Privacy

Last updated 6 October 2026

Yellowjacket does AI work on documents and data you give it. This page says plainly what we keep, who else sees it, and what you can ask us to do. Questions: hello@aiyellowjacket.com.

What we keep

• Your account: your email address, and your name if you sign in with Google or Microsoft. If you sign in with Google or Microsoft we receive only your name, email address and (for work accounts) your organisation - never your password.
• Your work: the briefs you write, the files and data you add, and the results we produce, so you can come back to them.
• Payments: the amount, the date, and the email address you gave Stripe. Card details go to Stripe and never reach us.
• Running the service: basic technical records such as the time of a request, so we can keep the service working and stop abuse.

Who else handles it

• AI model providers. To do your work, the relevant parts of your documents are sent to AI models run by other companies (such as Anthropic and open-model hosts), reached through OpenRouter. They process it to produce an answer.
• Stripe takes card payments. Resend sends sign-in emails. Cloudflare hosts the service and stores our backups.
• If you connect a database or another app, we only ever read from it, and only for the work you ask for.

We don't sell your information, and we don't use it for advertising.

Training

We do not use your documents or results to train AI models unless your workspace has switched this on in Settings. It is off by default.

How long we keep it

Your account, work and results are kept while your workspace exists, so you can see past work. Files you upload are used for the job and are not kept in our backups. Payment records are kept as long as the law requires.

Your choices

You can ask us to show you, correct, export or delete what we hold about you by emailing hello@aiyellowjacket.com from the address on your account. We will reply within 30 days.

Security

Connections are encrypted, connection details for your data sources and accounts are stored encrypted, and sign-in codes are stored only in a scrambled form that can't be read back.

Changes

If we change this page in a way that matters, we will say so on the site before the change applies.