Privacy Policy
This Privacy Policy explains what data Yaffle collects, how we use it, how long we keep it, and the service providers we rely on to operate the product.
Last updated: April 28, 2026
Information We Collect
We collect information you provide directly to us, including your name, email address, password-authenticated account information through Supabase Auth, billing information, project details, client details you enter, and any support or account communications you send to us.
We also collect project and review data generated through the product, including website URLs, review links, client comments, comment replies, screenshots, approvals, environment metadata such as viewport or browser context, and records of actions taken inside the app.
How We Use Information
We use personal and project data to provide the service, authenticate users, create and manage projects, generate review links, capture and display feedback, process approvals, communicate by email, and operate billing.
We may also use information to secure the product, detect abuse, debug issues, enforce plan limits, and improve reliability and user experience.
Third-Party Services
Yaffle currently relies on the following third-party providers:
- Supabase for authentication, application database hosting, and related infrastructure.
- Stripe for subscription billing, checkout, customer portal access, and payment-related records.
- Resend for transactional email delivery such as review and approval emails.
- Vercel Blob for storing uploaded screenshot files created during review.
These providers process data on our behalf according to their own terms and privacy policies.
Retention
We keep account, workspace, project, comment, approval, and billing-related records for as long as needed to operate your account, provide the service, meet legal obligations, resolve disputes, or enforce our agreements.
If you delete a project, the application currently removes the related project record, comments, replies, and approvals from the main application database. Separate backups, provider logs, billing records, and externally stored assets may persist for a limited period based on operational or legal requirements.
Sharing and Disclosure
We do not sell your personal information. We share information only with service providers needed to run Yaffle, when required by law, or when necessary to protect the security, rights, or integrity of the service and its users.
Your Choices
You can update project and client information inside the app, delete projects, and manage billing through the available account flows. If you need help with account data requests, contact us using the details made available through Yaffle.