Legal

Privacy Policy

Last updated October 6, 2026

This policy explains, in plain language, what we collect and why. It is not legal advice. Before relying on it for your business, have it reviewed by qualified counsel in your jurisdiction.

This Privacy Policy describes how Yokubera ("we," "us," "our") collects, uses, and protects information when you use our website, client portal, and intake forms (the "Services"). By using the Services, you agree to this policy.

1. Information we collect

Information you give us. When you contact us, start a project, or use the portal, you may provide your name, email address, company or idea, project stage, what you need, and any message or details you send. Through intake forms you may provide answers about your venture and files you upload. To sign in, you provide an email address for our passwordless "magic link."

Information collected automatically. When you visit the site, our hosting and infrastructure providers may log technical data such as IP address, browser and device type, pages requested, and timestamps, for security, reliability, and basic analytics. We use local browser storage (for example, to remember a draft or keep you signed in); we do not use advertising or cross-site tracking cookies.

Payment information. If you pay us, our payment provider processes your card details directly. We receive confirmation and limited transaction data (such as amount and status) but not your full card number.

2. How we use information

To respond to inquiries and provide proposals;
To deliver the Services and run engagements through the portal;
To authenticate you and secure your account;
To process payments and keep financial records;
To operate, maintain, and improve the Services;
To protect against fraud, abuse, and security threats; and
To meet legal and accounting obligations.

3. Legal bases

Where the GDPR or similar laws apply, we process personal data on these bases: performance of a contract (delivering the Services you request), our legitimate interests (running and securing the studio), consent (where you provide it, such as optional communications), and legal obligation (such as tax records). You can withdraw consent at any time where processing is based on consent.

4. How we share information

We do not sell your personal information. We share it only as needed to run the Services, with providers that process data on our behalf under their own security and privacy commitments:

Hosting & serverless functions — to serve the website and run backend logic;
Database, authentication & file storage — to store accounts, engagement data, intake answers, and uploaded files, and to send magic-link sign-in;
Email delivery — to send transactional and notification emails;
Payments — to process deposits and balances.

We may also disclose information if required by law, to enforce our agreements, or to protect the rights, safety, and security of our clients, the public, or us. If the studio is ever involved in a merger, acquisition, or asset transfer, information may be transferred as part of that transaction.

5. Where data is stored and how we protect it

Data is stored with our infrastructure providers, which may process it in the United States and other regions. File storage buckets are private; access to client data is restricted by row-level security so each client sees only their own records, and administrative keys are held server-side and never exposed to the browser. We use encryption in transit (TLS) and apply reasonable technical and organizational measures. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

6. Data retention

We keep personal information for as long as needed to provide the Services, maintain our business and financial records, and meet legal obligations. When we no longer need it, we delete or anonymize it. You can ask us to delete information sooner, subject to records we are required to keep.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email hello@yokubera.com and we will respond within a reasonable time. We will not discriminate against you for exercising these rights.

8. Cookies and local storage

We use a small amount of browser storage that is strictly functional — keeping you signed in, remembering a form draft, and similar conveniences. We do not use third-party advertising or cross-site tracking. You can clear this storage in your browser at any time, though some features may stop working as expected.

9. Children

The Services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

10. International users

If you use the Services from outside the United States, your information may be transferred to and processed in the United States and other countries where we or our providers operate, which may have different data-protection laws than your own.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of the Services after changes take effect means you accept the revised policy.

12. Contact

Questions, requests, or concerns about your privacy? Write to hello@yokubera.com.