Privacy policy

Yazow (“Yazow”, “we”, “us”) helps you collect inspiration, organize it into projects, and make decisions with the people who have a say. This policy explains what personal information we collect when you use our website, web app and browser extension (together, the “Service”), how we use it, who we share it with, and the choices and rights you have.

The short version: we collect what we need to run Yazow. We don’t sell your personal information, we don’t show ads, we don’t use your content to train AI models, and you can delete your account and everything in it at any time.

1. Information we collect

Information you give us

• Account information: your name, email address and password. Passwords are stored only as a secure one-way hash. If you sign in with Google, Google shares your name, email address and profile picture with us.
• Your content: everything you add to the Service, such as images you upload or paste, links you save, page titles, descriptions and preview images we fetch for those links, notes, prices, tags, custom fields, sections, votes, decisions, tasks and decision books.
• Collaboration information: email addresses of people you invite, the projects you share, and the role each person has.
• Billing information: if you subscribe to Pro, Link (Stripe’s merchant of record service) collects your payment details and billing address, which it needs to work out sales tax or VAT. We can see your plan, subscription status and the last four digits of your card through Stripe. We never receive or store your full card number.
• Messages: anything you send us when you contact support.

Information collected automatically

• Device and log data: IP address, browser and device type, pages requested, and timestamps. Our hosting provider records these in server logs that we use for security and troubleshooting.
• Cookies: a small number of essential cookies, described in section 7.

Information from links you save

When you save a link, our servers visit that page to fetch its title, description and preview image, and store a copy of the image so your save keeps working if the original disappears. We only fetch pages you ask us to save.

2. How we use information

• To provide the Service: store your saves, show them to you and your collaborators, extract colour palettes, and build your decision books and spec sheets.
• To create and secure your account, including password resets and preventing fraud, spam and abuse.
• To process payments and manage your subscription.
• To send service emails you need, such as invitations, vote notifications, nudges from collaborators, password resets and billing receipts.
• To send occasional product news, only where permitted by law. Every such email has an unsubscribe link, and unsubscribing doesn’t affect service emails.
• To understand what is broken or slow and improve the Service.
• To comply with the law and enforce our Terms of Service.

We do not sell your personal information, share it for cross-context behavioural advertising, or use your content to train artificial intelligence models.

3. Who can see your content

• Projects are private by default. Only you and the people you invite can see a project.
• Collaborators can see everything in a project they belong to, including saves, notes, votes and who cast them. Editors can add, change and vote; viewers can only look.
• Public links. If you turn on a public link for a decision book, anyone with the link can view the book and its spec sheets, including names of voters, until you turn the link off.
• Saves outside a project (in your Library) are visible only to you.

4. Service providers we share information with

We use a small number of providers to run the Service. They process information on our behalf, under contracts that limit their use of it to providing their service to us.

• Cloudflare: hosting of the website and app, server logs, and private storage and delivery of images and files (R2).
• Neon: our Postgres database, where account and project data are stored.
• Stripe and Link: payment processing, subscription management, and sales tax and VAT as the merchant of record for Pro.
• Brevo: delivery of email.
• Google: sign-in, only if you choose “Continue with Google”.

We may also share information if required by law, subpoena or court order; to protect the rights, safety or property of Yazow, our users or others; or as part of a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.

5. The Chrome extension

The Yazow extension acts only when you ask it to: when you choose “Save image to Yazow” or “Save page to Yazow”, click the toolbar button, or use the keyboard shortcut. It then sends the page address, its title, the address of the image you chose (if any) and any note you add to your Yazow account. It does not read page content, track your browsing, or send anything in the background. It uses your existing Yazow sign-in and stores only your settings and last-used destination in your browser.

Yazow’s use of information received through the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use it only to provide the save feature you requested, and never for advertising, credit decisions or sale to third parties.

6. How long we keep information

• While your account is open, we keep your account and content so the Service works.
• Deleted saves go to the trash and are permanently deleted, with their files, after 30 days.
• When you delete your account, your account, the projects you own and everything in them, and your uploaded files are deleted immediately (if a file can’t be deleted straight away, we retry automatically every day). Votes you cast in projects owned by others are removed. Saves you added to projects owned by others stay in those projects so their boards stay intact, and become the project owner’s; notes you wrote on other people’s saves stay with those saves, without your name. Backup copies of the database and files age out within 30 days.
• Server logs are kept for a limited period by our hosting provider, typically no more than 30 days.
• Billing records are kept by us and Stripe for as long as tax and accounting laws require.

7. Cookies

We use only essential cookies:

• a session cookie that keeps you signed in, and a short-lived cookie that caches your session to keep pages fast;
• a preference cookie that remembers light or dark mode.

We don’t use advertising cookies, analytics trackers or third-party tracking pixels. Stripe may set its own cookies on its checkout pages to prevent fraud.

8. Your choices and rights

• Access and correct: you can view and edit your profile and content in the app at any time.
• Delete: you can delete individual saves, whole projects, or your entire account from Settings.
• Get a copy: email us and we’ll send you a copy of your personal information and content.
• Email: you can unsubscribe from product news at any time. Service emails can’t be turned off while you have an account.

US state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Virginia or another state with a consumer privacy law), you may have the right to know what personal information we collect and how we use and disclose it; to access, correct or delete it; to receive a portable copy; and to opt out of the sale or sharing of personal information or its use for targeted advertising. We don’t sell or share personal information for targeted advertising, so there is nothing to opt out of, and we treat Global Privacy Control signals as an opt-out request anyway. We won’t discriminate against you for using these rights. You can send a request, or appoint an authorised agent to send one, by emailing team@yazow.app. We’ll verify your identity before acting on it, usually by confirming you control your account’s email address. If we decline your request, you can appeal by replying to our decision.

If you are in the European Economic Area, the UK or Switzerland, we process your information to perform our contract with you (running the Service), on the basis of our legitimate interests (keeping it secure and improving it), with your consent (product news), and to comply with legal obligations. You have the right to access, correct, delete, restrict or object to processing of your information, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority.

9. International transfers

Yazow is based in the United States, and our providers may process information in the United States and other countries. Where the law requires, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses for transfers out of the EEA, UK or Switzerland.

10. Security

We protect your information with encryption in transit (HTTPS), hashed passwords, access controls, and providers with strong security practices. Uploaded files are stored under unguessable addresses. No system is perfectly secure, so please use a strong, unique password, and tell us right away at team@yazow.app if you notice anything suspicious.

11. Children

The Service is not directed to children under 13 (or under 16 in the EEA and UK), and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we’ll delete it.

12. Changes to this policy

We may update this policy as the Service changes. We’ll change the date at the top, and for material changes we’ll notify you by email or in the app before they take effect.

13. Contact

Questions, requests or concerns about privacy? Email team@yazow.app. A real person reads every message.