Legal

Privacy Notice

Version 1.0 · Effective 4 October 2026 · Last updated 4 October 2026

1. Who is responsible for your data

Dealtree Ltd (company number 14857148, registered office 14/2E Docklands Business Centre, 10–16 Tiller Road, London E14 8PX, United Kingdom) is the data controller for personal data processed through Yoruvi. Contact: hi@yoruvi.com.

2. What we collect

  • Account data: your email address, account identifiers, preferences and authentication records.
  • Content data: prompts, uploads, outputs, project names, generation metadata and asset lineage.
  • Transaction data: top-ups, generation charges and plan status (card details are processed by Stripe; we never store full card numbers).
  • Technical data: IP address, device and browser information, approximate location derived from IP, errors and security logs.
  • Support, safety and attestation records: communications, rights complaints, policy actions and likeness declarations.
  • Optional analytics data: pseudonymous usage events, only if you accept analytics cookies.

3. Why we process it (lawful bases)

  • Contract: to provide the service you signed up for — account, generation, storage, billing.
  • Legitimate interests: service security, abuse prevention, and improving reliability.
  • Legal obligation: keeping payment, tax and audit records.
  • Consent: optional analytics cookies and any optional marketing. You can withdraw consent at any time via Cookie settings.

4. AI processing

Prompts and media you submit are sent to the AI provider that runs the selected model (see Subprocessors). Higgsfield API training opt-out is enabled for Yoruvi's workspace. Private assets are not routinely viewed by staff; authorised access may occur for support, security, technical investigations, abuse, complaints or legal requirements.

5. Who we share data with

We share information with providers needed to run the service, professional advisers where necessary and authorities when legally required. See the verified inventory on our Subprocessors page. We do not sell personal information to data brokers.

6. How long we keep it

  • Generated media: retained for a limited period (currently 30 days) unless kept under a storage plan.
  • Uploaded media: kept while your account is active, within your plan's allowance.
  • Account and transaction records: kept while your account is active and afterwards as required by tax and company law.

7. Your rights

Under UK GDPR you can request access, correction, deletion, restriction, portability and object to certain processing. To exercise any right, use Request my data on your Account page or email hi@yoruvi.com. You can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. International transfers

Some providers may operate outside the UK. Where required, we use an appropriate transfer mechanism, which may include adequacy regulations, the UK–US Data Bridge where applicable, the UK IDTA or UK Addendum to standard contractual clauses. We do not claim a vendor-specific mechanism without verification; unverified regions are marked Pending verification.

9. Availability

Yoruvi is not currently available in the EEA. This applies when you are located in the European Economic Area (the EU, Iceland, Liechtenstein and Norway), irrespective of citizenship. This notice is written under UK GDPR.

Questions about this document? Email hi@yoruvi.com.