Privacy Policy

1. Information We Collect

We collect information in three ways: information you provide to us, information we collect automatically when you use the Service, and information we receive from third parties.

Information You Provide to Us

• Account information. When you create an account, we collect information such as your email address, username, password, and any profile details you choose to add.
• Content and inputs. We collect the content you create, submit, or generate through the Service, including the simulations you build, prompts, messages, selections, and other inputs, as well as the AI-generated outputs produced in response ("Inputs and Content").
• Payment information. If you make a purchase, our third-party payment processor, Stripe, collects and processes your payment details. We do not receive or store your full payment card number; we may receive limited transaction information such as the last four digits, card type, and billing status.
• Communications and support. If you contact us, respond to a survey, or participate in a promotion, we collect the information you provide, such as your name, email address, and the contents of your message.

Information We Collect Automatically

• Device and connection data. We collect information about the device and browser you use, such as IP address, device identifiers, operating system, browser type, language settings, and general location inferred from your IP address.
• Usage data. We collect information about how you interact with the Service, such as the simulations and features you access, pages viewed, actions taken, timestamps, and referring and exit pages.
• Cookies and similar technologies. We and our partners use cookies, pixels, SDKs, and similar technologies to operate and secure the Service, remember your preferences, and measure and improve performance and advertising. See Section 6 (Cookies and Tracking Technologies).

Information From Third Parties

• Authentication providers. If you register or log in using a third-party service, we may receive information from that provider, such as your name and email address, in accordance with that provider's settings and policies.
• Analytics and advertising partners. We receive information from analytics and advertising providers about your interactions with the Service and with advertisements, which helps us understand usage and measure campaigns.
• Payment processor. Stripe provides us with limited information needed to confirm and manage transactions, subscriptions, and refunds.

2. How We Use Your Information

We use the information we collect to:

• provide, operate, maintain, and secure the Service, including generating AI outputs in response to your Inputs;
• create and manage your account and authenticate you;
• process transactions, subscriptions, and refunds, and send related confirmations;
• personalize your experience and develop new features, simulations, and functionality;
• monitor, moderate, and enforce our Terms of Service and Acceptable Use Policy, and to detect, prevent, and address fraud, abuse, security, and technical issues;
• understand how the Service is used, and to measure and improve its performance and safety, including training and improving our models and systems as described in Section 5;
• communicate with you about the Service, including service-related notices, updates, and, where permitted, marketing messages; and
• comply with legal obligations and enforce our rights, agreements, and policies.

3. How We Share Your Information

We do not sell your personal information for money. We share information in the following circumstances:

• Service providers. We share information with vendors that perform services on our behalf, such as cloud hosting and storage, payment processing (Stripe), customer support, analytics, security, and communications.
• AI and model providers. To generate AI outputs and operate the Service, your Inputs and related content may be processed by third-party artificial intelligence and model providers that provide the underlying model and inference infrastructure. These providers process such data to perform services for us in accordance with our agreements with them.
• Analytics and advertising partners. We share certain information, such as identifiers and usage and device data, with analytics and advertising partners (for example, Google and Meta) to measure and improve the Service and to deliver and measure advertising, including cross-context behavioral advertising. Depending on your jurisdiction, this may be considered a "sale" or "sharing" of personal information; see Section 8 for your choices.
• Legal and safety. We may disclose information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; to protect the rights, property, or safety of Yam, our users, or others; or to detect and address fraud or security issues.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
• With your consent or at your direction. We may share information for other purposes with your consent or as otherwise disclosed at the time of collection.
• Aggregated or de-identified data. We may share aggregated or de-identified information that cannot reasonably be used to identify you.

4. Content You Make Available to Others

Certain features of the Service may allow you to share simulations or other content publicly or with other users. Any information you choose to make public may be viewed, copied, and used by others, and we cannot control how they use it. Please use discretion when deciding what to share and do not include information you consider sensitive in content that may be made public.

5. AI Features, Your Inputs, and Model Improvement

The Service uses artificial intelligence to generate interactive content. When you provide Inputs, we and our AI and model providers process those Inputs to generate outputs and to operate the Service. We may also use Inputs, outputs, and related usage information to monitor for safety and abuse, to debug and improve the Service, and to develop and improve our and our providers' models and systems, in each case as permitted by applicable law.

