Privacy Policy

This policy explains how Yakware ("we", "us") handles personal data in connection with YakPipes. YakPipes plays two distinct roles, and this policy covers both:

• Yakware as controller — for data about you: your account, billing, and your visits to our own websites.
• Yakware as processor — for the data your workflows receive, transform, and send between your connected services. For that data, you are the controller.

1. Data we collect as controller

Account data

When you register we collect your email address, a password (stored only as a salted hash), and optionally an account or display name. We use this data to operate your account, secure it, and send you service emails (verification, password reset, important service notices).

Billing data

Payments are processed by Stripe. We receive and store your subscription status and a Stripe customer reference — never your card number. Stripe's handling of your payment details is described in Stripe's own privacy policy.

Our websites

Our marketing and application pages set only the cookies strictly necessary to operate the site (see the Cookie Policy). We do not run advertising or third-party analytics trackers on our own sites.

2. Data we process on your behalf

When your workflows run, we process the data they touch solely on your instructions, to provide the Service to you:

• Workflow definitions and connector configurations — the graphs you build and the third-party services they call. Connector credentials and secrets are stored encrypted and are decrypted only to execute your workflows.
• Webhook payloads and run data — the request bodies your webhook triggers receive, intermediate step results, and run logs kept so you can inspect and replay runs.

As the controller for this data, you are responsible for having a lawful basis for the personal data your workflows move and for disclosing that processing to the people concerned. We do not use the data your workflows process for our own purposes, and we do not sell it.

3. Subprocessors and hosting

We use a small number of service providers to operate YakPipes:

• Hetzner — cloud infrastructure hosting the Service and its data.
• Stripe — payment processing.

We will update this list before adding subprocessors that handle personal data.

4. Retention

Account data is retained while your account exists and deleted within 90 days of account deletion, except where law requires longer retention (for example, invoicing records). Workflow definitions are retained while your account is active. Run logs and step results are retained so you can inspect history; you may delete workflows (and with them their runs) at any time.

5. Your rights

Depending on your jurisdiction (for example, under the GDPR), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to processing. Contact us at the address below to exercise these rights; we respond within 30 days. If your request concerns data one of our customers moves through their workflows, we will refer you to that customer, who controls the data.

6. Legal bases

Where the GDPR applies, we process account and billing data to perform our contract with you, service emails on the basis of legitimate interest in operating the Service, and data processed on your behalf under your instructions as processor.

7. Security

Data is encrypted in transit. Connector credentials and secrets are encrypted at rest. Access to production systems is restricted to authorized personnel. Passwords are stored as salted hashes; payment card data never touches our servers.

8. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

9. Changes

We will post changes to this policy here and, for material changes, notify you by email or in the Service before they take effect.

SMS / mobile messaging

If you enable SMS verification, we use your mobile number only to send one-time verification codes and account/security notifications. We do not sell, rent, or share your mobile number or SMS opt-in with third parties or affiliates for their marketing. Message frequency varies. Message and data rates may apply. Reply STOP to cancel, HELP for help.

10. Contact

Privacy questions and data-subject requests: support@yakware.com.