Privacy Policy

1. Information we collect

Account data: email, username, hashed password, and account settings.

Billing data: plan status and payment method metadata provided by our payment processor (for example, brand and last four digits). We do not store full card numbers.

Upload data: files you upload, file metadata (name, size, MIME type), visibility settings, and associated custom domains. Public files are accessible by anyone with the link.

Usage and security data: IP address, user agent, timestamps, and actions recorded in audit logs for security, abuse prevention, and troubleshooting.

Moderation and safety data: signals generated by automated safety systems (including AI-assisted detection), report records, and staff review outcomes.

2. How we use information

We use your information to operate the Service, deliver content, process payments, prevent abuse, provide customer support, and improve reliability and performance.

We also use automated systems and human moderation review to detect policy violations, investigate abuse reports, and enforce our Terms and Community Guidelines.

3. How we share information

We share data with vendors that help us operate the Service:

- Payment processing (Stripe)

- Email delivery (Resend)

- File storage and delivery infrastructure (Cloudflare R2)

- Bot protection (Cloudflare Turnstile)

- Custom domain provisioning and hosting (Vercel)

We may also share information to comply with legal obligations or protect the rights and safety of Yumi, our users, and the public.

4. Cookies and sessions

We use secure, HTTP-only cookies to keep you signed in and protect your account. You can control cookies through your browser settings, but some features may not function properly without them.

5. Data retention

We retain account and log data while your account is active. We may keep limited records after deletion to comply with legal obligations, resolve disputes, or enforce these policies.

6. Security

We use industry-standard protections such as hashed passwords, access controls, and audit logs. No system is 100% secure, so we cannot guarantee absolute security.

7. Your choices

You can update your account details in the dashboard. To request account deletion or data access, contact hello@yumi.onl.

8. Children

The Service is not intended for children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal data, contact us to remove it.

9. Changes

We may update this Privacy Policy from time to time. We will post updates on this page and, if changes are material, provide notice through the Service or by email.

10. Contact

Questions about privacy? Email us at hello@yumi.onl.