Privacy policy
Last updated 12 November 2026
This policy explains what personal data Yellowkey collects when you use the website, the API or the connector for AI assistants, what it is used for, and the choices you have. Yellowkey collects little, uses it to run the service, and does not sell it.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Name, email address, profile picture | Your Google account, when you sign in | To create and recognise your account, and to write to you about it |
| Questions, conversations, saved screens | You | To answer, to show your history, to keep your saved work |
| Plan, usage counts, dates of use | Your use of the service | To apply your plan's allowance and to bill correctly |
| Subscription status and payment history | Our payment provider | To manage your subscription. Full card details stay with the payment provider; we never see them |
| API keys | Created by you | To authenticate your calls. Only a fingerprint of each key is stored; the key itself is shown once and cannot be read back |
| Connections to AI assistants | Created when you allow an app | To let that app read data for you. Access tokens are stored as fingerprints only |
| Technical data: IP address, browser type, time and address of requests, errors | Your device | Security, prevention of abuse, diagnosis of faults |
We do not ask for, and ask you not to send, sensitive personal data (health, beliefs, and the like) or other people's personal data in your questions.
The connector for AI assistants
When you connect an AI assistant to Yellowkey, the assistant sends Yellowkey the requests it makes on your behalf: which tool it calls and with which parameters (for example a company identifier or screening filters). Yellowkey returns the data and records that a call was made, to apply your allowance. Yellowkey does not receive the rest of your conversation with the assistant, and does not receive your assistant account's password. What the assistant does with the data is governed by that assistant's own privacy policy. You can end the connection at any time from the assistant's settings.
How we use it
- To provide the service you asked for (performance of the contract): your account, answers, history, allowance, billing, support.
- To keep the service secure and working (legitimate interest): logs, limits, detection of abuse, fixing faults, aggregate statistics that identify no one.
- To meet legal duties: accounting and tax records.
Yellowkey does not sell personal data, does not show advertising, does not build advertising profiles, and does not use your questions or conversations to train AI models. No decision with legal effect on you is taken by automated means.
Who processes it for us
We rely on service providers that process data on our instructions and under contract: hosting and database providers, the sign-in provider (Google), a payment provider, and providers of AI models that receive the text of a question in order to write the answer. They may not use the data for their own purposes. We may disclose data when the law requires it, or to protect the service and its users against fraud or abuse. If the service is transferred to another operator, your data moves with it under this policy, and you will be told.
Where it is processed
Data is processed in Europe and in the United States. Where data leaves the country you live in, we rely on the safeguards the law provides, such as standard contractual clauses.
How long we keep it
- Account data, conversations and saved screens: as long as your account exists. Closing the account, or asking us to, deletes them within 30 days.
- Billing records: as long as accounting and tax law require.
- Technical logs: a limited period, then deleted or made anonymous.
- Connections to AI assistants: until you disconnect, or until they expire for lack of use.
Cookies and local storage
Yellowkey stores only what the site needs to work: your sign-in session and your display preferences. There are no advertising cookies and no third-party trackers. The payment page is run by our payment provider and uses its own cookies to prevent fraud.
Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to receive a copy in a usable format, and to object to or restrict certain uses. Write to hello@yellowkey.ai from the email address of your account; we answer within 30 days. You also have the right to complain to the data protection authority of the country you live in.
Security
Data is encrypted in transit. Access to it is restricted to what running the service requires. Keys and access tokens are stored as fingerprints, so that a copy of our database would not reveal them. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Age
Yellowkey is for adults. We do not knowingly collect data from anyone under 18.
Changes
If this policy changes, the date at the top changes with it, and account holders are told beforehand of any change that matters.
Contact
For any question about your data: hello@yellowkey.ai.