Privacy Policy

Last updated August 11, 2026

This policy explains what Yanto collects, why, and what you can do about it. It covers this site and the product at app.yanto.io.

What we collect

  • Account details: your name, email address, and whether you signed in with a password, Google or Microsoft. Passwords are never stored in a readable form.
  • What you create: the website address you enter, the public pages we read from it, and the brand profile, topics, drafts and edits that follow.
  • Publishing credentials: the keys or tokens you enter so we can publish to your CMS. They are encrypted at rest and used only to publish on your instruction.
  • Billing details: your plan, subscription status and invoices. Card details go straight to our payment provider; we never see or store a full card number.
  • Technical records: IP address, browser type and request timestamps, kept to keep accounts secure and to stop abuse.

We do not ask for sensitive categories of data such as health or biometric information, and we do not buy personal data from third parties.

Cookies

The product uses one cookie: the one that keeps you signed in. There are no advertising cookies, no third-party analytics and no cross-site tracking anywhere in Yanto.

Why we use it

To run the service and generate and publish content when you ask us to; to take payment and send invoices; to answer support requests; to keep accounts secure and prevent abuse; and to meet legal obligations. Where the law requires a legal basis, ours is performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it, or a legal obligation.

AI processing

To produce drafts, the material you work with is sent to third-party AI model providers, who handle it under their own terms. We do not sell your data and we do not use your content to train models of our own.

Who else handles your data

We rely on a small set of vendors: cloud hosting and storage, payment processing, AI model providers, web content retrieval, and email delivery. Each receives only what it needs to do its job and is bound by contract to protect it. Some are located outside your country, and where the law requires it, those transfers are covered by the appropriate safeguards. We could transfer it as part of a merger or acquisition.

How long we keep it

For as long as your account is open. Ask us to close it and we delete your content within 30 days; any copies still sitting in backups go when those backups expire. Records we are legally required to keep, such as invoices, are retained for as long as the law demands.

Your rights

You can ask for a copy of your data, correct it, export it, or have it deleted; you can object to or restrict certain processing, withdraw consent you have given, and complain to your local data protection authority. Most of your content can be edited or deleted directly in the product. For anything else, email info@yanto.io and we will respond within 30 days.

Security

Data is encrypted in transit, publishing credentials are encrypted at rest, and access is limited to the people who need it to run the service. No system is perfectly secure, so if you believe something is wrong, tell us at info@yanto.io.

Children

Yanto is a business product and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. Updates appear here with a new date, and we will email you if a change materially affects you.

Contact

Privacy questions: info@yanto.io. See also our Terms of Service.