Privacy policy
Last updated: September 26, 2026
yaya is a business suite. You describe your business, and yaya generates your website and keeps working on it. This page says what data we keep, who handles it for us, and how to reach us.
What we keep
- Account. Your email address, your name, and your profile image when you sign in with Google. We also keep sign-in session records, which include an IP address and a browser identifier.
- Business record. What you tell us about the business: name, description, contact details, services, prices, hours, and links.
- Site content. The pages, drafts, images, and published versions of your site, plus files you upload.
- Workspace data. Members and invitations, domains you connect or buy, and API keys you create.
- Customer and lead data. Details about your own customers that you choose to store in your workspace. Contact links on a generated site point at the email and phone you publish, so visitor enquiries reach you directly.
How we use it
- To run the service: sign you in, generate and host your site, and keep your workspace.
- To send sign-in links and workspace invitations by email.
- To process domain purchases you ask for.
- To keep the service secure: bot checks on sign-in, rate limits, and server logs.
- To improve the product through product events and usage logs.
Who processes it
- Cloudflare runs the service: hosting, the database, file storage, the sign-in bot check, and email delivery.
- Google handles sign-in. When you continue with Google, we receive your name, email address, and profile image, and we store the tokens that keep you signed in.
- Stripe processes payments. When you buy a domain, Stripe handles the payment. We do not see or store your card number.
- Cerebras is the model provider that drafts site text. It receives your business name, description, and category. It does not receive your email or sign-in data.
Checking whether a domain is free queries public registry records and a registrar pricing feed. Picking stock photos sends image search terms to the photo libraries. Neither carries your sign-in details.
We do not sell personal information, and we do not share it with advertisers.
How long we keep it
We keep your data while your account or workspace exists. We have not set fixed retention windows yet. Deleting a workspace removes its site content, files, and records from our database and storage.
Your choices
You can update your business details in the workspace. To get a copy of your data, or to delete a workspace or your account, email us at pooria.arab@gmail.com.
Security and location
Your data is stored and processed on the Cloudflare network, which may be in a different country than yours. Traffic is encrypted in transit. We hold no security certifications and do not claim them.
Cookies
We set a session cookie to keep you signed in, and the sign-in bot check may set one of its own. We do not use advertising or tracking cookies.
Children
yaya is for people aged 18 and over.
Changes
When the product changes, we update this page. The date at the top moves.
Contact
Email pooria.arab@gmail.com. The terms of service are on their own page.