Privacy Policy

The data controller is YV (SASU (single-shareholder simplified joint-stock company)), with its registered office at 10 rue de la Paix, 75002 Paris, France, registered with the Paris Trade and Companies Register under number 101 913 655.

For any question about your data, write to admin@yvia.io.

Account data

Identity and sign-in credentials: name, email address and authentication data.

Billing data

The current plan is free and does not require payment-card data.

Usage and technical data

Connection logs, IP address, browser type, timestamps and your account configuration.

Content in your workspaces

Your projects, code, files and your agents' history. This content is processed to deliver the service. We do not access it, except where technically required for support at your request or by legal obligation.

Your provider API keys (BYOK)

You bring your own API keys. They are encrypted at rest and used only to run your requests against the provider you have chosen.

We process your data for the following purposes, each resting on a legal basis:

• Providing, operating and securing the service: performance of the contract.
• Keeping the service secure and preventing fraud and abuse: legitimate interest.
• Responding to your support requests: performance of the contract and legitimate interest.
• Improving the product from aggregated statistics: legitimate interest.
• Sending service-related messages: performance of the contract. For marketing messages: your consent.
• Meeting our accounting and legal obligations: legal obligation.

Your data is never sold. It is accessible to our technical processors, strictly for running the service:

• Service and data hosting: Scaleway, on infrastructure located in France (region fr-par).
• Website hosting: Vercel (Vercel Inc., United States).
• AI model providers: when you use your API keys, your requests are sent to the provider you configure. Their handling is then governed by that provider's terms and privacy policy.
• Services you connect yourself, such as a GitHub repository: according to your setup.

The choice of model provider or providers is yours. YV stays neutral on this.

The service is hosted in France. Some processors, or providers you configure, may process data outside the European Union. Such transfers are covered by appropriate safeguards, in particular the European Commission's standard contractual clauses.

• Account data: while you use the service, then deleted or anonymized within a reasonable time after the account is closed.
• Content in your workspaces: deleted after termination, within the period stated in our terms.
• Billing data: kept for 10 years to meet accounting obligations.
• Technical logs: kept for a limited time for security purposes.

We apply appropriate technical and organizational measures: user-scoped product data, non-root gVisor runners isolated per active workspace, restrictive network policies and encryption of data at rest and in transit.

Under the GDPR, you have the following rights:

• Right of access to your data.
• Right to rectify inaccurate data.
• Right to erasure.
• Right to restrict processing.
• Right to object.
• Right to data portability.
• Right to withdraw your consent at any time.
• Right to set instructions on what happens to your data after your death.

To exercise these rights, write to admin@yvia.io. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

Our use of cookies is detailed in our Cookie Policy.

This policy may be updated. The version that applies is the one published on this page. The last-updated date appears at the top of the document.

For any question about this policy, contact YV at admin@yvia.io, or by post at 10 rue de la Paix, 75002 Paris, France.