Privacy Policy
Last updated: 2026-10-20
This policy explains what personal data Yekja collects, why, and your rights under the EU General Data Protection Regulation (GDPR). The data controller is [Your full name or company name], [Your postal address in France], [contact email].
1. Data we collect
Account: your email address and password (stored only as a secure hash by Supabase).
Connected social accounts: account names, profile pictures and access permissions needed to publish for you. These are held by our partner Zernio.
Content: the photos, videos, captions, links and schedules you create, and your link-in-bio page.
Usage: how many posts and AI captions you use each month, and clicks on your link-in-bio links (we count clicks; we do not store visitors' identity).
Payment: handled by Stripe. We never see your full card number. We keep your Stripe customer ID, plan and billing status.
Technical: basic server logs (such as IP address and time) kept by our host for security.
2. Why we use it (legal basis)
To provide the service you signed up for: your account, publishing, AI captions, calendar, link-in-bio (contract).
To take payments and keep accounting records (contract and legal obligation).
To keep the service secure and prevent abuse (legitimate interest).
We do not sell your data, and we do not use it for advertising.
3. Who processes it for us
Supabase (database and login), Vercel (hosting), Zernio (connecting and publishing to social networks), Anthropic (writing AI captions from the text you give), Stripe (payments), and the social networks you choose to post to.
Some of these providers are in the United States. Transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
When you ask for AI captions, only your idea text and settings are sent to Anthropic, not your photos or videos.
4. How long we keep it
Account and content: while your account is open. When you delete your account, we delete your data within 30 days, except what the law requires us to keep.
Billing records: 10 years, as required by French accounting law.
Server logs: up to 12 months.
5. Cookies
We only use cookies that are necessary for the service: one to keep you signed in and one to remember your language. We do not use advertising or tracking cookies, so no cookie banner is needed.
6. Your rights
You can ask to see, correct, download or delete your data, to limit or object to its use, and to withdraw consent at any time. Write to [contact email]. We answer within one month.
You can also disconnect any social account from the Accounts page, and remove its access in that network's settings.
If you think we have not respected your rights, you can complain to the CNIL (cnil.fr), the French data protection authority.
7. Changes
We may update this policy. We will tell you about important changes by email or in the app.