Privacy Policy

1. Who we are

Yanan (yanan.io) operates the service. For privacy matters contact hello@yanan.io.

2. Information we collect

• Account details: your email address, password (stored hashed), and sign-in method.
• Profile content you choose to publish: name, bio, photos, press kit, videos, location and links.
• Business records you keep in the service: contacts, leads, bookings, tasks, campaigns and notes. These are your data; we process them on your behalf.
• Conversations with the assistant on your profile, so you can follow up on enquiries and handoffs.
• Usage and technical data: pages visited, feature usage, device and browser type, approximate location from IP address, and error logs.
• Payment details are handled by our payment provider; we do not store card numbers.

3. Information about other people

Visitors who book you or join your Circle give their name and contact details to you, and Yanan stores them in your CRM as your processor. The shared lead directory contains business contact details (typically a department address such as bookings@ and a business phone) collected from organisations' own published pages; see yanan.io/crawler for how that is gathered and how a business can be removed.

4. Why we use it

• To provide the service: showing your profile, taking bookings, sending your emails, running the assistant.
• To send you notifications you have asked for, such as a new booking request.
• To keep the service secure, prevent abuse and meter plan allowances.
• To improve the product, using aggregated or de-identified usage data.
• To meet legal obligations.

5. Sharing

We share personal information only with the service providers needed to run the product (hosting, database, email delivery, AI model providers, analytics), each bound to process it only on our instructions; with authorities where the law requires; or with your direction. We do not sell personal information.

6. Retention

We keep your information while your account is active. When you delete your account, your profile, business records and uploaded files are deleted immediately. Backups are overwritten on a rolling basis within 30 days. We may keep minimal records where the law requires it, for example billing.

7. Your rights

Under the Data Privacy Act you may access, correct, or ask us to delete your personal information, object to certain processing, ask for a copy in a portable format, and complain to the National Privacy Commission. Most of this you can do yourself in Settings; for anything else write to hello@yanan.io and we will respond within the period the law requires.

8. Security

Data is encrypted in transit and at rest, access is restricted by account, and each user can only see their own business records. No system is perfectly secure; if we learn of a breach affecting you we will notify you and the Commission as the law requires.

9. Cookies and local storage

We use the cookies and browser storage needed to keep you signed in and remember preferences. We do not use advertising cookies.

10. Changes

If this policy changes materially you will be asked to accept the new version before continuing to use the service.