Privacy Policy

1.What Yef collects

• Account: your email address and name. If you sign in with Google, the name, email and ID of your Google account.
• Your store: its address and name, the Theme Access password you provide (stored encrypted), a copy of your theme’s files and a profile of your store that Yef writes from the theme.
• Your requests: the messages you write, and the plans, drafts and versions of each change.
• Billing: your plan and payment status. Card details are handled by Stripe; Yef doesn’t store them.
• Forms: what you send through the waitlist and the Custom form, like your name, email, store and project details.
• Where you came from: the site or campaign link that brought you to Yef and the first page you saw, saved with your waitlist signup, account or Custom request.
• Your cookie choice, and the date and version of these terms and this policy that you accepted.
• Only if you accept cookies: the pages you visit and the buttons you click on yef.app’s public pages, and the identifiers of Meta’s cookies with your IP address and browser when you create your account (section 6).
• Technical: your IP address and basic request logs, used for security and to limit abuse.

Yef doesn’t access your orders, customers or payments: the Theme Access password only gives access to your theme.

2.How it’s used

• To run the service: build and publish the changes you ask for, keep your versions and show your credits.
• To email you: sign-in links, updates about your requests and your account, reminders about your plan, and replies to your messages.
• To tell people on the waitlist when they can try Yef. Those emails have a link to stop getting them.
• To keep Yef secure and prevent abuse.
• To support you and improve the service, and to know which campaigns and channels bring people to Yef.
• Only if you accept cookies: to measure and improve Yef’s ads (section 6).

3.Legal bases

If you’re in the European Union or the United Kingdom, Yef relies on:

• the contract with you, to run the service you signed up for;
• legitimate interests, to keep Yef secure, prevent abuse, improve the service and understand which campaign links bring people;
• your consent, for analytics and advertising cookies, which you can withdraw at any time;
• legal obligations, for billing and tax records.

4.AI processing

Your requests and the theme files each change needs are sent to Anthropic, which provides the AI models that plan and build the changes. Under Anthropic’s commercial terms, this data isn’t used to train its models.

5.Who else processes it

These providers process information on Yef’s behalf:

• Anthropic: AI models.
• Railway: hosting and database.
• Resend: email delivery.
• Google: sign-in with Google and support email.
• Stripe: payments.
• PostHog: analytics of yef.app’s public pages, only if you accept cookies.
• Shopify: your store and its theme, under your own agreement with Shopify.

If you accept cookies, Yef also shares information with Meta Platforms to measure its ads (section 6). Meta uses it under its own Privacy Policy, too.

Yef may also share information when the law requires it, or as part of a merger or sale of the business, under this policy.

6.Cookies and ads

• Necessary: the cookies that keep you signed in, complete sign-in with Google and remember your cookie choice. They’re always on.
• Analytics (PostHog): the pages you visit and the buttons you click on yef.app’s public pages. There are no session recordings, and what you type in forms isn’t collected.
• Advertising (Meta): the Meta pixel sees which public pages you visit. When you create an account, connect a store or subscribe, Yef tells Meta, with your email and account ID turned into a hash (a code that can’t be read back), your IP address, your browser and the identifiers of Meta’s cookies. This lets Meta measure Yef’s ads and show them to people likely to find Yef useful.

Analytics and advertising cookies only turn on if you choose “Accept” in the cookie banner. With “Reject”, they stay off, and nothing about you is sent to Meta or PostHog. You can change your choice anytime in Cookie settings, at the bottom of yef.app’s public pages. If your browser sends the Global Privacy Control signal, Yef treats it as “Reject”. The Yef app, once you sign in, doesn’t load them.

7.Selling and sharing

Yef doesn’t sell your information for money. Under some US state privacy laws, using advertising cookies to show ads counts as “sharing”. You can opt out anytime with “Reject” in Cookie settings, with a browser that sends Global Privacy Control, or by writing to privacy@yef.app.

For accounts that accepted advertising cookies, Yef may use a hash of the email to measure its ads, to stop showing them to people who already use Yef and to find people similar to its users. You can ask Yef to stop at any time by writing to privacy@yef.app.

8.How long it’s kept

• Your account information is kept while your account is open, and deleted within 30 days after you close it or ask for deletion.
• Billing records are kept as long as tax and accounting laws require.
• Waitlist entries are kept until you ask for deletion. If you stop the emails, only your address is kept, so Yef doesn’t write to you again.
• Records of cookie choices are kept for 3 years. The date and version of the terms you accepted are kept with your account.
• Request logs are kept for up to 90 days.

Backup copies can take longer to be overwritten.

9.Your choices and rights

You can ask to access, correct, export or delete your information, or withdraw your consent, by writing to privacy@yef.app. Depending on where you live, for example in the European Union, the United Kingdom or a US state with a privacy law like California, you may have more rights, like objecting to some processing or complaining to a data protection authority. Requests are answered within 30 days. If Yef declines a request, you can appeal by replying to that answer; if you’re still not satisfied, you can contact your data protection authority or your state’s attorney general.

10.Security

The Theme Access password is encrypted, connections use HTTPS and access to data is limited to the people on the Yef team who need it. No system is perfectly secure; if a breach affects your information, you’ll be told as the law requires.

11.Where data is processed

Yef and its providers store and process data in the United States. The Yef team can access it from other countries where it works, like Argentina, under this same policy. Where the law requires it, transfers rely on adequacy decisions (Argentina has one from the European Commission) or the safeguards Yef’s providers offer, like standard contractual clauses.

12.Children

Yef isn’t meant for people under 18 and doesn’t knowingly collect their information.

13.Changes to this policy

If this policy changes in a meaningful way, you’ll get notice by email or in the app before the change takes effect, and the cookie banner asks for your choice again.

14.Contact

BlackPug LLC, Wyoming, United States. privacy@yef.app