Skip to content
All legal documents

Privacy policy

Draft · pending legal reviewThese documents are drafts pending legal review. When you create an account we record which version of the Terms of Service and Privacy Policy you accepted; when the reviewed versions are published, we will ask you to accept them again. Missing details are listed at the end of each document.

Account data

  • Email address, display name and a hash of your password (never the password itself).
  • Workspace memberships and sign-in sessions.
  • Which version of the terms and privacy policy you accepted, when, and a keyed digest of the network you accepted from (never the address itself).

Lead and customer data

  • Company and contact details found on public pages or added by you.
  • Source links and short quotes kept as evidence.
  • Your notes, tasks and deals.

Connected mailboxes

  • Connection status and authorization details.
  • Each sync may read up to 50 recent inbox messages from the last 30 days, including non-customer mail, permitted text bodies and inline delivery or abuse feedback. Attachments are not displayed or stored as files.
  • Yorvos's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Audit records

  • The kind of action, the object, the workspace and the time.
  • Audit records never contain passwords, tokens or email bodies.

Your choices

  • Workspace owners and admins can export everything stored about a customer. Deleting a customer also deletes its lead data, deals and approvals.
  • You can delete your account in Settings. Workspaces where you are the only member are deleted with their data; in shared workspaces your membership ends and your name is replaced with "Deleted user".
  • After an account is deleted we keep the record of which terms it accepted, as evidence. Backups are removed when their retention period ends.

Still to be confirmed

  • Operating entity and registered address
  • Contact for privacy requests
  • Regions served and legal basis for processing
  • Retention periods for customers, messages, backups and acceptance records
  • Sub-processors and cross-border transfers
  • Timelines for export, deletion and complaints