Privacy Policy

Yapflo (“we,” “us,” or “our”) operates the Yapflo platform at yapflo.com and related services (collectively, the “Service”). Yapflo is a video collection platform that enables video producers (“Producers”) to send recording links to their clients (“Clients”) for capturing video footage remotely.

This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service, whether as a Producer, Client, or website visitor.

2.1 Account Information (Producers)

When you create a Yapflo account, we collect:

• Name and email address
• Password (stored in hashed form)
• Billing information processed through Stripe (we do not store full payment card numbers)
• Business or professional information you choose to provide

2.2 Client Information

Clients do not create accounts. When a Producer shares a recording link with a Client, we collect:

• The Client's name (as provided by the Producer or the Client during recording)
• Video and audio recordings captured through the Client's device browser
• Device and browser information, including browser type and version, operating system, screen resolution, device capabilities (camera/microphone specifications), and related technical attributes. We collect this information to optimize the recording experience for your device and for security purposes, including device fingerprinting to detect and prevent unauthorized or fraudulent access to recording links.

2.3 Video Content

The core of our Service involves collecting video recordings (“Takes”). This includes:

• Video and audio captured via your device's camera and microphone through the browser-based MediaRecorder API
• Metadata associated with recordings, such as timestamps, duration, and recording status

2.4 Automatically Collected Information

When you access the Service, we may automatically collect:

• Browser type and version
• Device type and operating system
• IP address
• Pages visited and features used
• Referring URLs and access times

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process video uploads and manage project workflows between Producers and Clients
• Personalize your experience by using your past project data to suggest templates, shot lists, and creative briefs within your account
• Process payments and manage subscriptions via Stripe
• Send transactional communications (e.g., recording link delivery, project notifications)
• Monitor and improve the performance, security, and reliability of the Service
• Respond to support requests
• Comply with legal obligations

We do not use your video content to train machine learning models, and we do not sell your personal information.

3.1 Use of Third-Party AI Services

Certain Producer-facing features — such as project idea generation, shot list suggestions, and creative briefs — may send Producer-provided text inputs (e.g., project descriptions, client names, creative notes) to OpenAI's API for processing. This data is sent solely to generate responses within the Service and is subject to OpenAI's API data usage policies, which state that API inputs are not used to train their models. We do not send Client video content or audio recordings to any third-party AI service.

4.1 Infrastructure

• Data storage: Your data is hosted on reputable cloud infrastructure providers with encryption at rest and in transit.
• Video uploads: We use resumable upload protocols to ensure reliable delivery, even on unstable connections.
• Payments: All billing is handled by Stripe. We do not store credit card numbers or sensitive payment details on our servers.

4.2 Access Controls

• Client recording links are token-based and time-limited. They do not require account creation or login.
• Producer accounts are protected by password authentication.
• Video content is accessible only to the Producer who owns the associated project and to Clients via their authorized recording link.

4.3 Data Retention

• Producer accounts: We retain your account information for as long as your account is active or as needed to provide the Service. You may request deletion at any time.
• Video content:Video Takes are retained in accordance with the Producer's project lifecycle. Producers may delete Takes and Projects at any time. When a project or Take is deleted, the associated video files are removed from storage.
• Client recording links: Recording links expire after the time window set by the Producer. Once expired, no further recordings can be submitted through that link.

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: We use third-party services to operate the platform, including cloud hosting, storage, Stripe (payments), and OpenAI (AI-assisted producer features). These providers process data on our behalf under contractual obligations to protect your information.
• Producer–Client relationship: Video recordings submitted by a Client are made available to the Producer who created the project. Producers control how they use the video content they collect through the Service.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information and account
• Object to or restrict certain processing of your information
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent where processing is based on consent

For Producers: You can manage your account information, projects, and video content directly within the Service. To delete your account entirely, contact us at the address below.

For Clients: Since you do not create an account, your personal data is limited to your name and video recordings within a specific project. To request access to or deletion of your data, contact us or reach out to the Producer who sent you the recording link.

To exercise any of these rights, contact us at privacy@yapflo.com.

We use essential cookies to maintain session state and authentication. We do not use third-party advertising trackers. We may use privacy-respecting analytics to understand how the Service is used.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@yapflo.com.

Our infrastructure providers operate in the United States and other countries. If you are located outside the United States, your information may be transferred to and processed in the United States. By using the Service, you consent to such transfers. We rely on our providers' compliance with applicable data protection frameworks.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To make a request, contact us at privacy@yapflo.com.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, where appropriate, through the Service or by email. We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Yapflo, Inc.
Email: privacy@yapflo.com
Website: yapflo.com