Privacy Policy

This Privacy Policy describes how Yeti (“Yeti,” “we,” “us”) collects, uses, and protects information when you use the Yeti API and dashboard at yetiids.com (the “Service”).

Information we collect

• Account information. When you sign up, we store your email address. If you sign in with Google, we receive your email and basic profile information from Google.
• API keys. We store a hashed representation of each API key you create. We never store the raw key after it is first shown to you.
• Usage data. We record request counts, timestamps, and quota consumption per API key so you can monitor usage and we can enforce rate limits and plan limits.
• Payment information. Subscriptions and payments are processed by our payment provider, Polar. We do not store your card details; we keep a customer identifier and subscription status to manage your plan.

How we use information

• To provide, operate, and maintain the Service.
• To authenticate requests, enforce rate limits, and meter usage against your plan.
• To process subscriptions, billing, and related notifications.
• To respond to support requests and communicate important changes.
• To detect, prevent, and address abuse, fraud, or security issues.

Service providers

We rely on a small number of third-party processors to run the Service: Supabase (authentication and database), Upstash (rate limiting), and Polar (payments). These providers process data on our behalf and are bound by their own privacy and security commitments.

Data retention

We retain account and usage data for as long as your account is active. When you delete your account, we remove your profile, API keys, and associated usage records, and cancel any active subscription. Some records may be retained where required for legal, accounting, or fraud-prevention purposes.

Your rights

You can access and update your account information from your dashboard, and you can delete your account at any time from Settings. Depending on where you live, you may have additional rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at support@yetiids.com.

Security

API keys are hashed at rest, traffic is served over HTTPS, and access to production systems is restricted. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard practices.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email.

Contact

Questions about this policy? Email us at support@yetiids.com.