Legal
Privacy Notice
Version 1.0 · Effective 4 October 2026 · Last updated 4 October 2026
1. Who is responsible for your data
Dealtree Ltd (company number 14857148, registered office 14/2E Docklands Business Centre, 10–16 Tiller Road, London E14 8PX, United Kingdom) is the data controller for personal data processed through Yoruvi. Contact: hi@yoruvi.com.
2. What we collect
- Account data: your email address, account identifiers, preferences and authentication records.
- Content data: prompts, uploads, outputs, project names, generation metadata and asset lineage.
- Transaction data: top-ups, generation charges and plan status (card details are processed by Stripe; we never store full card numbers).
- Technical data: IP address, device and browser information, approximate location derived from IP, errors and security logs.
- Support, safety and attestation records: communications, rights complaints, policy actions and likeness declarations.
- Optional analytics data: pseudonymous usage events, only if you accept analytics cookies.
3. Why we process it (lawful bases)
- Contract: to provide the service you signed up for — account, generation, storage, billing.
- Legitimate interests: service security, abuse prevention, and improving reliability.
- Legal obligation: keeping payment, tax and audit records.
- Consent: optional analytics cookies and any optional marketing. You can withdraw consent at any time via Cookie settings.
4. AI processing
Prompts and media you submit are sent to the AI provider that runs the selected model (see Subprocessors). Higgsfield API training opt-out is enabled for Yoruvi's workspace. Private assets are not routinely viewed by staff; authorised access may occur for support, security, technical investigations, abuse, complaints or legal requirements.
6. How long we keep it
- Generated media: retained for a limited period (currently 30 days) unless kept under a storage plan.
- Uploaded media: kept while your account is active, within your plan's allowance.
- Account and transaction records: kept while your account is active and afterwards as required by tax and company law.
7. Your rights
Under UK GDPR you can request access, correction, deletion, restriction, portability and object to certain processing. To exercise any right, use Request my data on your Account page or email hi@yoruvi.com. You can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. International transfers
Some providers may operate outside the UK. Where required, we use an appropriate transfer mechanism, which may include adequacy regulations, the UK–US Data Bridge where applicable, the UK IDTA or UK Addendum to standard contractual clauses. We do not claim a vendor-specific mechanism without verification; unverified regions are marked Pending verification.
9. Availability
Yoruvi is not currently available in the EEA. This applies when you are located in the European Economic Area (the EU, Iceland, Liechtenstein and Norway), irrespective of citizenship. This notice is written under UK GDPR.
Questions about this document? Email hi@yoruvi.com.