Privacy Policy

Effective Date: March 2026

1. Introduction

At Yaveran, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information. By using our service, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following types of information:

2.1 Account Information

  • Email address (required for account creation and digest delivery)
  • Name (optional, for personalization)
  • Authentication credentials (when using Google OAuth)

2.2 Source Preferences

  • URLs and handles of sources you choose to follow (X accounts, LinkedIn profiles, YouTube channels, websites)
  • Preferred delivery times and frequency settings

2.3 Usage Data

  • Service interactions and feature usage patterns
  • Device and browser information
  • IP address and general location data
  • Log data including timestamps and error reports

3. How We Use Your Data

We use your information for the following purposes:

  • Service Delivery: To curate and send your personalized daily digest based on your selected sources
  • Account Management: To maintain your account, process payments, and provide customer support
  • Service Improvement: To analyze usage patterns, improve our AI algorithms, and develop new features
  • Communication: To send service updates, security alerts, and respond to your inquiries
  • Legal Compliance: To comply with applicable laws and regulations

4. Third-Party Services

Yaveran uses the following third-party services to operate:

4.1 Supabase

We use Supabase for secure data storage and database management. Your account information and preferences are stored on Supabase infrastructure. Supabase complies with GDPR and industry-standard security practices.

4.2 Paddle

Payment processing is handled by Paddle. We do not store your credit card information. Paddle acts as the merchant of record and handles all payment data in compliance with PCI DSS standards.

4.3 Resend

We use Resend to deliver your daily digest emails. Your email address and digest content are transmitted to Resend solely for delivery purposes.

4.4 Google

If you choose to sign up using Google OAuth, we receive basic profile information (name, email) from Google. We do not access other Google services or data without your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our service. You may delete your account at any time through your account settings. Upon account deletion:

  • Your personal data will be permanently deleted within 30 days
  • Anonymized usage data may be retained for analytical purposes
  • Financial records may be retained longer as required by law

6. Your Rights (GDPR/CCPA Compliance)

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (right to be forgotten)
  • Portability: Request your data in a machine-readable format
  • Objection: Object to processing of your data for certain purposes
  • Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at support@yaveran.com.

7. Data Selling and Sharing

We do not sell your personal data. We do not share your personal information with third parties for their marketing purposes. Data is only shared with the service providers listed above, and only to the extent necessary to operate Yaveran.

8. Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of sensitive data at rest
  • Regular security audits and monitoring
  • Limited access controls to personal data

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Yaveran is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice on our service. Your continued use of Yaveran after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

support@yaveran.com