Privacy Policy

Last updated /

Jan 13, 2026

Introduction

Yally ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered software service (the "Service"). This policy applies to all users of our platform.

Information We Collect

Personal Information

We collect information you provide directly to us, including:

  • Account information (name, email, password)

  • Profile information (company, role, preferences)

  • Payment information (processed by third-party providers)

  • Communication data (support tickets, feedback)

Usage Data

We automatically collect information about your use of our Service:

  • Log data (IP address, browser type, access times)

  • Device information (operating system, device identifiers)

  • Usage patterns (features used, content generated, time spent)

  • Performance data (response times, error rates)

AI-Specific Data Collection

When you use our AI features, we collect:

  • Input data (prompts, queries, uploaded content)

  • Generated outputs (AI responses, created content)

  • Interaction data (feedback, ratings, editing history)

  • Model performance metrics (accuracy, usage patterns)

Google API Services Data

When you connect your Google account to Yally, we may access and collect:

  • Google Drive files and metadata (when you use Drive integration features)

  • Gmail messages and metadata (when you use email-related features)

  • Google Calendar events (when you use scheduling features)

  • Google Workspace data (as authorized by you)

  • Basic profile information (name, email address, profile picture)

How We Use Your Information

Service Provision

  • Provide, maintain, and improve our AI Service

  • Process transactions and manage your account

  • Provide customer support and respond to inquiries

  • Send service-related communications

AI Model Training and Improvement

  • Train and improve our AI models and algorithms

  • Enhance accuracy and performance of AI outputs

  • Develop new features and capabilities

  • Conduct research and analytics

Legal and Security

  • Comply with legal obligations and enforce our terms

  • Detect, prevent, and address fraud or security issues

  • Protect the rights, property, or safety of Yally, our users, and the public

Google API Services User Data Policy Compliance

Yally's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Limited Use of Google User Data

We are committed to the responsible use of data obtained from Google APIs:

  • Purpose Limitation: Data obtained from Google APIs is used solely to provide and improve the features of Yally that you have explicitly requested and authorized

  • No Advertising: We do not use Google user data for serving advertisements or for creating advertising profiles

  • No Unauthorized Transfer: We do not allow humans to read your Google user data unless: 

    • We have your explicit consent for specific messages, files, or data

    • It is necessary for security purposes (such as investigating abuse)

    • It is required to comply with applicable law

    • The data has been aggregated and anonymized

  • Transparent Use: We only request access to Google user data that is necessary for Yally to function and provide the services you've requested

  • Secure Handling: All Google user data is transmitted, processed, and stored using industry-standard encryption and security measures

Specific Google Services Integration

Yally integrates with the following Google services:

  • Google Drive: To access, read, and manage files you authorize for AI analysis, document processing, and workflow automation

  • Gmail: To read and process emails you select for AI-powered email management, summarization, and task extraction (we only access emails you explicitly authorize)

  • Google Calendar: To read and manage calendar events for scheduling assistance and meeting management

  • Google Workspace: To facilitate collaboration and productivity features within your organization

Data Usage by Feature

  • Document Analysis: When you use AI features on Google Drive files, we temporarily access the file content to process your request and provide AI-generated insights

  • Email Processing: When you authorize email access, we process selected emails to provide summaries, extract action items, or generate responses

  • Calendar Integration: We access calendar data to provide scheduling suggestions and meeting preparation assistance

  • Search and Discovery: We may index authorized content to improve search and discovery within Yally

Revoking Access to Google Data

You maintain full control over Yally's access to your Google account:

  • You can revoke Yally's access to your Google account at any time by signing out your Google Account permissions page: https://myaccount.google.com/permissions

  • Revoking access will immediately prevent Yally from accessing any new Google data

  • You can also disconnect Google services from within your Yally account settings

  • Upon revocation, we will delete or anonymize your Google user data within 30 days, except where retention is required by law

Google Data Retention

  • Active Use: Google user data is retained only as long as necessary to provide the requested services

  • Cached Data: Temporarily cached Google data is automatically deleted within 24 hours unless actively being used in a workflow

  • User-Deleted Data: When you delete content within Yally that was sourced from Google services, we remove it from our systems within 30 days

  • Account Deletion: Upon account deletion, all associated Google user data is permanently deleted within 30 days

Data Sharing and Disclosure

Third-Party Service Providers

We may share your information with trusted third parties who assist us in:

  • Cloud hosting and infrastructure (AWS, Google Cloud, etc.)

  • Payment processing (Stripe, PayPal, etc.)

  • Analytics and monitoring (Google Analytics, Mixpanel, etc.)

  • Customer support tools (Zendesk, Intercom, etc.)

Important: We do not share Google user data with third-party service providers except:

  • Where necessary to provide the core Yally service (e.g., cloud infrastructure for secure storage)

  • With your explicit consent

  • When required by law

AI Model Providers

We may share anonymized and aggregated data with our AI model providers to improve service quality. We never share personally identifiable information or Google user data without your explicit consent.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our legal rights and those of our users.

AI-Specific Data Practices

Model Training Opt-Out

You have the right to opt out of having your content used for AI model training. To exercise this right:

  • Contact us at it@aims-innovation.com

  • Use the opt-out settings in your account dashboard

  • Note that opting out may limit some AI features

Google User Data: Data obtained from Google APIs is never used to train AI models without your explicit opt-in consent.

Data Anonymization

Before using data for model training, we:

  • Remove personally identifiable information

  • Aggregate data with other users' data

  • Apply differential privacy techniques where applicable

  • Exclude all Google user data unless you have explicitly opted in

AI Output Ownership

  • You retain ownership of your input data

  • AI-generated outputs are considered derivative works

  • You receive a license to use AI outputs for your business purposes

  • Yally retains rights to improve our models based on interaction patterns

Data Security

Security Measures

We implement industry-standard security measures:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)

  • Regular security audits and penetration testing

  • Access controls and authentication protocols

  • Employee security training and background checks

  • Compliance with SOC 2 Type II standards

Google User Data Security

Google user data receives additional security protections:

  • Stored separately from other user data with enhanced encryption

  • Access limited to essential personnel only

  • Regular security assessments specific to Google API integrations

  • Compliance with Google's security requirements

Data Retention

  • Account data: Retained while your account is active

  • Usage data: Retained for up to 2 years for analytics

  • AI training data: Anonymized data may be retained indefinitely

  • Google user data: Deleted within 30 days of access revocation or account deletion

  • Deleted data: Securely deleted within 30 days of deletion request

Your Rights and Choices

Access and Control

You have the right to:

  • Access your personal information

  • Update or correct your data

  • Delete your account and associated data

  • Export your data in a portable format

  • Opt out of certain data processing activities

  • Revoke access to connected Google services

Communication Preferences

You can control:

  • Email notifications and marketing communications

  • Data sharing for model training purposes

  • Cookie preferences through your browser settings

  • Google services integration and permissions

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through:

  • Standard contractual clauses

  • Adequacy decisions

  • Other legally recognized transfer mechanisms

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website

  • Sending email notification to registered users

  • Providing in-app notifications

If you have questions, please contact us through it@aims-innovation.com