Privacy Policy

1. Who we are

Yonderly (“we”, “us”) provides an AI-powered assistant for small businesses at yonderly.online. We help you reply to customer emails and WhatsApp messages using information you provide about your business.

2. Information we collect

• Account data: name, email address, and login credentials (managed by Supabase Auth).
• Business profile: business name, services, prices, tone, contact email, and other details you enter during onboarding.
• Connected channels: if you connect Gmail or WhatsApp, we store OAuth tokens or connection IDs needed to read and send messages on your behalf.
• Message content: customer emails and WhatsApp messages processed to generate replies, plus logs of sent replies.
• Payment data: subscriptions are processed by PayPal. We receive subscription status and IDs from PayPal — not your full card or bank details.
• Support messages: information you submit via our contact or bug-report form.
• Technical data: basic server logs (IP address, browser type, timestamps) for security and rate limiting.

3. How we use your information

• Provide, operate, and improve the Yonderly service.
• Generate AI replies based on your business profile and incoming customer messages.
• Process subscriptions and enforce access to paid features.
• Respond to support requests and fix bugs.
• Protect against abuse, fraud, and security incidents.

4. AI processing

Customer message content and your business profile may be sent to third-party AI providers (currently Anthropic) solely to generate replies. We do not use your data to train public AI models. Prompts are limited to what is needed to answer each message.

5. Third-party services

We use trusted providers to run Yonderly, including:

• Supabase (authentication and database)
• Anthropic (AI replies)
• Google (Gmail OAuth and API, if you connect Gmail)
• Meta (WhatsApp Business API, if you connect WhatsApp)
• PayPal (subscriptions and billing)
• Vercel (hosting)

Each provider has its own privacy policy governing how they handle data.

6. Data retention

We keep your account and business data while your subscription is active. If you cancel, we delete or anonymize personal data within a reasonable period, except where we must retain records for legal, tax, or dispute purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, or to object to certain processing. Contact us to make a request — we will respond within a reasonable time.

8. Security

We use encryption in transit (HTTPS), access controls, and environment-based secret management. No method of transmission over the internet is 100% secure; we work to protect your data but cannot guarantee absolute security.

9. Children

Yonderly is for businesses and is not directed at children under 16. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. We will post the new version on this page and update the effective date. Continued use after changes means you accept the updated policy.

11. Contact

Questions about privacy: yonderly101@gmail.com or our contact form.