Privacy policy

What we collect

• Your account: name, email address, a hashed password, language and time zone.
• Your business: what you tell YUVOQ about your business, products, goals and customers, and what your AI employee makes for you (posts, ads, products, messages, reports).
• Accounts you connect: when you connect Meta (Facebook, Instagram, Meta Ads, WhatsApp), Google, YouTube, X, TikTok or Telegram, we keep the access token they give us, encrypted, plus the account, page and ad account names and the numbers we need (for example ad spend, views and clicks).
• Payments: plan and invoice details. Card and bank details are entered with our payment providers (Razorpay, Stripe) and never stored by YUVOQ.
• Usage and security: sign-in times, IP address, device and browser, and an audit log of important actions.
• Cookies: only the ones YUVOQ needs: your sign-in session, language, theme and where you first came from. No advertising cookies.

How we use it

• To run YUVOQ for you: plan and do the work you approve, post and run ads on the accounts you connected, and show you the results.
• To bill you, support you and keep your account secure.
• To improve YUVOQ from overall usage.

Data from Meta (Facebook, Instagram, Meta Ads)

When you connect Meta, YUVOQ uses the permissions you grant only to do what you ask: list your Pages and ad accounts, create ads that stay paused until you confirm them, keep their budget within what you approved, and read their spend, views and clicks for you. We do not sell Meta data, use it for anyone else's ads, or share it except with the service providers below. You can disconnect at any time in YUVOQ; that deletes the stored token at once.

Who we share it with

We never sell your data. We share only what each service needs to work for you:

• AI model providers (through OpenRouter) to write and analyse for you.
• Payment providers (Razorpay, Stripe) to take payments.
• Email delivery (Resend) and messaging (Telegram) to send you messages.
• The platforms you connect, when YUVOQ posts or runs ads there for you.
• Hosting and backups, encrypted.
• Authorities, only when the law requires it.

How long we keep it

As long as your account is open. When you ask us to delete your account, we delete your data within 30 days, except invoices and records the law requires us to keep. Encrypted backups are deleted as they age out.

Delete your data

1. To remove one connected account (for example Meta Ads), open it in YUVOQ and choose Disconnect. Its token is deleted at once.
2. To delete your whole account and data, sign in and send a request from the Help page with the subject "Delete my data". We confirm and delete within 30 days.
3. To remove YUVOQ from Facebook, go to Facebook Settings → Apps and websites, and remove YUVOQ. Then ask us to delete what we hold, as in step 2.

Your rights

You can see, correct, export or delete your data, and withdraw consent for any connected account, at any time. Ask from the Help page. If you are in India, this follows the Digital Personal Data Protection Act, 2023; elsewhere, the data protection law where you live.

Security

Connection tokens and secrets are encrypted at rest, traffic uses HTTPS, and each business sees only its own data. Admin access uses two-factor sign-in.

Changes

If this policy changes, we update it here and change the date at the top.