Privacy Policy

This Privacy Policy explains how Yarrow ("Yarrow", "we", "us") handles information when you visit our website or use our applications and services (together, the "Services"). By using the Services you agree to the practices described here.

1. Information we collect

• Information you give us. When you contact us or apply for access we collect your name, work email address, job title, company and the message you write.
• Account information from Google. If you choose "Sign in with Google", Google shares with us your name, email address and profile picture and a unique Google account identifier (the openid, email and profile scopes). We do not request access to your Gmail, Google Drive, Calendar, Contacts or any other Google data.
• Usage and device data. We collect aggregate, privacy-friendly analytics such as pages viewed, approximate location (country level), browser type and referrer, and standard server logs (IP address, timestamps, request paths) needed to operate and secure the Services.
• Content you create. Data you enter into our applications, such as questions, forecasts or preferences, is stored so the Services can work for you.

2. How we use information

• To create and authenticate your account and keep it secure.
• To provide, maintain and improve the Services.
• To respond to enquiries and access requests.
• To detect abuse, fraud and security incidents, and to meet legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Google user data

Yarrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We use your Google name, email address and profile picture only to sign you in, identify your account and display it back to you.
• We do not transfer Google user data to others, except as needed to provide the Services, to comply with law, or as part of a merger or sale of assets with notice to you.
• We do not use Google user data for advertising, and we do not allow humans to read it unless you give consent, it is necessary for security or to comply with law, or it is aggregated and anonymised.
• We do not use Google user data to develop, improve or train generalised AI or machine-learning models.

You can revoke Yarrow's access at any time at myaccount.google.com/permissions.

4. Sharing

We share information only with service providers that process it on our behalf under confidentiality obligations, such as hosting, database and analytics providers (for example Vercel and Neon), and when required by law or to protect rights, safety and security. Providers may only use the data to serve us.

5. Retention

We keep personal information for as long as your account is active or as needed to provide the Services, and afterwards only as long as required for legal, security or accounting purposes. Contact enquiries are kept as long as needed to handle them. You may ask us to delete your data at any time (see section 7).

6. Security

We use encryption in transit, access controls and least-privilege practices to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your choices and rights

You may request access to, correction of, export of or deletion of your personal information, and you may withdraw consent or close your account, by emailing privacy@yarrowlab.ai. Depending on where you live (for example the EEA, UK or California) you may have additional rights under local law, and we will honour them.

8. Cookies

We use only the cookies and local storage needed to keep you signed in and the Services working, plus cookieless aggregate analytics. We do not use advertising cookies.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

10. International transfers

We and our providers may process information in countries other than your own. Where required, we use appropriate safeguards for such transfers.

11. Changes

We may update this policy from time to time. We will post the new version here with a new effective date, and give additional notice for material changes.

12. Contact

Questions about this policy: privacy@yarrowlab.ai.