Privacy Policy

1. Data we collect

Account: your email address and password (stored only as a secure hash by Supabase).

Connected social accounts: account names, profile pictures and access permissions needed to publish for you. These are held by our partner Zernio.

Post results: views, likes, comments, shares, saves and follower counts of your posts and connected accounts, read through Zernio to show you your Results and the best times to post.

Content: the photos, videos, captions, links and schedules you create, and your link-in-bio page.

Welcome questions (optional): what describes you, your goals, the apps you post to, how you heard about Yekja, and the country of your sign-up (from your IP address). We use them to give you fitting tips and to understand who uses Yekja. You can skip them.

Invites: if you joined through an invite or partner link, which link it was.

Usage: how many posts and AI captions you use each month, and clicks on your link-in-bio links (we count clicks; we do not store visitors' identity).

Payment: handled by Stripe. We never see your full card number. We keep your Stripe customer ID, plan and billing status.

Technical: basic server logs (such as IP address and time) kept by our host for security.

2. Why we use it (legal basis)

To provide the service you signed up for: your account, publishing, AI captions, calendar, link-in-bio (contract).

To take payments and keep accounting records (contract and legal obligation).

To keep the service secure and prevent abuse (legitimate interest).

To understand who uses Yekja and improve it, from the welcome questions (legitimate interest; you can skip them).

We do not sell your data, and we do not use it for advertising.

3. Who processes it for us

Supabase (database and login), Vercel (hosting), Zernio (connecting and publishing to social networks), Anthropic (writing AI captions from the text you give), Stripe (payments), and the social networks you choose to post to.

Some of these providers are in the United States. Transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

When you ask for AI captions, only your idea text and settings are sent to Anthropic, not your photos or videos.

4. How long we keep it

Account and content: while your account is open. When you delete your account, we delete your data within 30 days, except what the law requires us to keep.

Billing records: 10 years, as required by French accounting law.

Server logs: up to 12 months.

5. Cookies

We only use cookies needed for the service: one to keep you signed in, one for your language, one for your calendar setting, and, if you open an invite or partner link, one that remembers that link for up to 30 days so the right person gets the reward. We do not use advertising cookies or tracking from other companies.

6. Your rights

You can ask to see, correct, download or delete your data, to limit or object to its use, and to withdraw consent at any time. Write to support@shirbuild.app. We answer within one month.

You can also disconnect any social account from the Accounts page, and remove its access in that network's settings.

If you think we have not respected your rights, you can complain to the CNIL (cnil.fr), the French data protection authority.

7. Changes

We may update this policy. We will tell you about important changes by email or in the app.