Privacy Policy

Scope and responsibility

This draft describes selected features of the Yavqo website. Separate products, the online store, the jobs portal, and other linked services may have their own privacy notices.

The full legal identity and address of the responsible organization, a working privacy contact, and an effective date must be confirmed before this notice is finalized.

Accounts and services

Account features use Supabase for authentication and stored account information. Information you provide through account forms is used by the corresponding account feature. Signed-in notification features also connect to the account service.

The website includes payment-related integrations with Stripe. Payment and billing features may exchange customer, billing, and transaction information with that service. The complete data inventory and provider configuration still need confirmation.

Sign-in verification and rate limits

Website sign-in and registration use email verification when required. We send a six-letter code through Resend from noreply@yavqo.com. The email includes the requesting IP address. Codes expire after ten minutes; a verified account and IP combination is authorized for one hour.

The website stores keyed hashes of IP addresses, codes, and challenge identifiers, alongside the email address, attempt counts, and expiry times needed for verification. It stores session authorization records and rate-limit counters to enforce these controls. Passwords are handled by the authentication service and are not stored in these challenge records.

The short-lived verification cookie is HttpOnly and essential for the requested sign-in. Expired security records are rejected immediately and removed during later code-send cleanup; this does not control retention in authentication or email-provider logs.

Cookies and browser preferences

When allowed in Cookie Settings, the website stores preferences such as appearance and signed-out notification state in your browser. Authentication uses session cookies, and language selection is remembered in a translation cookie and reflected in the page URL.

You can change appearance and language using the website controls. Your browser’s site-data settings let you remove cookies and local storage. Doing so may reset preferences or sign you out; it does not delete server-side account records.

Language suggestions and translation

When preferences are allowed and before the language suggestion has been shown, the browser contacts ipapi.co to estimate your country from your IP address. That request shares your IP with the service. If the lookup is unavailable, the suggestion uses your browser language.

The suggestion feature stores a flag in your browser to remember that the prompt has appeared, rather than storing your IP or country. The preview route can show the prompt again. Clearing browser storage can reset the flag.

Yavqo Translate connects to a third-party translation service that processes page content. Selecting English returns the website to its original language. Provider-specific retention and processing details remain to be documented.

Support assistant

When the support-assistant category is allowed in Cookie Settings, the Help Center loads an ElevenLabs support assistant. Loading the widget connects your browser to that provider. If you interact with it, the information you enter or communicate is processed by the assistant service.

Avoid including passwords, full payment details, or unnecessary sensitive information in a support conversation. The assistant’s retention settings and complete processing details need confirmation.

Providers and other websites

Account, payment, language, hosting, and assistant features rely on service providers. Browser requests to these services include connection information needed to deliver the feature.

Links to the store, blog, jobs portal, and product apps open separate services. Review the information at the destination before sharing personal information. This draft is not a complete list of providers, recipients, hosting regions, or international transfer arrangements.

Retention and security

Browser preferences can remain until cleared or replaced. Account and provider-side retention periods have not been confirmed for this draft. No fixed deletion period or complete security guarantee is stated here.

The final policy needs a purpose-specific retention schedule and a description of the safeguards and transfer arrangements actually used.

Choices and privacy requests

Use the account area to review the settings available to you, and the footer to change the website language. Removing browser data is separate from deleting an account or information stored by a provider.

A working privacy-request channel and the applicable process for access, correction, deletion, objection, portability, consent withdrawal, and complaints must be confirmed before this policy becomes effective. General questions can be sent to contact@yavqo.com. A dedicated privacy-request process still needs confirmation.

Policy completion and updates

Before publication as an effective policy, Yavqo must confirm the responsible legal entity, processing purposes and legal bases, recipient details, retention, international transfers, applicable rights and regulator information, and any rules for children’s information.

This draft has no effective date. An approved version should identify its effective date and explain how material changes are communicated.