Privacy Policy

Yevia is the data controller responsible for your personal data. Contact: ke1vin.kapustian@gmail.com.

Account data — your name and email address when you register.

Content data — URLs, text, or files you submit for content generation, and the outputs we produce.

Payment data — billing information processed by Stripe. We never store card numbers.

Technical data — IP address (for security and rate limiting), browser type, usage logs.

• To provide and operate the Yevia service
• To process payments and manage your subscription
• To send account-related emails (verification, receipts, important notices)
• To prevent abuse, spam, and fraudulent account creation
• To improve the service through aggregate usage analytics

We do not use your content to train AI models.

We share data only with providers necessary to operate Yevia:

• Supabase — database and user authentication
• Stripe — payment processing
• Anthropic — AI text generation (your submitted content is processed)
• Cloudflare — security, CDN, and CAPTCHA verification
• Fal.ai — AI image generation
• Resend — transactional email delivery
• Upstash — rate limiting (anonymized IP hashes)

We do not sell, rent, or trade your personal data.

Account data is retained until you delete your account, plus 30 days for backup recovery. Payment and billing records are retained as required by applicable law. You may request deletion at any time.

If you are located in the EU or EEA, you have the following rights under GDPR:

• Access — obtain a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Restriction — limit how we process your data in certain circumstances
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, email ke1vin.kapustian@gmail.com. We will respond within 30 days.

We use only essential session cookies required for authentication. We do not use tracking, advertising, or analytics cookies.

All data is encrypted in transit (TLS 1.3) and at rest. We follow industry-standard security practices and perform regular reviews. In the event of a data breach affecting your rights, we will notify you as required by law.

Yevia is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe we have done so, contact us immediately.

We may update this Privacy Policy. We will notify you of significant changes by email. Continued use of Yevia after changes constitutes acceptance.

Privacy questions, data requests, or complaints: ke1vin.kapustian@gmail.com.