Privacy Policy
Initial draft — subject to final legal review per launch jurisdictions before commercial operation.
1. Who we are.
The service is operated by [LEGAL ENTITY] ([ENTITY ADDRESS]), the data controller. Contact: support@myyakan.com.
2. What we collect.
The minimum needed to operate the service: your email; language and theme preferences; your consent record (the exact consent text hash + timestamp); usage records (which analyses you open, and timestamps); and aggregate, non-identifying page-view counts (which pages are visited, and whether the visitor is signed in) — stored only as running totals, with no IP address, no visitor identifier, and no per-visitor tracking. During the free beta we do not collect financial-account or payment data, and we do not execute trades.
3. How we use it.
To provide and secure the service; to send you your invitation and service/account emails (not marketing blasts); to enforce beta limits; and to understand product usage in aggregate. Waitlist email is used only to invite you.
4. Legal basis.
[where applicable, e.g. GDPR]: performance of the service you request, your consent, and our legitimate interest in operating and securing the platform.
5. Sharing.
We do not sell your data and do not share it with third parties for advertising. We use a limited set of processors strictly to run the service (e.g. hosting, database, transactional email, error monitoring), bound to protect your data. [List processors on request.]
6. Security.
Data is stored with encryption in transit and least-privilege access. Error monitoring is configured to scrub personal data (email, IP, tokens) before it is recorded.
7. Retention.
We keep data only as long as needed for the purposes above or as required by law, then delete or anonymize it.
8. Your rights.
Subject to [applicable law], you may request access to, correction of, or deletion of your data, and may withdraw consent, at any time via support@myyakan.com.
9. International transfers.
Data may be processed in regions where our processors operate, including [region — e.g. EU/Tokyo], with appropriate safeguards.
10. Children.
The service is not directed to persons under the legal age in their jurisdiction.
11. Changes.
We will update this policy as needed and, before commercial launch, to match the requirements of the approved launch jurisdiction(s); material changes will be notified.
This Privacy Policy is a draft subject to final legal review.