Privacy Policy

The short version

This website sets no cookies and runs no analytics. There is no account to open and nothing to sign in to. There is one form, and it asks for one thing: an email address, so we can tell you when the app is out.

The only personal data we ever hold is an email address, and only if you choose to send us one to be told when the app is released.

The rest of this page says the same thing in the detail the law requires.

1. Who is responsible

yataio.com is operated by the person building Yataio. For anything at all about your personal data — a question, a copy, a deletion — write to support@yataio.com. A person reads it.

Yataio is not yet a registered business and this site does not sell anything. When that changes, the full identifying details of the seller will be published here and in the footer of every page, before any payment is possible.

2. Cookies — there are none

yataio.com sets no cookies of any kind. Not analytics cookies, not advertising cookies, not preference cookies. Nothing is written to your browser’s storage, and there is no tracking pixel, no tag manager and no third-party script on any page.

That is why you have not seen a consent banner. Under the ePrivacy Directive and the Italian implementation of it, consent is required before storing or reading information on your device. We do neither, so there is nothing to ask you about — and putting up a banner anyway, to look diligent, would be asking you to agree to something that is not happening.

If that ever changes — the most likely reason being a checkout, which sets cookies of its own — this section will say so, and anything non-essential will come with a consent banner before it runs, not after.

3. This website

Every page here is static. Fonts and images are served from this domain and no request goes to a third-party content network, so loading a page does not tell anyone else that you visited it.

The site is hosted by Cloudflare, which keeps standard server logs — IP address, time, page requested, browser — for a short period, as any web host does, in order to serve the pages and defend against abuse. We do not use those logs to build a profile of anyone.

Legal basis: our legitimate interest in operating a website securely.

4. Telling you when the app is out

If you ask to be told when Yataio is released, we store four things: the address you typed, the language the page was in, the date and time, and a reference to the exact wording you agreed to. Nothing else. No name, no IP address, no cookie, no device fingerprint.

The language is there so that we write to you in your own. The reference to the wording is there because consent has to be provable, and “trust us” is not proof.

The list is held in a database run by Supabase on servers in Frankfurt, Germany: your address does not leave the European Economic Area. Your browser never talks to Supabase directly — the page sends the address to this domain, and our own code passes it on, which is why no third-party script runs on the form.

We use it for one purpose: sending you a message when the app is ready to install. It is not a newsletter, you will not get offers, and the address is never handed to anyone else for their own use.

Legal basis: your consent (Article 6(1)(a) GDPR), given by pressing the button underneath the sentence that says what happens to the address.

Changing your mind: write to support@yataio.com and the row is deleted. No reason needed, and we will not ask for one. Withdrawing consent does not make what happened before unlawful, but it stops everything after it.

5. If you write to us for any other reason

We keep the message and our reply for as long as needed to deal with the matter, and afterwards for as long as we may need it to defend a claim — normally not more than two years.

6. The app, when it arrives

Yataio has not been released, so nothing described here is happening yet. It is written down now because it is the reason the app exists, and because it should be checkable before you install anything.

Everything you enter in the app — customers, items, stock, quotes, orders, receipts, amounts, your shop details and logo — is written to storage on your own device. We do not receive it, we do not hold a copy, and we cannot read it. That is not a policy commitment we could quietly change: the app has no mechanism for sending it.

A backup you make is encrypted and goes wherever you put it. If you put it in a cloud service, that service’s privacy terms apply to it, not ours.

Nothing you write is sent to an artificial intelligence model, ours or anyone else’s. The ready-made phrases are templates that fill themselves in from your own data, not generated text.

When the app is released, this policy will be extended with exactly what the app sends and when — and it will be extended before the app is downloadable, not after.

7. Who else sees anything

We do not sell personal data and we do not share it for advertising. Today the third parties involved are Cloudflare, which hosts this site, Supabase, which stores the launch list in Frankfurt, and the provider of the mailbox that receives the messages you send us. Each of them acts on our instructions under a data processing agreement, and none of them may use anything they hold for purposes of their own.

We would disclose data if a law or a valid order required it. If that ever happens, what we could hand over is what we have — which, today, is an email address if you sent us one.

8. How long we keep things

• Your address on the launch list: until the app is released and for twelve months after that, or until you ask us to remove it — whichever comes first. After that the list has done its job and is deleted.
• Messages you send us: normally not more than two years.
• Server logs: a short period, set by the host.

9. Your rights

Under the GDPR you may ask for a copy of the personal data we hold about you, ask us to correct it or delete it, object to processing based on legitimate interest, ask us to restrict processing, ask for your data in a portable format, and withdraw your consent at any time.

Write to support@yataio.com. We answer within 30 days, and there is no charge.

If you think we have handled your data badly, you can complain to a supervisory authority — in Italy, the Garante per la protezione dei dati personali — or to the authority where you live.

10. Children

Yataio is a tool for running a business and is not directed at children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

If this policy changes, the date at the top of the page changes with it. If a change means we start collecting something we were not collecting before, we will say so before it happens — not in a revised page that nobody re-reads.

See also the Terms of Service and the Refund Policy.