Privacy

Privacy Policy

How YondUP collects, uses, shares, protects, and retains account, project, billing, community, and usage data.

Effective September 27, 2026

1. Scope and controller

This Privacy Policy explains how YondUP collects and uses personal data when you visit the site, create an account, purchase a plan, generate content, publish to the Community, contact support, or join the affiliate program.

The data controller is YondUP. The operator’s full legal name and address will be added before commercial production launch. Privacy questions and requests can be sent to privacy@yondup.design.

2. Data we collect

  • Account data, such as name, email address, authentication identifiers, plan, credit balance, and settings.
  • Content and project data, including uploads, prompts, selected options, generated files, job status, and content you publish.
  • Billing records, such as plan, invoice status, transaction identifiers, and limited payment details supplied by the payment processor. YondUP does not store complete card numbers.
  • Usage and device data, such as IP address, browser, device, timestamps, pages, feature interactions, logs, and diagnostic events.
  • Support, affiliate, and communication data you provide, including payout-request details where applicable.

3. Why we use data

Depending on where you live, these activities rely on performance of a contract, legitimate interests, consent, or compliance with legal obligations. You can withdraw consent where consent is the basis, without affecting earlier processing.

  • Provide accounts, generations, storage, downloads, billing, Community, and affiliate features.
  • Authenticate users, prevent abuse, secure the service, investigate incidents, and enforce policies.
  • Respond to support requests and send transactional messages about jobs, credits, billing, and account security.
  • Measure reliability and understand feature use so we can maintain and improve the product.
  • Meet tax, accounting, legal, and regulatory obligations and establish or defend legal claims.

4. Content visibility

Free-plan generations are published to the public Community by default. They can reveal information present in an uploaded image, prompt, or output, so do not upload confidential material on a free plan. Paid-plan generations are private unless you deliberately publish them with the Share action.

Community posts may display your profile name, generated image, prompt-related labels, selected tool or style, publication time, and engagement counts. Search engines and other users may copy or index public posts.

5. Service providers and disclosures

YondUP does not sell personal data for money. If future analytics or advertising practices trigger a legal definition of sale, sharing, or targeted advertising, we will update this notice and provide the required choices before enabling them.

  • AI inference providers process prompts and media to produce results.
  • Cloud hosting, object storage, database, queue, monitoring, email, and content-delivery providers help operate the service.
  • Stripe processes subscription payments and provides billing tools.
  • Sanity may host editorial content. Authentication and email providers support sign-in and transactional messages.
  • Authorities or other parties may receive data when required by law, to protect rights and safety, or as part of a corporate transaction.

6. Retention and security

We retain account and project data while your account is active and for a reasonable period afterward to provide recovery, handle disputes, maintain security, and meet legal obligations. Billing and tax records may be retained longer where required. Public posts may remain until removed, subject to backup and legal retention periods.

We use access controls, private storage, transport encryption, short-lived asset links, and operational monitoring. No system can guarantee absolute security.

7. International transfers

YondUP and its providers may process data in countries other than yours. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or contractual protections.

8. Your choices and rights

Send a request to privacy@yondup.design. We may need to verify your identity. Authorized agents may submit requests where local law allows. We do not discriminate against users for exercising privacy rights.

  • Access, correct, download, or delete eligible personal data.
  • Object to or restrict certain processing and withdraw consent where applicable.
  • Opt out of non-essential communications and control optional cookies where offered.
  • Appeal a denied privacy request or complain to your local data-protection authority where applicable.

9. Children

YondUP is not directed to children under 18, and we do not knowingly collect their personal data. Contact privacy@yondup.design if you believe a child has provided data.

10. Changes and contact

We may update this policy as the service or legal requirements change. We will update the effective date and provide additional notice for material changes. Contact privacy@yondup.design with privacy questions or requests.