Draft. The bracketed details are placeholders, and this page has not had a legal review yet.

Privacy policy

Effective [Effective date] · Terms of service

The short version: we use what you give us to make and post your videos, we never sell it, AI services process it only to make your video, and you can delete it any time.

1. Who we are

Yasai is run by [Company legal name], [Registered business address] ("Yasai", "we"). We decide how your information is used, so we are its controller. Write to us at privacy@getyasai.com about anything in this policy.

2. What we collect

  • Account: your email address and, if you sign in with Google, your name and profile picture from Google.
  • Billing: your plan, credit balance and credit history. Stripe takes your card details; we never see or store your card number. We keep the Stripe customer and subscription IDs.
  • What you make: your ideas, scripts and settings, the videos, pictures, voiceovers and music we make for you, videos you upload to the Studio, and your edits.
  • Connected social accounts: if you connect YouTube, TikTok or Instagram, the account's name, handle and profile picture, access tokens that let us post when you ask (stored encrypted), and a record of the posts you made through Yasai with their links.
  • Technical: sign-in cookies that keep you signed in, your light or dark theme choice on your device, and server logs (time, page, error codes) that help us fix problems.

We don't use advertising cookies or trackers, and we don't buy information about you from anyone.

3. How we use it

  • To make your videos and run the Studio: we send your prompts and content to the AI services listed below.
  • To post to your social accounts, only when you press Post or schedule a post.
  • To run your account: sign-in emails, credits, payments, receipts and support.
  • To keep Yasai safe: stopping abuse, fraud and content that breaks our terms.
  • To meet legal duties, such as keeping payment records for tax.

4. Services that process your information for us

These companies process information only to provide their service to us. We use their business (API) terms, which do not let them train their models on what we send. None of them may sell it.

ServiceWhat it does for us
Anthropic (Claude), OpenAI as a backupWrites scripts from your idea; Studio text tools
ElevenLabsVoiceovers, music and voice cleanup
Black Forest Labs, Google (Gemini and Vertex AI)Pictures and AI video clips
fal.ai, BytePlusAI video clips and presenters
SupabaseSign-in and our database
Cloudflare (R2)Storing your videos and uploads
Vercel, InngestHosting the app and running render jobs
StripePayments
ResendSign-in and account emails

Some of these services are in the United States or other countries. Where the law requires it, we use standard contractual clauses for transfers.

5. YouTube, TikTok and Instagram

Connecting an account is optional. We ask each platform only for what posting needs: to upload videos and to read the account's name and picture, so you can see where a post is going. We don't read your messages, comments, followers or other videos, and we only post the video you chose, with the text you wrote, when you ask.

YouTube and Google

Yasai uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. Yasai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time on your Google security settings page.

TikTok and Instagram

You can remove our access in TikTok under Settings and privacy, Security, Apps and services, and in Instagram under Settings, Website permissions, Apps and websites.

Disconnecting an account on our Connected accounts page deletes its tokens straight away, tells the platform we no longer need access where it lets us, and cancels its scheduled posts. Posts already published stay on the platform until you delete them there.

6. When we share information

We don't sell or rent your personal information, and we don't share it for advertising. We share it only:

  • with the services listed above, to run Yasai;
  • with a platform you connected, when you post to it;
  • when the law requires it, or to protect people from harm or fraud;
  • with a buyer, if Yasai is sold, under this same policy.

7. How long we keep it

  • Your account, videos and projects: until you ask us to delete them or close your account.
  • Original files you upload to the Studio: 7 days. The Studio keeps its own working copy with your project.
  • Social account tokens: until you disconnect the account or delete your account.
  • Payment and credit records: as long as tax and accounting law requires, usually up to 7 years.
  • Server logs: up to 30 days.

8. Your choices and rights

You can watch and download your videos in My videos, and disconnect social accounts at any time. To get a copy of your information, correct it, delete particular videos, or delete your account and everything in it, email privacy@getyasai.com from your account's email address. We answer within 30 days.

Depending on where you live (for example the EU, the UK or California), you may also have the right to object to or restrict how we use your information, and to complain to your data protection authority. We don't sell or "share" personal information as California law defines it.

9. Security

Everything travels over encrypted connections. Social account tokens are encrypted again before they are stored, and only our servers can read them. Your files are kept in private storage and shared only through short-lived links. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

10. Children

Yasai is for people aged 18 or over. We don't knowingly collect information from children. If you think a child has an account, tell us and we will delete it.

11. Changes and contact

If we change this policy in a way that matters, we will email you or show a notice in the app before the change applies. Questions or requests: privacy@getyasai.com, or [Company legal name], [Registered business address].