Privacy Policy

Last updated: March 11, 2026

This Privacy Policy describes how YappJam ("we", "us", or "our") collects, uses, and protects your personal information when you use our collaborative AI development platform ("Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect information from your authentication provider:

  • Google sign-in: Name, email address, profile picture, and Google account ID
  • GitHub sign-in: Name, email address, profile picture, GitHub username, and GitHub account ID

1.2 Payment Information

Payment processing is handled by Stripe. We do not directly collect or store your credit card numbers or bank account details. Stripe may collect payment method details, billing address, and transaction history. Please refer to Stripe's Privacy Policy for details on their data practices.

1.3 Usage Data

We collect information about how you use the Service, including:

  • Session and room creation activity
  • AI token usage and model selection
  • Feature usage (voice, video, Figma, GitHub integrations)
  • Timestamps and duration of sessions

1.4 Content You Provide

When you use the Service, we process:

  • Prompts and messages: Text you submit to the AI assistant and messages exchanged with collaborators in rooms
  • Code and files: Source code and files in your workspaces, including code cloned from GitHub repositories
  • Voice and video: Audio and video streams during collaboration sessions (processed in real-time, not stored)
  • Dictation audio: Voice input sent for speech-to-text transcription (processed in real-time, not stored)

1.5 Technical Data

We automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Referring URL
  • Pages viewed and actions taken

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Authenticate your identity, manage your subscription, process your prompts through AI models, synchronize collaboration sessions, and deliver features
  • Process payments: Manage subscriptions and calculate usage-based billing
  • Improve the Service: Analyze usage patterns to improve performance, fix bugs, and develop new features
  • Communicate with you: Send account-related notifications, billing receipts, and important Service updates
  • Ensure security: Detect and prevent fraud, abuse, and unauthorized access

3. How We Share Your Information

We share your information only in the following circumstances:

3.1 AI Model Providers

Your prompts, messages, and relevant code context are sent to Anthropicfor processing by Claude AI models. This is necessary to provide the core AI functionality of the Service. Anthropic's data handling is governed by their usage policies and privacy practices.

3.2 Third-Party Service Providers

We use the following services to operate YappJam:

  • Stripe — Payment processing and subscription management
  • Deepgram — Speech-to-text transcription for dictation features
  • Neon — Database hosting (PostgreSQL)
  • Railway — Application hosting and infrastructure

3.3 Room Collaborators

When you join a room, your display name, profile picture, role, and messages are visible to other participants in that room. Audio and video streams are transmitted directly between participants via WebRTC peer connections.

3.4 GitHub

When you connect your GitHub account or use GitHub features, repository data is accessed using your GitHub OAuth token. We store your GitHub token for the duration of your session to enable repository operations.

3.5 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Retention

4.1 Account Data

We retain your account information for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as billing records).

4.2 Room and Workspace Data

Room chat history is stored in our database for the lifetime of the room. Workspaces (code files) are stored temporarily on our servers and are automatically deleted when rooms expire due to inactivity (typically within 2 hours of the last user disconnecting).

4.3 Voice and Video

Audio and video streams are transmitted in real-time between participants and are not recorded or stored by us. Dictation audio is processed by Deepgram in real-time and is not retained after transcription.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

  • Encrypted connections (TLS/SSL) for all data in transit
  • Authentication tokens stored securely and validated on each request
  • Database access restricted to authorized services
  • Workspace isolation between rooms
  • OAuth-based authentication (no passwords stored)

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete personal data
  • Delete your personal data (subject to legal retention requirements)
  • Export your personal data in a portable format
  • Object to or restrict certain processing of your data
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@yappjam.com.

7. Cookies and Tracking

We use essential cookies for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled.

We do not use advertising cookies or third-party tracking pixels. We do not sell your personal data to advertisers or data brokers.

8. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

9. International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@yappjam.com.