Privacy policy

What we collect

• Your account: your name and email address, and your profile picture if you sign in with Google. Passwords are handled by our sign-in provider, WorkOS; we never see them.
• What you make: the descriptions you type, your messages to the AI designer, files you attach (such as images, documents, and spreadsheets), and the sites, pages, images, and icons made for you.
• Form submissions: when someone fills in a form on a site you've published, we keep what they send so you can see it.
• Usage records: which AI models worked on your site, and how long and how much each took, so we can run the service and set prices. Our hosting providers also keep standard server logs, such as IP addresses and browser types.

We don't use advertising or analytics trackers, and we don't sell your information.

How we use it

• To sign you in and keep you signed in.
• To build, change, and publish your sites.
• To keep YamSites working, secure, and free of abuse.
• To write to you about your account or changes to YamSites.

Sign in with Google

If you sign in with Google, Google sends us your name, email address, and profile picture. We use them only to sign you in and to show who's signed in. YamSites' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else handles it

These services run parts of YamSites for us, each under its own terms and privacy policy:

• WorkOS signs you in and keeps your account.
• Convex stores your account, sites, files, and form submissions.
• OpenRouter, and the AI model makers it sends requests to (such as Anthropic, OpenAI, and Google), receive your descriptions, messages, attached files, and site content, to write and design your site.
• Cloudflare takes screenshots of your published sites, shown on your list of sites.
• Vercel hosts YamSites and your published sites, and connects your own domain if you add one.

Cookies and storage in your browser

We set one cookie, which keeps you signed in. It isn't sent to published sites. Your browser also keeps a few things for YamSites, such as the description you typed before signing up and how you like the builder laid out. There are no advertising or analytics cookies.

Published sites

A site you publish is public: anyone can see it at its address. If your site has a form, you decide what it asks for, and you're responsible for telling your visitors how you use what they send.

How long we keep it

We keep your account and sites while your account is open. An archived site is kept so you can restore it. To have your account and everything in it deleted, write to yamsitesapp@gmail.com. We'll delete it within 30 days, except anything the law requires us to keep.

Your choices

You can ask us for a copy of your information, or ask us to correct or delete it, by writing to yamsitesapp@gmail.com. Depending on where you live, you may have other rights over your information too; write to us and we'll help.

Security

Everything travels over encrypted connections (HTTPS), and only the services listed above handle your information. No system is perfectly secure, so we can't promise yours never will be exposed; if it is, we'll tell you.

Children

YamSites isn't meant for anyone under 18, and we don't knowingly collect information about children.

Changes to this policy

When this policy changes, we'll update this page and the date at the top. For a significant change, we'll also email you. See also our terms of service.

Contact

Questions about your privacy? Write to yamsitesapp@gmail.com.