Privacy Policy

1. Introduction

Welcome to Yaninn ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our application.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the application, express an interest in obtaining information about us or our products and services, when you participate in activities on the application, or otherwise when you contact us.

• Names
• Email addresses
• Job titles
• Authentication data (via SSO providers like Google and Microsoft)
• Business data uploaded for dashboard visualization

3. How We Use Your Information

We use personal information collected via our application for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

4. Data Storage & Infrastructure

Our application is hosted on Microsoft Azure. Your data is primarily stored in data centers located in Southeast Asia (Singapore) to ensure low latency and compliance with regional standards. Microsoft Azure adheres to industry-leading security standards, including ISO 27001 and SOC 2.

5. AI Processing & Third-Party Services

To provide advanced features such as "Insight Generation" and "AI Chat," we utilize third-party services:

• Google Gemini API: Our sole AI model provider. Chat messages, voice notes, images, and relevant data snippets (KPIs, aggregated summaries) are transmitted to Google's Gemini API for processing. We use the paid tier, under which your data is not used to train Google's models.
• Upstash (AWS Infrastructure): Redis caching of session data is hosted in Singapore (ap-southeast-1). The vector search index for uploaded documents is hosted in the United States (us-east-1).
• Cohere: Used to re-rank document search results; retrieved document excerpts are transmitted for scoring and are not used to train Cohere's models.

6. International Data Transfers

While our primary storage is in Southeast Asia, the use of AI features involves transferring data to Google's Gemini API (global endpoints), and document search involves the Upstash vector index and Cohere re-ranking service located in the United States. By using these features, you consent to this transfer. We ensure that these providers maintain strict data protection standards compatible with enterprise requirements.

7. Data Security & Retention

We implement strong encryption standards (TLS 1.2+) for data in transit and Transparent Data Encryption (TDE) for data at rest on Azure SQL. Upon contract termination, your data will be retained for a grace period of 30 days to allow for data retrieval/export, after which it will be permanently deleted from our systems.

8. Cookie Policy

We use cookies and similar tracking technologies to track the activity on our service and hold certain information.

• Essential Cookies: Necessary for authentication and security (e.g., keeping you logged in).
• Functionality Cookies: Used to remember your preferences and settings.
• Third-Party Cookies: Our SSO providers (Google, Microsoft) may use cookies to manage the sign-in process.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service (like logging in).

9. Contact Us

If you have questions or comments about this policy, you may email us at chaiyanun.p@yaninn.io.