Privacy Policy

1. Information We Collect

We collect the following categories of information:

Information you provide

• Account information — your email address, password (stored only as a salted hash), and display name; and, where you choose to use it, profile details such as your role, company or studio name, and logo.
• Content — images, prompts, reference material, moodboards, projects, and other files you upload to or generate within the Service (“Content”).
• Workspace & collaboration data — workspace settings, team membership, invitations, roles, and comments.
• Communications — messages you send us, including support requests and feedback.

Information collected automatically

• Usage data — actions you take in the Service, features used, and generation activity.
• Device & technical data — IP address, browser type, operating system, and similar identifiers, collected through cookies and similar technologies.

Information from third parties

• Authentication providers — if you sign in with Google, we receive basic profile information (such as your name and email) from Google in accordance with their permissions.
• Payment information — payments are processed by Stripe. We do not store full card numbers; we receive limited billing details and subscription status from Stripe.

2. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service;
• Process your Content to generate images, videos, and other outputs you request;
• Create and manage your account, workspaces, and team collaboration;
• Process payments, manage subscriptions, and send billing-related messages;
• Communicate with you about updates, security alerts, and support;
• Monitor, prevent, and address fraud, abuse, and security issues;
• Understand how the Service is used so we can improve it; and
• Comply with legal obligations and enforce our agreements.

3. AI & Generated Content

The Service uses artificial-intelligence models to generate images, video, and other outputs from the prompts and reference material you submit. To provide these features, your prompts and uploaded Content may be transmitted to and processed by third-party AI providers acting as our processors. We do not sell your Content, and we do not use your private Content to train foundational models offered to other customers except where you have given explicit consent or as otherwise permitted by law.

4. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers (subprocessors) — vendors who process data on our behalf, including cloud hosting and database infrastructure (Supabase, Vercel), payment processing (Stripe), authentication (Google), transactional email (Resend), and AI generation providers. Each is bound to use the data only to provide services to us.
• Within your workspace — Content and activity may be visible to other members of a workspace you belong to, according to their roles and permissions.
• Legal & safety — when required by law or to protect the rights, property, or safety of YMEE, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your consent — for any other purpose disclosed to you at the time.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete Content or your account, we will delete or de-identify the associated personal information within a commercially reasonable period, except where retention is required by law.

6. Data Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and hashed password storage. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. To exercise any of these rights, contact us at hello@ymee.us. You may also update much of your information directly in your account settings.

8. International Data Transfers

We are based in the United States and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal information.

9. Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect the functionality of the Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the date above and, where appropriate, through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: