Privacy Policy
YugOS is committed to protecting the privacy of the people and businesses that use it. This policy explains what information we collect, why we collect it, and how it is safeguarded.
1. Information we collect
We collect only the information necessary to operate the product:
- Account details — your name, work email, hashed password and assigned role.
- Session data — IP address and basic browser / device information at the time of login, used to secure your account.
- Product usage — actions performed inside YugOS (sales orders, invoices, purchase orders, inventory movements) and internal audit logs tied to your account.
- Anonymous analytics — aggregate signals used to improve reliability and performance.
2. Why we collect it
- To authenticate you and secure your account.
- To provide the requested product functionality.
- To detect and prevent abuse (brute-force, unusual API traffic).
- To improve the product based on aggregate usage.
We do not sell personal information and we do not use your business data to train third-party AI models.
3. Data storage and protection
- Passwords are hashed with bcrypt; plaintext is never stored.
- API traffic is served over HTTPS in production.
- Authorization is enforced server-side on every request via JWT bearer tokens and role-based access control.
- Rate limits protect authentication and AI endpoints from automated abuse.
4. Third-party services
YugOS relies on a small number of trusted providers to deliver the product:
- Cloud infrastructure — application hosting, database storage.
- AI model provider — used exclusively to power Yug Brain. Only the specific question you ask and a summarised business snapshot are sent; no credentials or personal identifiers.
5. Cookies and local storage
YugOS uses browser local storage to remember your session token so you stay signed in between page loads. We do not use tracking cookies, advertising pixels, or cross-site trackers.
6. Your rights
You may, at any time:
- Request a copy of the personal data we hold about you.
- Ask us to correct information that is inaccurate.
- Ask us to delete your account and associated personal data.
- Withdraw consent for optional processing.
Send any of the above requests to privacy@yugos.app.
7. Data retention
We keep your data for as long as your account is active or as needed to provide the service. When an account is deleted, personal data is removed within 30 days, except records we are legally required to retain (for example, financial audit trails).
8. Contact
Questions about this policy or a request regarding your data can be sent to privacy@yugos.app.