inaccurate, incomplete, generic or out of date;
• is general information for your own reflection;
• is not professional, medical, psychological, HR, financial or legal advice, and you should not rely on it as if it were.

DISC describes communication and behavioural preferences using four colours: Red (Dominant), Yellow (Inspiring), Green (Stable) and Blue (Analytical). It is a model, not a psychological assessment or diagnosis, a measure of ability or character, or a prediction of how someone will perform. You must not use ur-i.am results, yours or anyone else's, as a hiring tool or for any decision that has a legal or similarly significant effect on a person.

13. Intellectual property

Everything that makes up ur-i.am, including the survey questions, profile texts, colour system, design, software, logos and the ur-i.am name, belongs to us or our licensors and is protected by intellectual property law. We give you a personal, non-transferable licence to use the service and to download, print and keep your own results, including any PDF you generate, for personal use. You may not copy, sell, rent, reverse engineer or make derivative works from the service or its content except where the law allows. DISC is a widely used behavioural model and we do not claim to own the model itself.

14. Service availability and changes

We aim to keep ur-i.am available at all times but cannot promise that it will be. We may suspend it for maintenance, upgrades or security reasons, and we will try to give notice of planned downtime where practical.

We may improve or change the service, including the survey, how results are calculated and presented, how quickly results lose confidence, and which AI model we use. If a change materially reduces a paid feature you are paying for, we will tell you, and you may cancel and receive a refund of the unused part of any period you have paid for in advance. We may withdraw the service altogether on reasonable notice, in which case we will refund any prepaid, unused period.

15. Our liability to you

Nothing in these terms excludes or limits our liability for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for anything else that the law does not allow us to exclude or limit. Nothing in these terms takes away your statutory rights as a consumer.

Subject to that, we are responsible for loss or damage you suffer that is a foreseeable result of our breaking these terms or failing to use reasonable care and skill. Loss is foreseeable if it is obvious that it will happen or if, when the contract was made, both of us knew it might. We are not responsible for:

• loss that was not foreseeable;
• business losses, because ur-i.am is for personal use only;
• loss caused by relying on AI-generated content or DISC results in a way that section 12 says you should not;
• loss caused by events outside our reasonable control, including the failure of third-party services we depend on;
• the content or conduct of other members.

If we are liable to you in connection with a paid feature for anything other than the matters listed in the first paragraph of this section, our total liability is limited to the amount you have paid us in the 12 months before the event giving rise to the claim.

16. Suspension and termination

You can close your account at any time by emailing legal@codebox.co.uk. Self-service account deletion is not yet available. Closing your account ends any subscription at the end of the current paid period and does not entitle you to a refund except as set out in section 9.

We may suspend or close your account, giving you notice where it is reasonable to do so, if you seriously or repeatedly break these terms, if your use creates a security or legal risk, if the law requires it, or if we withdraw the service. If we close your account for a reason that is not your fault, we will refund any prepaid, unused subscription period.

Sections 11 (for backups only), 12, 13, 15 and 18 continue to apply after your account is closed.

17. Changes to these terms

We may update these terms to reflect changes in the law, in our service or in how we operate. We will post the new version here with a new "Last updated" date. For changes that materially affect you, we will email registered members at least 30 days before the change takes effect. If you do not agree with a change, you can close your account before it applies. Continuing to use the service after that date means you accept the new terms.

18. Governing law and disputes

These terms are governed by the law of England and Wales, and the courts of England and Wales can deal with any dispute about them. If you live in Scotland you may also bring proceedings in Scotland, and if you live in Northern Ireland you may also bring proceedings in Northern Ireland. Nothing in this section removes any protection you have under the law of the part of the UK where you live.

If you have a problem, please contact us first at legal@codebox.co.uk and we will try to sort it out with you. We are not currently a member of an alternative dispute resolution scheme.

19. Contact

• Email: legal@codebox.co.uk
• Post: Codebox Development Limited, 7 De Havilland Drive, Liverpool, England, L24 8RN

1. Who we are

ur-i.am is run by Codebox Development Limited, a company registered in England and Wales under company number 08339880, with its registered office at 7 De Havilland Drive, Liverpool, England, L24 8RN. We are the controller of the personal data described in this policy, which means we decide how and why it is used. You can contact us about anything in this policy at legal@codebox.co.uk.

