Privacy Policy

1. Data Controller

YEEMA HOLDINGS LTD (Company No. 15809333), registered at 128 City Road, London, EC1V 2NX, is the data controller for the personal data processed through the Tivo platform.

Contact: [email protected]

2. What Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, and profile information provided through your authentication provider (e.g. Google, email).
• Usage data: Message inputs you submit for rewriting, selected intents and tones, and generated outputs.
• Payment data: Billing information processed through Stripe. We do not store your payment card details — these are handled entirely by Stripe in accordance with PCI-DSS standards.
• Technical data: IP address, browser type, device information, and usage analytics collected to maintain and improve the Service.

3. How We Use Your Data

We use your personal data to:

• Provide and operate the Service.
• Process your subscription and payments.
• Generate AI-powered message rewrites based on your inputs.
• Communicate with you about your account, billing, or service updates.
• Improve the Service through aggregated, anonymised usage analysis.
• Comply with legal obligations.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:

• Performance of a contract: Processing necessary to provide the Service you subscribed to.
• Legitimate interests: Service improvement, security, and fraud prevention.
• Legal obligation: Where required by applicable law.
• Consent: Where applicable, such as for marketing communications (you may withdraw consent at any time).

5. Data Sharing

We share your data only with the following categories of third parties:

• AI processing providers: Your message inputs are sent to third-party AI providers to generate rewrites. Inputs are processed in real time and are not used to train AI models.
• Payment processing: Stripe processes your payment data.
• Authentication: Clerk manages your account authentication.
• Infrastructure: Convex provides our backend database and hosting.

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion:

• Account data is deleted within 30 days.
• Message inputs and generated outputs are deleted within 30 days.
• Payment records are retained for 7 years as required by UK tax law.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing of your data.
• Port your data to another service.
• Object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. International Transfers

Your data may be processed outside the UK by our third-party providers (AI processing, Stripe, Clerk, Convex). Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions as recognised by the UK.

9. Cookies

We use essential cookies required for authentication and Service functionality. We do not use advertising or tracking cookies. Third-party services (Clerk, Stripe) may set their own cookies as described in their respective privacy policies.

10. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top reflects the latest revision.

12. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Contact