Who operates Yanora AI
YANORA INC, a California corporation located in Los Angeles, California, United States, operates Yanora AI at Yanora AI. This policy explains personal information handled through our website, accounts, image and video generation, media library, purchases, and support and privacy-request services.
Contact info@yanora.ai about this policy or your information, including if you cannot sign in. Where the request controls are available, you can also use Account → Profile at privacy support form or the privacy-report option at support form. Other services you choose for sign-in or payment also provide their own privacy information.
Account and authentication information
We process your email address, any names you provide, sign-in method and linked identity identifiers, account status, verification state, and account timestamps. Email/password accounts use a password hash. Recovery and verification records include hashed challenges, expiry and attempt information, and the result of the verification.
Google or Apple sign-in provides the identity information needed to authenticate the selected account. Session information and short-lived sign-in state help maintain access and protect callbacks. We do not include passwords, authentication secrets, or identity-service tokens in account exports.
Yanora AI is for adults who are at least 18 years old. The age-group check uses a declaration instead of a full date of birth or identity document. We record accepted declarations, eligibility status, declaration time, method and version, and restricted review events needed to handle eligibility. A declaration is not independent proof of age. Under-18 declarations do not permit new registration.
Prompts, uploads, generated media, and history
We process prompt text, selected models and settings, supported reference images, videos, audio or documents, generation status, usage and credit information, and records linking inputs and outputs to your account. Uploaded and generated files can contain personal information about you or other people, including faces, voices, filenames, and embedded metadata.
Generation history and your media library retain saved records and media so you can view results, recover work, and use supported features. Necessary job information is also retained internally to process and reconcile requests. Avoid unnecessary sensitive information, confidential records, or material you lack permission to submit.
Billing, transactions, and service use
Billing records include processor customer, payment, subscription and transaction references, selected plan or pack, amounts and currency, paid periods, payment status, refunds, disputes, credits, allocations, and ledger entries. Hosted payment processors collect payment credentials in their checkout. Our billing records do not request or store full payment-card numbers or card security codes as payment credentials. Do not put those details in prompts, uploads, or support messages.
We also process purchase acknowledgments, applicable policy versions, acceptance times, and records associating an acknowledgment with the relevant payment and subscription. Account activity, generation history, and request outcomes support service operation, fraud prevention, and investigation of errors.
Technical information and browser storage
Using a website exposes connection information such as an IP address and browser or device request information to the services delivering that connection. Application and infrastructure diagnostics and pseudonymous abuse-prevention counters support security, reliability, and troubleshooting. Security counters can remain personal information even when their keys are hashed.
Necessary authentication cookies maintain sessions and sign-in security. Browser storage can remember language, display preferences, and account-specific creation conversations. Tab-specific storage supports payment, generation, navigation, and report recovery. Browser font requests and chosen sign-in features also connect to external services.
Local browser storage can persist until it is cleared; tab-specific session storage ordinarily lasts for that tab’s session. Where device persistence controls are available, remembering preferences and creation conversations is initially enabled. You can turn off these choices and clear the supported preference records and current-account conversation copies. Browser site-data controls can remove other local copies. Clearing browser storage can sign you out or interrupt recovery of an unfinished action, and does not erase server records or files already downloaded.
Support, safety, and privacy requests
When you contact us or submit a report, we process contact details, request type, your description, supplied content or transaction references, verification information, request status, and communications needed to handle the matter. Reports can contain information about other people; provide only what is necessary.
Authorized staff can review requests and record responses and audit events. Where guest-report controls are available, they use a secret receipt for status access and an email code to confirm the contact address. The receipt is specific to that report and does not give access to an account with the same email address. Keep the receipt private. Do not send credentials or copies of illegal material.
Why information is used
We use information to register and authenticate accounts, recover access, perform requested generation, save and deliver results, provide history and library features, account for credit usage, process and reconcile payments and subscriptions, and communicate about the service and your requests.
We also use necessary information to prevent abuse, protect accounts and infrastructure, investigate errors or harmful activity, resolve support and privacy matters, document agreements and financial records, comply with legal obligations, preserve required evidence, and establish or defend legal claims. Optional browser preference choices are separate from contractual acknowledgment.
External processing and recipient categories
Third-party AI processing providers and necessary technology processors receive supported prompts, settings, uploaded references or temporary access to those references, and necessary job information to perform generation and return results. Inputs are transmitted externally; they are not processed exclusively within your browser or solely on Yanora-owned systems.
Other recipient categories include hosting and cloud storage services, payment processors, chosen sign-in services, operational email-delivery services, and authorized personnel handling support, security, and legal matters. Stripe and PayPal support available payment flows; Google and Apple support available sign-in flows. Verification and operational email uses the configured email transport. Font and identity requests can expose normal connection information to Google.
Information may also be disclosed where legally required, to protect rights or safety, or in connection with a lawful business transaction, subject to applicable law. A payment or sign-in service may handle information under its own terms. External services’ retention, permitted uses, and processing locations can differ. This policy does not promise zero retention or a universal prohibition on use for training by every external AI service. Contact info@yanora.ai with questions about the processing involved in your request.