2. What this policy covers

This policy explains what personal data we collect when you use ur-i.am, why we collect it, who we share it with, how long we keep it and what rights you have. It is written to meet the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

It does not cover other websites we link to, including Google's and Stripe's own pages, which have their own privacy notices.

3. The information we collect

Depending on how you use the service, we collect:

• Account details: your name and email address. If you register with a password, it is held by our authentication provider in hashed form and we never see it. If you use Sign in with Google, Google sends us your name, email address and profile picture link.
• Profile photo: optional, if you choose to upload one.
• Survey answers and results: your answers to the DISC survey, the profile we calculate from them (your Red, Yellow, Green and Blue scores and type), how the confidence of that profile changes over time, and any further questions you answer to refresh it.
• AI tailoring: any context you type in to have your profile tailored, and the tailored content that is produced.
• Connections and sharing: which members you connect with, what you choose to share with them and what they share with you.
• Purchases and subscriptions: what you bought, when, the amount, its status, and reference numbers that let us match our records with Stripe's. Your card details are handled entirely by Stripe and are never stored by us.
• Messages: anything you send through the "Get in touch" form, including your optional answer to "how did you hear about us".
• Email preferences: which types of email you have switched on or off.
• Technical logs: your IP address, browser type, the pages and actions you request, and timestamps, which we use for security and troubleshooting.
• PDFs: a copy of any PDF of a result that you generate.

We do not ask for, and do not want, sensitive information such as health details, and we ask you not to type it into the AI tailoring context or the contact form.

4. How we use your information and our lawful bases

UK data protection law requires us to have a lawful basis for each use of your data. These are ours:

• Running your account and providing the free and paid features: saving your results, generating profiles, tailoring content, connections and sharing, subscriptions and one-off purchases, PDFs, and emails about your account or orders. Lawful basis: performance of our contract with you.
• Keeping the service secure and preventing fraud and misuse: technical logs, reCAPTCHA on registration and contact forms, security cookies during sign-in. Lawful basis: our legitimate interest in protecting the service and its members.
• Improving the service: understanding which pages and features are used and where things go wrong, using our own logs and records and, only if you accept analytics cookies, Google Analytics. Lawful basis: our legitimate interest in running a good service, and for Google Analytics your consent, which you can withdraw at any time.
• Service emails: telling you about things you need to know, such as a confirmed order, a failed payment, a change to these terms, or a result that has lost confidence. Lawful basis: our contract with you and our legitimate interest in keeping you informed.
• Optional emails: news, tips and similar emails. Lawful basis: your consent. You can switch these off at any time on your email preferences page or by using the link in any such email.
• Keeping financial records. Lawful basis: our legal obligation to keep accounting records.
• Replying to your messages. Lawful basis: our legitimate interest in answering you, and our contract with you where your message is about your account or an order.

Where we rely on legitimate interests we have weighed them against your rights and interests, and you can object at any time (see section 9).

5. Who we share your information with

We use a small number of service providers who process personal data on our behalf and only on our instructions:

• Amazon Web Services: hosts the service, stores uploaded files such as profile photos and PDFs, runs our authentication service (Amazon Cognito) and sends our emails (Amazon Simple Email Service). Our primary region is London (eu-west-2).
• Google: provides Sign in with Google if you choose to use it, and reCAPTCHA on our registration and contact forms to block automated abuse. Google may set its own cookies when reCAPTCHA loads, and processes the data it collects under its own privacy policy. If you accept analytics cookies, Google also provides Google Analytics, which tells us how the site is used. We configure it not to receive your name, email address or account identifiers, with advertising features and Google signals turned off.
• Stripe: processes payments and manages subscription billing. Stripe collects your card details directly; we never see them.
• OpenAI: generates AI-tailored content from your DISC profile and the context you enter. We send OpenAI only what is needed to produce the tailored content.

We also share information with other members, but only what you choose to share with them through connections and sharing. We may disclose information if the law requires it, for example to a court or regulator, or to our professional advisers where that is necessary.

