Privacy Policy

Last updated 2 August 2026

YASB Cloud stores your YASB configuration so you can put it back on another PC. This page says exactly what that involves, in plain terms.

Who is responsible

For any questions about your data or privacy, including the requests listed below, use the contact form. You do not need an account to use it.

What we store

• Your email address, because it identifies the account and is where confirmation and sign-in codes are sent.
• Your password, only as a scrypt hash. We never hold the password itself and cannot recover it.
• IP addresses, recorded with every sign-in and every backup. This is not optional: it is what lets you read the Connected PCs list and recognise something that is not you.
• Device names - whatever your PC is called - and when each was last used, so that same list is useful.
• Backup metadata: dates, sizes and file counts.
• Your backup contents, encrypted in transit and at rest.
• Subscription state: which plan, its status, and when it renews.
• How much of the assistant you have used: how many questions you have asked and roughly how long the answers were. This is what your plan's allowance is counted against.
• Assistant feedback. Rating an answer saves that question and that answer, so we can see where the documentation is thin. Nothing else from a conversation is kept - it is gone as soon as you reload the page.

Cookies

No analytics, no advertising, no tracking. There is nothing to consent to, which is why you are never asked.

Your browser stores only what signing in requires: enough to keep you signed in, to remember that you have used this browser before so we do not email you a code every time, and to show the right thing in the header when a page opens. Signing out clears it. Paddle sets its own cookies if you open a checkout, and only then.

Security

Your configuration files and account data are encrypted in transit and at rest.

What we cannot see

Card numbers and billing addresses. Paddle is the seller of record for YASB Cloud and collects payment directly, so those details never reach our servers. We receive only the fact of a payment, which plan it was for, and the dates.

Who else processes your data

• Paddle.com Market Ltd - payments, invoices and sales tax, as seller of record.
• An AI provider - questions you type into the assistant are sent to a third-party language model to be answered, along with the documentation needed to answer them, and may be processed outside the EU. Nothing else from your account is sent with them: not your email address, not your backups, not your billing details.
• Hosting provider - servers are located in the European Union (EU).
• Cloudflare - sits in front of the site to absorb abuse and traffic floods.
• Our email provider - delivers confirmation and sign-in codes.

Nothing is sold and nothing is shared for advertising. There are no analytics, no tracking pixels and no third-party scripts on this site beyond the payment window itself.

Where your data lives

Your data is stored on servers located within the European Union (EU).

Legal basis

Running the account and storing your backups is performance of a contract - it is the service you paid for. Recording IP addresses for the device list, and keeping an audit trail of sign-ins, is our legitimate interest in keeping accounts secure. Billing records are kept because tax law requires them.

How long it is kept

• While a subscription is active, everything is kept.
• If a payment fails, the account stays fully usable for 7 days while the payment is retried.
• Once a subscription ends, backups become read-only for 14 days, so you can still download them.
• At the end of those 14 days, stored backups are deleted.
• Deleting your account removes the account, its backups and its audit trail. Billing records are kept for as long as tax law requires.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Send the request through the contact form and we will answer within 30 days. If you are in the EU or the UK and are not satisfied with the answer, you may complain to your national data protection authority.

Changes

If this policy changes in a way that affects you, we will email the address on your account before it takes effect.