Privacy Policy

We collect (a) account information you provide directly — name, email address, business name, billing details; (b) data you authorise us to read from connected services such as Google Business Profile, including review content, ratings, reviewer display names, and your business profile metadata; (c) usage data — pages visited, replies generated, model selections — used to improve the service; and (d) limited device data — IP address, browser type — collected automatically through cookies and similar technologies.

We use your information to (i) operate, maintain, and improve Yori; (ii) generate review replies on your behalf using AI models you select; (iii) communicate with you about your account, billing, and product updates; (iv) prevent fraud and abuse; and (v) comply with our legal obligations. We do not sell your personal information.

Yori's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the scopes we need (primarily business.manage) to read reviews and post replies on your behalf. We do not use Google user data to train generalised AI models, do not transfer it except as needed to provide Yori, and do not allow humans to read it except (a) with your explicit consent, (b) for security or legal compliance, or (c) when the data has been aggregated and anonymised.

We use first-party cookies for authentication, session management, and basic analytics. You can control cookies through your browser settings. Disabling them may affect parts of the service that require sign-in.

We share data only with: (i) infrastructure providers strictly required to run Yori (hosting, database, payment processing); (ii) AI model providers, on a per-request basis, to generate the reply you requested; (iii) authorities if compelled by valid legal process; and (iv) acquirers in the event of a merger, acquisition, or sale of assets, with notice to you.

We retain account data for as long as your account is active, plus a reasonable grace period to support reactivation and legal obligations. Generated replies and review records linked to your account are retained until you delete them or close your account, after which they are removed within 30 days from active systems and 90 days from backups.

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing (including under GDPR/UK GDPR and applicable Canadian and US state privacy laws). To exercise any right, email us at hello@yori.app. We will respond within the timeframes required by applicable law.

Yori is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, please contact us and we will delete it.

We may process and store information in countries other than the one in which you reside. Where we transfer personal data out of the EEA, UK, or other regulated regions, we rely on appropriate safeguards such as Standard Contractual Clauses.

Questions about this policy or our data practices? Email hello@yori.app. We will respond promptly.