We never sell your personal data, and we do not share it with advertisers.

6. Where your information is stored and international transfers

Your account data is stored in the UK, and our primary hosting region is London. Generating AI-tailored content involves sending your profile and context to OpenAI in the United States. That transfer is made under safeguards recognised by UK law, so that your data receives a level of protection that is essentially the same as in the UK. Where any of our other providers process data outside the UK, they do so under their own UK-compliant safeguards. You can ask us for more detail about these safeguards at legal@codebox.co.uk.

7. Cookies and local storage

We use cookies that are strictly necessary for the service to work:

• A sign-in session cookie, which holds an opaque identifier and nothing else, so that we know you are signed in.
• Short-lived cookies that return you to a pending order or a result after you sign in.
• Security cookies used during the sign-in process to protect against forged requests.
• Cookies that Google may set when reCAPTCHA loads on the registration and contact forms, to tell people from automated scripts.
• A cookie that remembers whether you accepted or rejected analytics cookies, for 180 days.

Before you sign up, your browser's local storage keeps your survey progress so that you do not lose your answers. We also keep a few small flags in your browser's local and session storage, for example to remember that you have already seen a prompt. This information stays on your device and is not a cookie.

With your consent we also use Google Analytics cookies (named _ga and _ga_ followed by an identifier), which last up to 13 months, to count visits and see which pages are used. They are not set unless you choose Accept on our cookie banner. You can change your choice at any time with the Cookie settings link at the bottom of the page or below.

We do not use advertising cookies. You can delete or block cookies in your browser settings, but if you block the strictly necessary ones you will not be able to sign in.

Cookie settings

8. How long we keep your information

• Account data, including results, connections and tailored content: for as long as your account is open. If you ask us to delete your account, we delete it within one month, except for the records we must keep by law.
• Purchase and subscription records: six years after the end of the financial year they relate to, as required by HMRC.
• Contact form messages: up to two years after we last reply, then deleted.
• Technical logs: a limited period, normally no longer than 30 days, after which they are deleted or anonymised.
• Backups: deleted data may remain in encrypted backups for a short period until those backups expire in our normal cycle.

Self-service account deletion is not yet available, so please email legal@codebox.co.uk to ask us to delete your account.

9. Your rights

You have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased, where there is no good reason for us to keep it;
• restrict how we use your data in certain circumstances;
• receive the data you gave us in a portable, machine-readable format;
• object to our use of your data where we rely on legitimate interests, and to object at any time to marketing-type emails;
• withdraw your consent at any time where we rely on it, without affecting anything done before you withdrew it.

To use any of these rights, email legal@codebox.co.uk. We may need to confirm your identity first. We will respond within one month; if your request is complex we may extend that by up to two further months, and we will tell you if so. Exercising your rights is free unless a request is clearly unfounded or excessive.

10. Security

We protect your data with measures that include encryption in transit, access controls, hashed passwords held by our authentication provider, and the security features of our hosting providers. No online service can be completely secure, so please choose a strong password and keep it private. If we become aware of a breach that puts your rights at risk, we will tell you and the Information Commissioner's Office as the law requires.

11. Age

ur-i.am is intended for people aged 16 or over. We do not knowingly collect personal data from anyone younger. If you believe someone under that age has given us their data, please contact us at legal@codebox.co.uk and we will delete it.

12. DISC results, AI and automated decisions

Your DISC profile is a model of your communication preferences, built from how you answered the survey. It is not a psychological assessment, a diagnosis or a judgement about you. AI-tailored content is generated from your profile and the context you provide, and may be inaccurate.

We do not use your results, your tailored content or anything else about you to make automated decisions that have legal or similarly significant effects on you. We will never sell your results.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new "Last updated" date and, where a change significantly affects how we use your data, we will email registered members before it takes effect.

14. Complaints and contact

If you have a question or concern about how we handle your data, please contact us first at legal@codebox.co.uk or by post at Codebox Development Limited, 7 De Havilland Drive, Liverpool, England, L24 8RN. We would welcome the chance to put things right.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.