Privacy Policy

1. What we collect

• Account data: email, display name, organisation name, role, authentication tokens (Supabase Auth).
• Project data: briefs, prompts, references, generated assets, comments, share links.
• Billing data: handled by our payment processor (Stripe). We never store full card numbers.
• Product usage data: when you are signed in, we link your activity to your account (your email and name), to the organisation and project you are working in, and to your plan and account type. It covers the pages you visit, the buttons and links you use (including their visible text), the features you use, generation, download and credit activity, page and network performance, and errors.
• Session recordings: we record how the product is used, including what appears on screen, the text you type, messages in the browser console and the timing of network requests, so we can find problems and improve the product. Passwords, two-factor and recovery codes, coupon codes, admin verification codes and invitation links are never recorded. Pictures, videos and audio are replaced by placeholders, and web addresses are kept without their query strings.
• Device and approximate location: browser, operating system, screen size, and approximate location (country and city) derived from your IP address. Our product analytics provider does not store the IP address itself.
• Error data: error messages and server logs, technical details of the page or request involved (including your IP address), your account identifier and email address, and a short recording of the moments around an error.
• AI interaction records: the prompts, inputs and outputs of AI features, with the model used, token counts, cost and timing, and the short summaries, quality assessments and topic groupings derived from them.
• Communication data: emails you send us and our replies.

2. Why we process it

• To operate the Service and deliver the features you request (performance of our contract with you).
• To bill you and prevent fraud (contract; legal obligation for billing records).
• To diagnose bugs and monitor the performance, reliability, quality, cost and safety of the Service, including its AI features (our legitimate interest in running a secure, working service).
• To understand how the product is used and improve it through product analytics and session recordings (our legitimate interest in improving the Service).
• To send transactional emails (sign-in, billing receipts, invite notifications). Marketing email is opt-in only (consent).

3. Where it lives

Application data sits in Supabase (Postgres, EU region). Generated assets live in Cloudflare R2 / Supabase Storage. Cloudflare also converts video files your browser cannot play into a playable format (Stream) and deletes its copy afterwards, and checks that our sign-up, password reset, invitation and request forms are used by people rather than bots (Turnstile). Rate limits are counted in Upstash. Email is sent via Resend. Payments are processed by Stripe. We use Vercel for hosting and edge functions.

Product analytics, session recordings and error tracking are processed by PostHog (EU Cloud). Our pages reach PostHog through a PostHog-managed proxy on our own subdomain (e.yondervast.ai), which runs on Cloudflare’s network and may route traffic outside the UK and EU. Error monitoring is also processed by Sentry (EU region). AI interaction records are kept in Langfuse (EU region) and, for AI observability, in PostHog (EU Cloud). PostHog’s AI features summarise these records, group similar ones together and assess their quality. The summaries and group titles are written by language models that PostHog runs with its own providers, which may process the records outside the UK and EU, including in the United States; quality assessments are made by Anthropic under our own account.

4. Model providers

Prompts and inputs you submit are sent to third-party model providers (OpenAI, Anthropic, Google, ElevenLabs, fal.ai, BytePlus and Perplexity) to fulfil the specific request. Apart from that, the records of these requests are summarised, grouped and assessed for quality by language models, as described in section 3. Requests sent through fal.ai may also be processed by the developer of the model you choose; each model’s developer is named in the product. Some providers process data outside the UK and EU; for example, BytePlus processes video requests in Singapore. We have negotiated zero-retention or strict data-processing terms with these providers where available; outputs are returned to your account.

5. Your rights (GDPR / CCPA / UK GDPR)

• Access: request a copy of the data we hold about you.
• Correction: update or correct your information.
• Deletion: close your account; we delete personal data within 30 days, subject to legal retention requirements.
• Portability: export your projects in JSON/PDF/Markdown.
• Objection: opt out of any non-essential processing, including product analytics and session recordings.

Email privacy@yondervast.ai to exercise any of these rights.

6. Retention

Active accounts retain data indefinitely. Closed accounts are purged after 30 days, except billing records (kept 7 years for tax) and legal-hold data. Product analytics events, including the errors they record, are kept for 12 months, session recordings for 30 days and error reports in Sentry for 30 days. AI interaction records are kept in Langfuse while your account is active; in PostHog their prompts, inputs and outputs are kept for 30 days, and the model, token counts, cost and timing, together with the summaries, quality assessments and topic groupings derived from them, for 12 months.

7. Cookies & tracking

We use first-party cookies to keep you signed in, to remember a device you trusted for two-factor authentication, to remember the organisation and workspace you are working in and, on a shared link, to keep your visitor session and the name you comment under. Our product analytics (PostHog) uses a first-party cookie and your browser’s local storage to recognise your browser and session. We do not use advertising cookies or third-party advertising trackers.

8. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

9. Changes

We’ll notify you of material changes via in-app banner or email, at least 30 days before they take effect.

10. Contact

Data Protection · privacy@yondervast.ai · Yondervast LTD, United Kingdom.