Storage and retention
Application records are stored in a database; uploaded and generated media are stored in cloud object storage. Private account media uses account authorization and time-limited access links. Material made available in a public showcase is accessible to its audience. The expiry of a link does not erase its underlying file, and a recipient can copy accessible material.
The application does not apply a general age-based purge to saved account, generation, financial, credit, or request records. These records can remain until an applicable removal or reviewed deletion action is completed. Account and authentication records support the account, access recovery, and security. Prompts, generation records, and media support saved history, library access, referenced creations, and reconciliation of generation outcomes. Financial, credit, and acknowledgment records support bookkeeping, transaction reconciliation, disputes, legal obligations, and agreement evidence. Support, privacy-request, and security records support handling the issue, preventing abuse, and documenting actions. Applicable law, legal claims, and holds can require additional retention.
Unreferenced media has separate cleanup rules. Abandoned uploads can become eligible after more than one hour without a record update, and ready media after more than 24 hours without a record update. Protected references prevent routine cleanup; explicitly removed, unreferenced media can be eligible sooner. Eligibility is not a guaranteed deletion deadline: processing state, reference checks, retries, and service availability affect actual removal.
Account deactivation retains records and media. Removal of a local draft, history display, or public showcase is different from erasing all associated records. We do not use one fixed retention period for every category.
Deletion requests are assessed across account records, linked media, required retained evidence, processing services, and applicable backup or recovery copies. We communicate the actual completed scope and any lawful retention exceptions. We do not promise instant erasure, a single retention period for every category, or immediate deletion from every independent service.
Information security
Application protections include hashed passwords and verification secrets, authenticated account access, separate administrator access, trusted-origin mutation checks, scoped record queries, restricted media storage, short-lived access links, and bounded verification attempts and request limits. Sensitive exports exclude credentials and private processing information.
No service can guarantee complete security. Protect your credentials and shared devices, avoid publishing private access links, and contact info@yanora.ai about suspected unauthorized access. Security incidents are assessed and notifications provided as required by applicable law.
Your choices and privacy requests
Email info@yanora.ai to ask to review or change information, or request access, correction, export, deletion, or another applicable privacy right. State the right you want to exercise and provide enough information to identify the relevant account or records. We may ask for clarification or proportionate verification before disclosing information or making a sensitive change. Do not send your password or verification codes.
Where available, account settings let you view information, correct supported profile fields, change your email through verification, manage device persistence, and submit requests at privacy support form. Where available, the privacy-report option at support form provides another route without an account. The self-service export, where available, covers selected account and owned-record metadata; media files are downloaded separately through Library. Ask by email for a broader scope or if you cannot use a control.
A submission receipt or review status does not confirm deletion. We communicate the actual actions taken and any lawful exceptions, which can include protecting another person’s information or retaining required evidence. Deactivation is separate from deletion and does not itself cancel a recurring subscription.
Where California or another applicable privacy law grants rights, they can include access and information about collection or disclosure, correction, deletion, portability, restrictions on sale or sharing, limits on specified sensitive uses, and protection against unlawful discrimination for exercising rights. Coverage and permitted exceptions depend on the law and processing involved. Authorized agents may contact info@yanora.ai; authority and identity are verified as appropriate to the request. Requests and any applicable appeals are handled under the requirements of the law that applies to them.
Tracking, advertising, and browser signals
Yanora uses necessary authentication and functional browser storage. External sign-in, payment, and font services receive requests when their features are used. Third-party services you interact with may collect personal information about your online activity over time and across different websites, including websites using their identity or other services, subject to their privacy information and your browser settings.
Do Not Track is not used as a separate setting to change necessary service processing. Browser settings and signals do not disable information needed to carry out a requested account, payment, or generation action. Where device preference controls are available, they recognize Global Privacy Control and show storage choices. That recognition alone does not implement a complete opt-out across external services. Email info@yanora.ai with an applicable sale, sharing, or sensitive-use request. Legally required opt-out signals and requests must be handled according to the applicable law.
Processing locations and children’s information
YANORA INC operates in the United States. External processing, hosting, identity, payment, and delivery services can handle information in locations associated with those services. Information is not promised to remain only in California or solely in the United States. Any applicable international rights and transfer requirements depend on the service, location, and legal scope.
Yanora AI is exclusively for people who are at least 18 years old and does not provide a parental-consent account workflow. Adult-only eligibility does not remove protections for children’s information that may be submitted or discovered. Do not submit unnecessary personal information about a child. If you believe a child has supplied information in circumstances requiring protection, contact info@yanora.ai so the account, information, and applicable obligations can be assessed. Existing-account review is separate from deletion, cancellation, refunds, and any required protection or reporting.
Changes and contact
The published policy displays its effective date, last-updated date, and version. Revisions are posted on this policy page with updated date and version information. When material practices or legal requirements change, any required additional notice is provided through a notice in the service or email to the applicable account contact. Changes do not establish consent to an unrelated optional use of information.
Contact YANORA INC at info@yanora.ai. Our business is located in Los Angeles, California, United States. You may also use privacy support form or support form where those controls are available. Explain the request and provide an appropriate account or report reference without including passwords, verification codes, payment-card information, or unnecessary sensitive content.