Privacy Policy
This policy explains what information Yohdl ("we", "us") collects, why, and what your choices are.
1. What we collect
- Account information: your name, email address, and a hashed password (we never store your password in plain text).
- Your content: designs you save (including their thumbnails), images you upload, and stock images your designs use (which we copy to our storage so your designs keep working).
- Usage basics: standard server logs (IP address, browser type, timestamps) kept for security and debugging, and session cookies needed to keep you signed in.
- We do not run third-party advertising or sell personal data.
2. How we use it
To operate the Service: authenticating you, saving and displaying your designs, providing image search, processing payments, sending transactional email (e.g., password resets), preventing abuse, and improving the product. We do not use your designs or uploads to train AI models or for marketing without your explicit consent.
3. Service providers (processors)
We rely on a small set of infrastructure providers that process data on our behalf:
- Laravel Cloud / Amazon Web Services — application hosting, database, and file storage.
- Stripe — payment processing. Card details go directly to Stripe; we never see or store card numbers.
- Pexels and Pixabay — when you search stock imagery, your search terms are sent to these services to return results.
- Google Fonts / Bunny Fonts — font files are loaded from these services, which may see your IP address as part of serving the request.
- Resend — delivery of account emails.
4. Cookies
We use first-party cookies strictly for sessions (keeping you signed in) and security (CSRF protection). No advertising or cross-site tracking cookies.
5. Retention and deletion
- Your content stays as long as your account is active.
- Deleting a design removes it from your dashboard; residual copies (e.g., backups) clear on our backup rotation schedule.
- Deleting your account (available on your profile page) removes your account data and content from active systems.
6. Your rights
Depending on where you live (e.g., EU/EEA under GDPR, California under CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can exercise most of these directly in the app (profile page, design deletion, account deletion); for anything else, contact us and we will respond within a reasonable timeframe.
7. Security
Data is encrypted in transit (HTTPS). Passwords are hashed. Access to production systems is limited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.
8. Children
The Service is not directed to children under 13, and we do not knowingly collect their data.
9. Changes
We may update this policy; material changes will be announced by email or in-app before taking effect.
10. Contact
Privacy questions: support@yohdl.com.