Privacy policy
Effective date: October 27, 2026
This policy explains how YAYCE LLC ("we", "us"), a Missouri limited liability company based in Morrison, Missouri 65061, USA, handles personal information for yayce: the website yayce.com and the yayce platform.
In short: yayce's data is stored and processed in India. We don't sell personal information, we don't use it to train AI models, and you can reach us about any of this at support@yayce.com.
1. Two roles
• When we decide how data is used, we are the "controller" (or "business"). This covers people who visit yayce.com, contact us, message us on social media, or sign up, and the agencies and team members who hold yayce accounts. This policy covers that data.
• When agencies and their clients put data into yayce, we process it on their behalf as a "processor" (or "service provider"). This covers the contacts, messages, bookings, calls, payments and other records in a client's workspace. The agency and its client decide how that data is used, under their own privacy notices, and our Data Processing Addendum (part of our Terms at yayce.com/terms) with the agency governs our handling of it.
If you are a customer of a business that uses yayce (for example, a gym's member or a salon's client), that business is responsible for your data. Contact it directly. If you contact us, we will pass your request to the business.
2. What we collect
You give us:
• Account details: your name, work email, password (stored only as a secure hash), agency name, workspace address, and your branding (logo, colors, fonts, domain).
• Contact and set-up requests: your name, work email, agency name and what you sell, from the contact form. When you ask us to set up your platform, on that form or by direct message or email: your agency name, your logo (an image file you upload or send us), and your website or social media handle if you give them.
• Messages: what you write to support@yayce.com, in the app's Help inbox, or to our social media accounts (Instagram, Facebook, YouTube, Skool).
• Billing details: your plan, billing contact and invoices. Payments are taken by Polar, our merchant of record; we do not receive your full card number.
Collected automatically:
• Device and usage data: IP address, browser and device type, pages and features used, sign-in times, and the list of devices signed in to your account (which you can see and sign out of).
• Security checks: public forms use Cloudflare Turnstile, which collects device and browser signals to tell people from bots.
• Cookies: yayce.com and the app use only the cookies needed to keep you signed in and secure. We do not use advertising cookies.
• Visit statistics: we count visits to yayce.com with Cloudflare Web Analytics, which measures page views and performance without cookies and without tracking you across other sites.
• Fonts: when an agency's app theme uses a Google font, your browser loads it from Google, which sees your IP address.
From others:
• Social platforms and ad networks (for example, Meta) may share with us that you replied to an ad or messaged us, with your public profile name or handle.
3. How we use it
• Create and run your account, set up your platform, provide the Service. Legal basis (EU/UK): Contract
• Billing, fraud checks and tax records. Legal basis (EU/UK): Contract; legal obligation
• Answer your messages and support requests. Legal basis (EU/UK): Contract; legitimate interests
• Keep the Service secure, prevent abuse, fix problems. Legal basis (EU/UK): Legitimate interests
• Send service emails (sign-in links, invites, trial reminders, notices). Legal basis (EU/UK): Contract
• Tell you about yayce news and offers (you can opt out at any time). Legal basis (EU/UK): Legitimate interests or consent, as the law requires
• Improve the Service using aggregated, de-identified usage. Legal basis (EU/UK): Legitimate interests
• Comply with the law and enforce our Terms. Legal basis (EU/UK): Legal obligation; legitimate interests
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your data, or data in your workspaces, to train AI models.
4. AI features
When you or your team use AI features, we send the information a task needs (for example, a contact's history, a draft's instructions, or a website's text) to the AI provider that runs it, and get the result back. On yayce's included allowance we use Anthropic. DeepSeek, whose processing takes place in China, is used only if your agency opts in after seeing a notice. If you add your own AI provider key, the provider you choose processes that data under your agreement with it. AI output is shown to a person to approve before it changes anything, except features you switch on to reply automatically.
5. Who we share it with
• Service providers who run parts of yayce for us: hosting (Oracle Cloud, in India), network protection, file storage, bot checks, visit statistics and routing of email sent to our @yayce.com addresses (Cloudflare), our support inbox (Google's Gmail), email delivery (Amazon Web Services, in India), payments (Polar for our subscriptions; Stripe for the payment features you connect), AI models (Anthropic, and DeepSeek only with opt-in), Google (when a workspace connects its Business Profile, and for fonts), and browser push services for phone notifications. The full list, with what each one does, is in our Data Processing Addendum (part of our Terms at yayce.com/terms).
• Services you connect yourself, such as Twilio, Vapi, Stripe or your own AI provider, receive data under your agreement with them.
• Your agency, if you are a team member or client user: the agency that runs the account can see your activity in its account.
• Legal and safety: when the law requires it, or to protect rights, safety and the Service.
• Business transfers: if YAYCE LLC is merged, acquired or sells assets, under this policy's protections.
6. Where it is stored
Your data is stored and processed in India. yayce's servers and database run on Oracle Cloud in Hyderabad, India, and email is sent and received through Amazon Web Services in Mumbai, India. This applies wherever you are, including the US, the UK, Canada and Australia. Uploaded files (such as website images and logos) and our encrypted backups are kept in Cloudflare's R2 storage.
Some service providers process data in other countries: for example, our AI provider Anthropic and our payment providers in the United States, DeepSeek in China (only if your agency opts in), and Cloudflare on its global network. The full list is in our Data Processing Addendum (part of our Terms at yayce.com/terms).
When personal data comes from the EU, the UK or Switzerland, we protect the transfer with safeguards the law recognizes: the European Commission's Standard Contractual Clauses, with the UK Addendum and the Swiss changes where they apply.
7. How long we keep it
• Account and workspace data: while your subscription is active.
• After your subscription ends (or a trial ends without a plan): you can ask for an export for 30 days, by email to support@yayce.com; we deliver it within 30 days of your request as CSV files (exports aren't self-serve, and you can ask for one while subscribed too). We then delete your data within 30 days after that export window: when you ask, or at our monthly clean-up, whichever comes first. You can ask us to delete it sooner.
• The exception: billing records and invoices for your yayce subscription are kept as long as tax law requires, even after the rest is deleted.
• Backups: deleted data is purged from backups within 90 days.
• Logs: kept for 30 days.
• Contact and set-up requests from people who don't become customers: up to 24 months after our last contact.
8. Security
We protect data with encryption in transit (HTTPS everywhere), encryption at rest for secrets such as payment and AI keys, encrypted backups tested by automated restores, separation between workspaces, role-based access, optional two-factor sign-in, and staff access to an account only when its owner grants it, for a limited time, with every request logged. No system is perfectly secure; tell us at support@yayce.com if you find a problem.
9. Your rights
Depending on where you live, you may have the right to:
• see the personal information we hold about you and get a copy;
• correct it;
• delete it;
• get it in a portable format;
• object to, or restrict, how we use it, including for direct marketing;
• withdraw consent where we rely on it;
• complain to a data protection authority (for example, the UK's ICO, your EU supervisory authority, Canada's Office of the Privacy Commissioner, or Australia's OAIC).
California residents have the right to know, delete and correct personal information, and to opt out of its sale or sharing (we do neither). We will not treat you differently for using these rights. An authorized agent may act for you with proof of your permission.
To use any right, email support@yayce.com. We may need to confirm your identity. We reply within the time the law sets, usually within one month.
10. Children
yayce is for businesses and is not meant for anyone under 18. We do not knowingly collect children's personal information.
11. Changes
We will post changes here with a new effective date, and email account owners about material changes before they take effect.
12. Contact
YAYCE LLC · 507 Ash St, Morrison, Missouri 65061-3002, USA · support@yayce.com