Privacy Policy
Effective date: 28 May 2026 · Last updated: 28 May 2026
About this policy
yeih is currently operated as a pre-incorporated product. Upon incorporation, this policy will be updated with the registered legal entity name and address. Contact: hello@yeih.ai.
This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have under the General Data Protection Regulation (GDPR). yeih is directed at users in the European Union. Our infrastructure is hosted in Frankfurt, Germany (AWS EU-Central-1 via Supabase).
What data we collect
Account data
When you create an account via Google Sign-In, we receive your name, email address, and profile photo. We do not receive your Google password. Authentication is handled by Google and Supabase Auth.
Inventory data
- Item name, brand, category, condition, and tag (keep, for sale, insure)
- Purchase date, purchase price, and currency
- Serial number (if provided)
- Notes, photos, and uploaded documents (receipts, PDFs)
Photos and documents are stored in Supabase Storage, hosted in the Frankfurt AWS region.
Email receipt scanning (Nylas)
If you connect your email account (Gmail, Outlook, or iCloud), we use Nylas to scan your inbox for purchase receipts and order confirmations only. We do not store your emails. Nylas extracts only structured receipt data (item name, price, date, retailer) and passes it to yeih. The extracted data is saved as an inventory item. You can disconnect your email account at any time in Settings.
Estimated valuations (eBay)
yeih retrieves current market pricing from eBay sold listings via the eBay Browse API. This is a read-only query using item names and categories. No personal data is sent to eBay.
A2A broadcasting data
When you tag an item as For sale, your AI agent may broadcast it to the yeih buyer agent network. The following data is shared within the network:
- Item name, condition, quantity, asking price
- Locality (city or region, not your address)
Your full name, email address, and home address are never shared with buyer agents unless you explicitly confirm a connection.
Analytics (Mixpanel)
Pseudonymised usage data including pages visited, session duration, and device type. This data is not linked to your name or email. You can opt out of analytics tracking in Settings.
Payment data (Stripe)
Payments are processed by Stripe. yeih does not store your payment card details. We receive from Stripe only: confirmation of payment, your subscription plan and billing period, and your billing email address.
Why we collect it (legal bases)
Contract — Art. 6(1)(b)
Account, inventory, and payment data are necessary to provide the yeih service.
Legitimate interests — Art. 6(1)(f)
Usage analytics help us improve the product. You may opt out at any time.
Consent — Art. 6(1)(a)
Email scanning via Nylas requires your explicit consent, granted when you connect your email account. You may withdraw this at any time by disconnecting your account in Settings.
Who we share your data with
We do not sell your data. Sub-processors are contractually bound to process data only on our instruction.
Your GDPR rights
- Access— request a copy of all data we hold about you
- Rectification— correct inaccurate data
- Erasure— request deletion of your account and all associated data
- Portability— receive your inventory data as JSON or CSV
- Object— opt out of analytics processing
- Withdraw consent— disconnect email scanning at any time in Settings
Contact hello@yeih.ai. We will respond within 30 days. You may also lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI) at datenschutz-berlin.de.
Changes to this policy
We will notify you by email at least 14 days before any material changes to this policy take effect.
For privacy questions or to exercise your rights: hello@yeih.ai