Privacy Policy
Last updated: April 22, 2026
Yecora ("we," "us," or "our") operates the Yecora platform at yecora.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive the profile information Google shares (typically your name and email).
Bakery & Business Data
We store the data you enter into Yecora — including formulas, products, ingredients, client information, orders, invoices, and delivery routes. This data belongs to you and is used solely to provide the service.
Payment Information
Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe's privacy policy governs the handling of payment data.
Waitlist Information
If you sign up for our waitlist, we collect your name, email, and any optional details you provide (bakery name, bakery type, message). This information is used solely to contact you about early access.
Usage Data
We automatically collect standard web analytics data — such as browser type, device information, pages visited, and referring URLs — to improve the service. We do not sell this data or use it for advertising.
2. How We Use Your Information
- To provide and maintain the Yecora platform
- To process transactions and send invoices
- To communicate with you about your account, updates, and support
- To improve and develop new features
- To detect and prevent fraud or abuse
- To comply with legal obligations
3. Data Sharing
We do not sell your personal information. We share data only in these cases:
- Service providers: We use third-party services to operate Yecora (Supabase for database hosting, Stripe for payments, Resend for email, Vercel for hosting). These providers access your data only to perform services on our behalf.
- Published formulas: If you choose to publish a formula to the community library, the formula content and your bakery name become publicly visible. Unpublished formulas remain private.
- Client portal: Data you make available through the client portal (products, pricing, invoices) is visible to the clients you grant access to.
- Legal requirements: We may disclose information if required by law, court order, or to protect our rights.
4. Data Security
We take security seriously. Yecora uses row-level security on every database table, encrypts data in transit (TLS) and at rest, supports two-factor authentication, and applies security headers across the platform. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for optional data processing
To exercise any of these rights, contact us at privacy@yecora.app.
7. Cookies
Yecora uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies.
8. Children's Privacy
Yecora is not directed at children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy, contact us at: privacy@yecora.app