Privacy Policy

1. Data we collect

Account details (name, email), authentication artefacts (sessions, 2FA secrets), organisation data you create, and minimal request metadata for security and reliability.

2. How we use it

To provide the service, secure your account, send transactional emails, process payments via Stripe, and improve the product.

3. Sharing

We share data only with service providers needed to run the platform (e.g. Stripe for payments, our email provider, our hosting provider) and never sell it.

4. Your choices

You can update your profile, change your email, enable two-factor authentication, and delete your account from settings.

5. Security

Passwords are hashed, sessions are signed, sensitive endpoints are rate-limited, and we apply standard security headers and CSRF protection.

6. Analytics and cookies

We use PostHog as a processor for product analytics and session replay. Session replay masks input fields and personal or on-screen content. Analytics data is processed in the EU. We use cookies and local storage for analytics; visitors who are not signed in can control analytics via the cookie banner, while analytics for signed-in users is covered by the service agreement.

We use Google Analytics 4 to understand how visitors find and use YesSort, so we can improve our marketing and product. Google processes this data outside the UK/EU (in the United States and other countries) as a data processor on our behalf, under appropriate transfer safeguards. Analytics and advertising cookies are only set when you accept them — we use Google Consent Mode, so nothing is stored until you consent. You can change your choice at any time via the cookie settings.