Privacy policy

Who we are

Yavros is a product of Albee Holdings LLC ("we", "us"), a Minnesota company based in Mound, MN. This policy covers personal information collected through yavros.com: the public site and its contact form, the AI Maturity Poll, and client accounts, including the dashboard and the tools inside it.

Client accounts are by invitation only. Information you exchange with us outside yavros.com, for example by email, by phone, or under your license agreement, is handled under those arrangements.

Information we collect

• Contact form. Your first and last name, work email, company (optional), and your message.
• AI Maturity Poll. The stage you choose and any optional comment, saved as an anonymous response with a date and time. We don't link poll responses to your name, email or IP address.
• Your account. Your business email, which is also your sign-in; the name and company we set up your account with; your password, stored only in hashed form; the phone number and mailing address you add in your profile, if you add them; and basic account activity: when you first and last signed in, and how many times.
• Agreements you sign. When you sign your license agreement or an addendum in the dashboard, we record the name you type, the date and time, the agreement, and the IP address it was signed from.
• Services you choose to connect. If you connect GitHub, we store the access token GitHub gives us, your GitHub username and your profile image link. If you connect Cloudflare, we store the API token you paste in. We use these only to show your own information in your dashboard.
• Digital Footprint Audit. If you run it, we store the Cloudflare token you provide for it, the domains you choose (up to five), and the resulting report.
• Tools you run on your own computer. If you use our sync tools, they send us your Work Item status summaries (not their contents) and the names, status and purpose of the AI tool connections set up on your machine. If you connect your own AI assistant to Yavros, we issue you a connection key.
• Technical information. Our hosting provider processes your IP address and basic browser information to deliver pages and protect the site. To stop abuse, we briefly count sign-in attempts and form submissions by IP address and email; those counts expire within an hour.

Analytics, advertising and cookies

• Analytics. We use Cloudflare Web Analytics to count visits and see which pages are used. It doesn't use cookies and doesn't build a profile of you.
• Advertising. When we run ads on Google, we use Google Ads conversion measurement, which tells us when someone who clicked an ad later sends an inquiry. Google may set cookies or use similar technology for this under its own privacy policy (policies.google.com/privacy). You can control ad personalization at adssettings.google.com.
• Your browser. We don't set cookies of our own. While you're signed in, your sign-in is kept in your browser's session storage, and it expires on our side after 30 days. Your browser's local storage also remembers that you've taken the poll.
• Do Not Track. The site doesn't change its behavior in response to browser Do Not Track signals.

How we use information

We use contact submissions to respond to you; account information to run your account, show your dashboard and send account emails such as invitations and password resets; signature records to keep evidence of what was agreed; connected-service and audit data to show you your own information; poll responses, in aggregate, to understand how organizations use AI; and technical information to run and secure the site. We don't sell your personal information or share it for anyone else's marketing.

Who processes it

We use service providers that handle information only to provide their service to us:

• Cloudflare: hosting, storage, sending account and notification emails, and analytics.
• GitHub and Cloudflare (as services you connect): only when you choose to connect them, under their own terms.
• Email providers: inquiry notices are delivered to our business mailboxes, which are hosted by third-party email providers.
• Google: advertising measurement, when ads are running.

Before October 21, 2026, contact form submissions were collected through Formspree, a third-party form service, and sent to us by email.

We may disclose information if the law requires it, or to protect our rights or the safety of others.

How long we keep it

• Contact inquiries: as long as needed to respond and keep a business record, generally up to 3 years.
• Connected services: until you disconnect them in your profile, which deletes the stored token right away.
• Your account: while you have access. When your access ends, we delete your account record, connection key, activity, connected-service tokens, footprint audit data and synced summaries.
• Work Items you create in Yavros: kept until you ask us to delete them.
• Signature records: for the life of the agreement plus 7 years, since they are evidence of what was agreed.
• Poll responses: anonymous, and may be kept indefinitely.
• Anti-abuse counts: expire within an hour.

Security

Information is sent over encrypted connections (HTTPS) and stored in access-controlled systems. Passwords are stored in hashed form, never as plain text. Sign-ins expire after 30 days. No system is perfectly secure; disconnect any service you no longer use, and tell us right away if you think your account has been misused.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we'll respond within 30 days. You can update your profile and disconnect connected services yourself at any time in the dashboard. Depending on where you live, you may have additional rights under state law; we'll honor requests consistent with the law that applies.

Children

Yavros is for businesses. We don't knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we'll delete it.

Where it's processed

We are based in the United States, and information is processed in the United States and wherever our service providers operate.

Changes to this policy

When we change this policy, we update the effective date at the top of this page. If a change would affect how we use information we have already collected, we'll post it here before it takes effect.

Contact

Albee Holdings LLC, Mound, MN 55364. Email [email protected], or use the contact form on the Yavros homepage.