Privacy Policy
Last Updated: May 31, 2026
At Yeda AI, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or use our services.
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, configure a chatbot widget, or communicate with us. This includes: • Account Information: Name, email address, password (encrypted) • Payment Information: Processed securely through Stripe; we do not store credit card numbers • Chat Content: Conversations between your chatbot widgets and end users • Usage Data: Message counts, API usage, and analytics for your widgets • Device Information: IP address, browser type, and device identifiers for security purposes
2. How We Use Your Information
We use the information we collect to: • Provide, maintain, and improve our AI chatbot services • Process transactions and send related information • Send technical notices, security alerts, and support messages • Respond to your inquiries and provide customer support • Monitor and analyze usage trends to improve user experience • Detect, prevent, and address technical issues and security threats • Comply with legal obligations and enforce our terms
3. Data Retention
We retain your data for as long as necessary to provide our services and fulfill the purposes described in this policy: • Account Data: Retained until you delete your account • Chat Conversations: Retained for 90 days, then automatically deleted (configurable for enterprise plans) • Analytics Data: Retained for 90 days for free/starter tiers, up to 1 year for business plans • Payment Records: Retained for 7 years as required by law • Security Logs: Retained for 90 days You may request deletion of your data at any time through your account settings or by contacting us.
4. Cookies and Tracking
We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand how visitors interact with our website. You can control cookie preferences through your browser settings or by using our cookie consent banner. We use: • Essential Cookies: Required for site functionality and security • Analytics Cookies: Help us understand how you use our services • Preference Cookies: Remember your settings and preferences
5. Advertising Cookies and Google AdSense
We may use Google AdSense and related Google advertising technologies to display ads on content pages, measure ad performance, prevent fraud, and improve ad relevance. Google and its partners may use cookies, device identifiers, IP address, browser data, and page interaction data to serve personalized or non-personalized ads depending on your location, consent choices, and Google settings. Where consent is required by law, advertising cookies and personalized ads will be controlled by our consent banner or other consent mechanism. You can also manage Google ad personalization through Google's Ad Settings and your browser privacy controls.
6. Data Sharing
We do not sell your personal information. We may share your information with: • Service Providers: AWS (hosting), Stripe (payments), Google AdSense (advertising), and AI providers (Groq, Google) for processing • Legal Requirements: When required by law, court order, or governmental authority • Business Transfers: In connection with a merger, acquisition, or sale of assets All service providers are bound by data processing agreements and confidentiality obligations.
7. Data Security
We implement industry-standard security measures to protect your personal information: • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256) • Password Security: Passwords are hashed using bcrypt with salt • Access Controls: Role-based access with multi-factor authentication for admin access • Monitoring: 24/7 security monitoring and intrusion detection • Auditing: Regular security audits and penetration testing However, no method of transmission over the Internet is 100% secure.
8. Your Rights (GDPR)
If you are in the European Economic Area (EEA), you have the following rights under GDPR: • Right to Access: Request a copy of your personal data • Right to Rectification: Request correction of inaccurate data • Right to Erasure: Request deletion of your data ("right to be forgotten") • Right to Data Portability: Receive your data in a structured, machine-readable format • Right to Object: Object to processing based on legitimate interests • Right to Restrict Processing: Request limitation of how we use your data To exercise these rights, use the data management tools in your account settings or email privacy@yeda-ai.com.
9. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under CCPA: • Right to Know: Request information about the personal data we collect and share • Right to Delete: Request deletion of your personal information • Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data) • Right to Non-Discrimination: We will not discriminate against you for exercising your rights To exercise these rights, email privacy@yeda-ai.com with "CCPA Request" in the subject line.
10. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place, including: • Standard Contractual Clauses approved by the European Commission • Data Processing Agreements with all service providers • Privacy Shield certifications where applicable
11. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@yeda-ai.com.
12. Third-Party Services
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Key third-party services we use include: • Groq and Google AI: For AI model inference (chat processing) • Stripe: For payment processing • AWS: For cloud hosting and data storage We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by: • Posting the new Privacy Policy on this page • Updating the "Last Updated" date • Sending an email notification for significant changes Your continued use of the Services after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: • Email: privacy@yeda-ai.com • Data Protection Officer: dpo@yeda-ai.com • Mail: Yeda AI, Inc., [Address to be added] For GDPR inquiries, our EU representative can be contacted at eu-representative@yeda-ai.com.
For enterprise customers, please review our Data Processing Addendum (DPA) and Terms of Service.