Privacy Policy

1. Information We Collect

When you create an account and use Yaasvi products, we collect:

• Account information: name, email address, and password (stored securely via Supabase Auth)
• Usage data: content you generate, tool inputs/outputs, star ratings and bookmarks, platform preferences, and generation history
• Brand and team data: if you set up a brand profile, we store details you provide such as industry, niche, target audience, and voice/tone preferences; if you create or join a team, we store member emails, roles, and any documents you upload to your brand knowledge base
• Payment information: processed and tokenized securely by Razorpay — we never store your card details, including for the optional Auto Top-up feature
• Social account data: if you connect Twitter/X, LinkedIn, YouTube, or Instagram, we store encrypted access tokens needed to publish content on your behalf
• Technical data: browser type, IP address, and device information, used for rate-limiting and abuse prevention and general security monitoring
• Analytics data: product usage events (e.g. which tools and features you use), collected via PostHog and tied to your account if you're logged in, or pseudonymously if you're not

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve Yaasvi products and services
• Process payments, including recurring charges you authorize via Auto Top-up
• Track and pay out referral commissions if you participate in our referral program
• Send transactional emails (welcome, team invitations, monthly free-credit notices, low-balance alerts, password reset)
• Enforce our Terms of Service and prevent fraud or abuse
• Respond to your support requests and feedback

3. AI Content Generation

Content you generate through our AI tools is processed using third-party AI infrastructure. Generation requests are routed through OpenRouter, which may use models from providers including Anthropic, Google, Alibaba Cloud (Qwen), or Moonshot AI depending on the specific tool. For brand knowledge-base search, we use OpenAI to generate text embeddings from documents you upload. We do not use your content to train our own models; how each provider handles data in transit is governed by their own terms. Your prompts and generated content are stored in your account history and are only accessible by you.

4. Data Sharing

We do not sell your personal data. We share data only with the service providers needed to run Yaasvi, and with law enforcement when required by law:

• Supabase — database and authentication infrastructure
• Netlify — application hosting
• Cloudflare — DNS and storage of generated media (R2)
• OpenRouter — routes AI text-generation requests to the underlying model provider for each tool
• OpenAI — image generation, embeddings for brand knowledge-base search, and automated content moderation of generation requests and outputs
• Google (Gemini) — image generation
• Upstash — job queue (QStash) and caching/rate limiting (Redis)
• Razorpay — payment processing, including tokenized Auto Top-up charges
• PostHog — product analytics (only after you accept analytics cookies)
• Resend — transactional and lifecycle email delivery
• Twitter/X, LinkedIn, YouTube, Instagram — only if you connect these accounts, to publish content on your behalf
• Law enforcement when required by applicable law

5. Data Retention

We retain your account data for as long as your account remains active, with the following rolling windows applied automatically:

• Generation history and chat conversations — 12 months, then deleted
• Creations you manage (storybooks, images, heroes, eBooks and other saved projects) — kept until you delete them or close your account
• In-app notifications — 90 days
• Closed support tickets — 24 months
• Payment records — up to 8 years, as required by Indian tax and accounting law; these survive account deletion in pseudonymized form (not linked to your identity)

If you delete your account, your personal data is removed immediately and any remaining cleanup completes within 30 days, except the pseudonymized payment records above and anything we must retain for legal or fraud-prevention purposes.

6. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, encrypted storage of connected social account tokens, and row-level security on all database tables. However, no method of transmission over the internet is 100% secure.

7. Your Rights

You have the right to access, correct, port, or delete your personal data, and to withdraw consent for analytics at any time. Most of these are self-serve:

• Export your data — request a machine-readable copy of everything we hold about you from Settings → Account
• Delete your account — permanently, from Settings → Security
• Analytics consent — change your cookie choice via "Cookie preferences" in the footer
• Disconnect social accounts — any time from your brand settings

For anything else, contact us at legal@yaasvi.com.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact & Grievances

If you have questions about this Privacy Policy, please contact us at legal@yaasvi.com.

Yaasvi is operated by Yaasvi Tech Private Limited, with its registered office at No.6, Veerasamy Street, Oldpet, Krishnagiri – 635001, Tamil Nadu, India. For grievances under India's Digital Personal Data Protection Act, 2023 (or any other applicable data-protection law), write to our Grievance Officer at legal@yaasvi.com with the subject line "Grievance". We acknowledge grievances within 72 hours and aim to resolve them within 30 days.