← Back

Privacy Policy

Last updated: May 3, 2026

1. What We Collect

We collect your email address, username, uploaded profile image, destination URL, social links, optional extra links, CTA settings, theme choices, scheduling settings, support and report submissions, account status, subscription status, and basic click analytics. Payment information is processed by Stripe; we do not store card numbers directly.

We also process technical data such as IP-derived request information, browser and device metadata, security logs, rate-limit events, and error reports where needed to operate and protect the Service.

2. How We Use It

We use your information to authenticate you, provide your public page, process billing, send essential account emails, moderate uploads, prevent abuse, operate analytics, provide support, and maintain service security.

3. Lawful Bases

We process account, profile, billing, and service communication data because it is needed to provide the Service and perform our contract with you. We process moderation, abuse-prevention, analytics, support, security, and operational records where we have legitimate interests in keeping the Service safe, reliable, and useful. We process some records where required for legal, tax, accounting, or dispute reasons.

4. Third Parties

We use Stripe for payment processing and trusted service providers for email delivery, hosting, uploaded image storage, image moderation, rate limiting, and error monitoring. We do not sell your data or use advertising trackers.

Some providers may process personal data outside the UK. Where this happens, we rely on appropriate transfer safeguards such as adequacy arrangements or standard contractual clauses.

5. Data Retention

Your account data is retained while your account is active. When you delete your account, your public page goes offline and profile data is removed where practical. Some records may be retained for billing, security, abuse prevention, legal compliance, backups, and audit integrity. Your username may remain reserved to prevent impersonation.

6. Your Rights

You can access, edit, or delete much of your data from the dashboard. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or objection to some processing. For privacy requests, contact privacy@yesihaveone.io.

If you are in the UK, you can complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how your personal data is handled.

7. Cookies

We use authentication, admin passkey, and age-gate cookies needed to operate the Service. We do not use advertising cookies.

8. Security & Abuse Prevention

We process IP-derived request information and technical metadata where needed for rate limiting, bot detection, fraud prevention, health checks, logs, and investigation of reports or abuse.

9. Contact

yesIhaveone is the controller for the personal data described in this policy. Questions and privacy requests can be sent to privacy@yesihaveone.io.