Privacy Policy

This Privacy Policy describes how YappJam ("we", "us", or "our") collects, uses, and protects your personal information when you use our collaborative AI development platform ("Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect information from your authentication provider:

• Google sign-in: Name, email address, profile picture, and Google account ID
• GitHub sign-in: Name, email address, profile picture, GitHub username, and GitHub account ID

1.2 Payment Information

Payment processing is handled by Stripe. We do not directly collect or store your credit card numbers or bank account details. Stripe may collect payment method details, billing address, and transaction history. Please refer to Stripe's Privacy Policy for details on their data practices.

1.3 Usage Data

We collect information about how you use the Service, including:

• Session and room creation activity
• AI token usage and model selection
• Feature usage (voice, video, Figma, GitHub integrations)
• Timestamps and duration of sessions

1.4 Content You Provide

When you use the Service, we process:

• Prompts and messages: Text you submit to the AI assistant and messages exchanged with collaborators in rooms
• Code and files: Source code and files in your workspaces, including code cloned from GitHub repositories
• Voice and video: Audio and video streams during collaboration sessions (processed in real-time, not stored)
• Dictation audio: Voice input sent for speech-to-text transcription (processed in real-time, not stored)

1.5 Technical Data

We automatically collect:

• IP address
• Browser type and version
• Device information
• Referring URL
• Pages viewed and actions taken

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Authenticate your identity, manage your subscription, process your prompts through AI models, synchronize collaboration sessions, and deliver features
• Process payments: Manage subscriptions and calculate usage-based billing
• Improve the Service: Analyze usage patterns to improve performance, fix bugs, and develop new features
• Communicate with you: Send account-related notifications, billing receipts, and important Service updates
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access

3. How We Share Your Information

We share your information only in the following circumstances:

3.1 AI Model Providers

Your prompts, messages, and relevant code context are sent to AI model providers for processing. YappJam routes requests to Anthropic (Claude), OpenAI (GPT), and Google AI (Gemini) depending on the model selected for your session.

YappJam uses commercial API tiers from these providers. Per their commercial terms, prompt and response data is not used to train their models. Audio processed by Deepgram for dictation is not retained after transcription.

For the full list of sub-processors that touch customer data, see our Sub-processors page.

3.2 Third-Party Service Providers

We use the following services to operate YappJam:

• Anthropic, OpenAI, Google AI: AI model providers (commercial API tiers, no training on your data)
• Stripe: Payment processing and subscription management
• Deepgram: Speech-to-text transcription for dictation features (audio not retained)
• Neon: Database hosting (PostgreSQL)
• Railway: Server hosting and infrastructure
• Vercel: Web client hosting, edge delivery, and cookieless web analytics
• GitHub: Repository operations when you connect your GitHub account
• Figma: Design context when you connect a Figma frame
• Google Workspace: Calendar integration when you connect your Google account
• PostHog for product analytics
• Sentry for error monitoring; session replay only with your consent
• Google Tag Manager for tag management

See the Sub-processors pagefor each provider's purpose, data processed, and region.

3.3 Room Collaborators

When you join a room, your display name, profile picture, role, and messages are visible to other participants in that room. Audio and video streams are transmitted directly between participants via WebRTC peer connections.

3.4 GitHub

When you connect your GitHub account or use GitHub features, repository data is accessed using your GitHub OAuth token. We store your GitHub token for the duration of your session to enable repository operations.

3.5 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Retention

4.1 Account Data

We retain your account information for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as billing records).

4.2 Room and Workspace Data

Room chat history is stored in our database for the lifetime of the room. Workspaces (code files) are stored temporarily on our servers and are automatically deleted when rooms expire due to inactivity (typically within 2 hours of the last user disconnecting).

4.3 Voice and Video

Audio and video streams are transmitted in real-time between participants via WebRTC peer connections and are not recorded or stored by us. Dictation audio is sent to Deepgram for speech-to-text transcription and is not retained by Deepgram or YappJam after the transcription is returned.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted connections (TLS/SSL) for all data in transit
• Authentication tokens stored securely and validated on each request
• Database access restricted to authorized services
• Workspace isolation between rooms
• OAuth-based authentication (no passwords stored)

No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

For a full description of the technical and organisational controls we enforce, see our Security page.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete your personal data (subject to legal retention requirements)
• Export your personal data in a portable format
• Object to or restrict certain processing of your data
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@yappjam.com.

7. Cookies and Tracking

Essential cookies: we use these for authentication and session management. They are necessary for the Service to function and cannot be disabled.

Analytics cookies: we use these to understand how the product is used and to improve YappJam. They power PostHog (product analytics), Sentry Session Replay (session recordings for diagnostics), and Google Tag Manager (tag management).

Consent model: visitors in the EU and EEA are asked to opt in through a cookie banner before any of the analytics services above load. Visitors elsewhere are opted in by default and can opt out. You can change or withdraw your choice at any time using the "Cookie settings" link in the site footer.

Separately from the services above, we use Vercel Analytics to count page views in aggregate. It is cookieless: it sets no cookies, stores no persistent identifiers on your device, and does not track you across sites, so it runs regardless of your cookie choice.

We also use Sentry for error monitoring, which runs regardless of your cookie choice: it reports crashes and bugs so we can keep the Service reliable, and it never records your session without consent.

We do not sell your personal data to advertisers or data brokers.

8. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

9. International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@yappjam.com.