Yayaw
Privacy cockpit

Yayaw privacy, mapped clearly

A practical privacy page for accounts, organizations, billing, content operations, analytics, security, support, API keys, and MCP workflows.

YAYAW SASSIREN 953 834 272Updated May 15, 2026

Controller

YAYAW SAS, SIREN 953 834 272, 42 rue de la Côte, 78220 Viroflay, France.

Contact

team@yayaw.app

Scope

Website, dashboard, organizations, billing, CMS, API, MCP, support, and admin tools.

Data map

What moves through the product

The data is grouped by operational workflow instead of dumped into a generic list.

Access layer

Name, email, organization membership, role, invitation status, passkeys, MFA, sessions, and security events.

Workspace layer

Pages, CMS content, settings, media references, API/MCP key metadata, audit logs, and admin actions.

Revenue layer

Checkout status, subscriptions, invoices, seats, quotas, product plans, coupons, and promotion code state.

Signal layer

Product events, organization identifiers, support context, transactional email records, and communication preferences.

Processing rules

Why Yayaw uses this data

Each purpose is tied to the product surface it supports.

01

Contract | Accounts, organizations, content, source-code access, and billing are processed to deliver paid or requested services.

02

Legitimate interest | Permissions, sessions, logs, API keys, MCP keys, and audit events protect the platform and users.

03

Consent or local requirement | Some analytics, communication, or optional AI workflows may rely on consent where required.

Outside Yayaw

Processors, retention, and rights

The operational reality is explicit: providers help run hosting, auth, billing, email, analytics, AI, and support.

Named provider categories

Yayaw may use Vercel, Supabase, Better Auth, Stripe, PostHog, Resend, OpenAI, and similar providers.

Transfers

When data is processed outside the EEA, Yayaw relies on safeguards such as adequacy decisions, standard contractual clauses, or equivalent protections.

Retention

Data is kept while the account or contract is active, then deleted or archived for operational, audit, tax, accounting, security, or legal needs.

Rights

Users may request access, correction, deletion, restriction, portability, objection, consent withdrawal, or complain to the CNIL or another authority.

Exercise a privacy right

Send requests to team@yayaw.app. Yayaw may ask for information needed to verify and process the request.