Please do not enter sensitive personal information (such as government identifiers, financial account details, or health information) or the personal information of others into prompts or other Inputs. AI outputs are generated automatically, are fictional, and may be inaccurate; they should not be relied upon as statements of fact about any real person.

6. Cookies and Tracking Technologies

We and our partners use cookies and similar technologies to operate the Service, remember your settings, analyze traffic and usage, and support advertising and measurement. Some cookies are strictly necessary to provide the Service; others are optional and used for analytics and advertising.

Most browsers let you refuse or delete cookies through their settings; doing so may affect the availability or functionality of the Service. Some browsers offer a "Do Not Track" signal. Where required by law, we honor recognized opt-out preference signals (such as the Global Privacy Control) as a valid request to opt out of the sale or sharing of personal information for the browser or device from which we receive the signal.

7. Your Choices

Account information. You may review and update certain account information in your account settings. You may request deletion of your account as described in Section 9.

Marketing communications. You may opt out of marketing emails by following the unsubscribe instructions in those messages. We may still send you non-promotional, service-related communications.

Cookies and advertising. You can manage cookies through your browser settings and can opt out of certain advertising through the tools offered by our partners and through industry opt-out pages such as those operated by the Digital Advertising Alliance and the Network Advertising Initiative.

8. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with certain rights regarding your personal information.

Categories we collect. In the past twelve (12) months, we may have collected the following categories of personal information: identifiers (such as name, email address, username, IP address, and device identifiers); commercial information (such as transaction and subscription records); internet or other electronic network activity information (such as usage and interaction data); geolocation data (general location inferred from IP address); and inferences drawn from the above. We collect this information from the sources, and use and share it for the purposes, described in this Privacy Policy.

Sale or sharing. We do not sell your personal information for money. However, our use of analytics and advertising technologies, including for cross-context behavioral advertising, may be considered a "sale" or "sharing" of identifiers and internet activity information under the CCPA/CPRA. We do not knowingly sell or share the personal information of individuals under 16 years of age.

Your rights. Subject to certain exceptions, you have the right to: (a) know and access the categories and specific pieces of personal information we have collected; (b) request deletion of your personal information; (c) request correction of inaccurate personal information; (d) opt out of the sale or sharing of your personal information; and (e) not receive discriminatory treatment for exercising your rights.

To exercise these rights, contact us at hi@yamstudio.ai. We will verify your request using the information associated with your account. You may use an authorized agent to submit a request on your behalf, subject to verification.

9. Data Retention and Deletion

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate business purposes. When information is no longer needed, we take reasonable steps to delete or de-identify it. You may request deletion of your account and associated content by contacting us or by using any in-Service deletion tools; certain information may be retained where required or permitted by law, including in backups for a limited period.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

11. Users in the European Economic Area and United Kingdom

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: to perform our contract with you (to provide the Service); our legitimate interests (such as securing, operating, and improving the Service and preventing fraud and abuse), provided these are not overridden by your rights; your consent (which you may withdraw at any time); and to comply with legal obligations.

Subject to applicable law, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, to data portability, and to withdraw consent. To exercise these rights, contact us at hi@yamstudio.ai. You also have the right to lodge a complaint with your local data protection authority.

12. Children's Privacy

The Service is intended solely for adults and is not directed to children. You must be at least eighteen (18) years old to use the Service. We do not knowingly collect personal information from anyone under eighteen (18). If we learn that we have collected personal information from a person under eighteen (18), we will take steps to delete that information and terminate the associated account. If you believe a person under eighteen (18) has provided us with personal information, please contact us.

13. International Data Transfers

We are based in the United States and process and store information in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers. By using the Service, you understand that your information may be transferred to and processed in the United States and other countries.

14. Third-Party Links and Services

The Service may contain links to third-party websites and services that we do not operate or control. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy within the Service and updating the "Last updated" date above and, where required by law or as we deem appropriate, by other means such as email. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us:

• Yamstudio Inc.
• 700 Chiquita Ave, Apt 3, Mountain View, CA 94041
• Email: hi@yamstudio.ai