Privacy Policy
Last updated: September 28, 2026
Supermultiverse LLC (8 The Green, Suite B, Dover, DE 19901, USA) operates Yovara (yovara.io) and is the controller of the personal data described here. Contact: privacy@yovara.io.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account email and login data | To run your account and sign you in | Contract |
| Company information you enter or confirm (website, name, offering, markets, competitors, questions) | To run your analyses | Contract |
| Public content of the websites analysed (and the AI answers about them) | To produce Results | Contract; legitimate interest (public business information) |
| Purchase records (pack, amount, currency, Stripe session id). We never see your card details | Billing, fraud prevention, accounting | Contract; legal obligation |
| Invitations: the invite code you arrived with, when, and its source or campaign; who invited whom | Running the invite programme and preventing abuse | Contract; legitimate interest |
| A hashed (one-way, keyed) form of your IP address when you start a free preview | Abuse and rate limiting | Legitimate interest |
| Service emails ("your analysis is ready") | To tell you when Results are ready | Contract |
We don't sell personal data, and we don't use advertising trackers.
Who processes data for us
- Supabase (via Lovable Cloud): database, authentication, storage.
- Lovable / Cloudflare: hosting.
- OpenAI and Perplexity: we send them the questions and public website content needed to produce Results. We don't send them your account email.
- Stripe (including Link): payments, taxes as merchant of record.
- Resend: service emails.
- Google Fonts: web fonts.
Some of these providers process data outside the EU/EEA (mainly in the United States) under appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep data
- Account and Results: while your account is active. When you ask us to delete your account, we delete them within 30 days.
- Purchase records: as long as tax and accounting law requires.
- Hashed IP addresses of free previews: up to 90 days.
Your rights
You can ask to access, correct, delete or export your personal data, object to or restrict its processing, and withdraw consent where we rely on it. Write to privacy@yovara.io. You can also complain to your data protection authority (in Spain, the AEPD).
Cookies and local storage
We use only what's strictly necessary to run the service: your sign-in session, your theme and language preferences, temporary data of a preview you started, and the invite code you arrived with (kept for up to 60 days). We don't use analytics or advertising cookies, so no consent banner is shown. If that changes, we'll ask for your consent first.
Security
We encrypt traffic and isolate each customer's data at the database level. Access to production systems is restricted.
Changes
We'll post updates here and notify you of material changes.