Privacy Policy

1. Introduction

YaroAI ("Company", "we", "our", "us") is an autonomous AI Sales Development Representative platform. It works leads across every channel on a cadence, places AI voice calls, sends follow-ups, and holds real two-way conversations until a lead is booked or politely closed. This Privacy Policy explains how we collect, use, and protect your personal data, and how you can exercise your privacy rights. By using YaroAI, you consent to the data practices described here.

2. Data We Collect

We collect personal data to provide and improve our services. We have categorized this data as follows:

2.1 Demo Request Data

When you request an AI demo call from our public website, we collect the name and phone number you submit, plus an optional email address, so we can place the call you asked for. To protect this form from abuse, we use Google reCAPTCHA for bot detection and apply rate limiting, which may involve processing your IP address and basic request data.

2.2 Account & Identity Data

• Full name, email address, phone number, and username
• Company information and job title
• Account preferences and settings
• Billing and payment information (processed through Stripe)

2.3 Conversation Data

• Voice recordings from AI calls and live conversations
• Call transcripts and conversation analysis
• Messages and replies exchanged across the channels you connect
• Call metadata including duration, timestamps, and participant information

2.4 Campaign & Contact Data

• Contact lists and lead information you upload
• Cadence configurations and AI agent settings
• Outreach outcomes, notes, and performance metrics
• Lead qualification data and conversation outcomes

2.5 Technical & Usage Data

• IP address, browser type, device information, and operating system
• Login data, session information, and access timestamps
• Platform usage patterns and feature interactions
• Error logs and performance data for service improvement

2.6 Third-Party Data

We may receive additional information from our service providers, including ElevenLabs for voice, Unipile for multi-channel messaging, and Supabase for data storage, to operate and improve the Service.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

4. Your Privacy Rights

You have important rights regarding your personal data. Depending on your location, you may have the following rights:

4.1 Access & Portability

• Request access to your personal data and receive a copy in a structured format
• Export your campaign data, contact lists, and account information
• Receive information about how your data is processed

4.2 Correction & Updates

• Correct inaccurate personal data in your account
• Update your contact information and preferences
• Modify cadence settings and AI agent configurations

4.3 Deletion & Erasure

• Request deletion of your account and associated data
• Remove specific call recordings, transcripts, or conversation data
• Delete contact lists and campaign information

4.4 Processing Limitations

• Object to processing of your data for marketing purposes
• Restrict processing while we investigate data accuracy concerns
• Withdraw consent for conversation data processing (may limit service functionality)

To exercise any of these rights, please contact us at contact@yarosdr.com. We will respond to your request within 30 days and may require identity verification for security purposes.

5. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

5.1 Account Data

Account information is retained while your account is active and for up to 90 days after account deletion to allow for reactivation and to comply with legal obligations.

5.2 Conversation Data

Voice recordings, transcripts, call metadata, and messages exchanged across connected channels are retained for up to 2 years for quality improvement and service operation, unless you request earlier deletion.

5.3 Analytics & Performance Data

Aggregated and anonymized performance data may be retained indefinitely for service improvement and research purposes, as this data cannot be used to identify individuals.

6. Third-Party Integrations

YaroAI relies on several third-party services to operate the platform:

6.1 ElevenLabs Voice AI

Voice data is processed through ElevenLabs to generate AI voice calls. ElevenLabs processes voice data according to its own privacy policy and security standards. Data shared with ElevenLabs is limited to what is necessary for voice generation.

6.2 Unipile Multi-Channel Messaging

Messages sent and received across the channels you connect are routed through Unipile. Unipile processes this data according to its own privacy policy, and the data shared is limited to what is necessary to deliver and receive messages on your behalf.

6.3 Google reCAPTCHA

Our public demo request form uses Google reCAPTCHA to detect automated abuse. Google processes the data it collects according to its own privacy policy.

6.4 Supabase Data Storage

Your account data, campaign information, and metadata are stored using Supabase infrastructure. Supabase processes this data according to its own privacy policy and security standards.

6.5 Stripe Payment Processing

Payment information is processed through Stripe and is not stored on our servers. Stripe maintains PCI DSS compliance and processes payments according to its own privacy policy.

7. Data Security

We take reasonable measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication for platform accounts
• Row-level security on stored data
• Rate limiting and bot protection on public-facing forms
• Incident response procedures for potential data breaches

Access to your personal data is limited to authorized personnel and service providers who have a legitimate business need and are bound by confidentiality obligations.

8. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at contact@yarosdr.com.