Privacy Policy

Introduction

This Privacy Notice for Yarlo Limited ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at yarlo.co or use any of our related products.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, please contact us at info@yarlo.co.

Summary of key points

This summary provides key points from our Privacy Notice. You can find out more details about any of these topics by reading the relevant sections below.

• We collect personal information you provide when registering and using the Services.
• We do not process sensitive personal information.
• We do not receive information from third parties.
• We process your information to provide and improve our Services, communicate with you, and ensure security.
• We may share information in specific situations, such as with business partners or during a business transfer.
• We do not sell your personal information.
• We use cookies and similar technologies only to maintain your session and remember preferences.
• You have rights regarding your personal information and can contact us to exercise them.

1. What information do we collect?

Information you provide to us

We collect personal information that you voluntarily provide when you register for the Services, express interest in our products, or contact us. This includes:

• Names
• Email addresses
• Business name
• Phone number (optional)
• Photos, sketches, and project files you upload to generate renders

We do not collect sensitive information (such as health data, financial account details, or government ID numbers) and do not process payment card data directly — this is handled by Stripe.

Information automatically collected

Some information is collected automatically when you visit or use our Services. This includes:

• Log and usage data (IP address, browser type, pages viewed, time spent)
• Device data (device type, operating system, unique device identifiers)
• Location data (general location inferred from IP address)
• Cookies and similar tracking technologies (see section 6)

2. How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, and ensure security. Specifically, we process your information to:

• Create and manage your account
• Generate photorealistic renders from your uploaded images
• Process payments via Stripe
• Send transactional emails (account creation, job updates) via Resend
• Respond to enquiries and provide support
• Analyse usage patterns to improve the service
• Prevent fraud and ensure platform security

3. When and with whom do we share your information?

We may share your information in the following situations:

• Service providers. We share data with Stripe (payment processing), Resend (transactional email), and Supabase (data storage). These services handle only the data necessary to perform their functions and have their own privacy policies.
• Business transfers. In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• Legal requirements. We may disclose your information where required by law or to protect the rights and safety of our users or the public.

We do not sell your personal information to third parties.

4. Do we use cookies?

Yes. We use cookies and similar technologies to maintain your session, remember your preferences, and analyse how the Services are used. We use:

• Essential cookies. Required for the Services to function (e.g. authentication sessions).
• Analytics cookies. We use Google Analytics to understand how visitors interact with our site. This data is anonymised and aggregated.

We do not use advertising or tracking cookies. You can control cookie preferences through your browser settings, though disabling essential cookies may affect service functionality.

5. Do we offer AI features?

Yes. Yarlo uses AI to analyse your uploaded photos and sketches and generate photorealistic renders of interior spaces. Specifically:

• Images you upload are analysed by AI to extract spatial and design information.
• AI is used to generate output renders based on your inputs and chosen styles.

We never use your uploaded content — photos, sketches, or project files — to train AI models. Your content is stored securely and is not shared with other users or third parties.

6. How long do we keep your information?

We retain your personal information for as long as your account is active or as needed to provide Services. If you request deletion of your account, we will delete or anonymise your information unless we are required to retain it by law (e.g. for tax or fraud prevention purposes).

Uploaded images and generated renders are retained while your account is active and deleted upon account closure unless you delete them sooner.

7. How do we keep your information safe?

We use Supabase infrastructure with industry-standard encryption and access controls to protect your data. All data transmission is encrypted via HTTPS. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Do we collect information from minors?

We do not knowingly collect data from or market to children under 13 years of age. By using the Services, you represent that you are at least 13. If we learn that personal information from users under 13 has been collected, we will deactivate the account and delete the information promptly.

9. What are your privacy rights?

Depending on your location, you may have rights regarding your personal information, including:

• The right to access the personal information we hold about you
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information
• The right to withdraw consent where processing is based on consent

You can review or update your account information from the Settings page at any time. To request deletion or exercise other rights, email us at info@yarlo.co.

10. Controls for do-not-track

Some browsers include a Do-Not-Track ("DNT") feature that signals to websites that you do not want your browsing activity tracked. We do not currently respond to DNT signals, as no uniform standard for responding has been adopted. If a standard is established in the future, we will update this policy accordingly.

11. Specific privacy rights — Australia and New Zealand

If you are located in Australia, the Australian Privacy Act 1988 and the Australian Privacy Principles apply to our handling of your personal information. If you are located in New Zealand, the Privacy Act 2020 applies.

Under these laws, you have the right to access personal information we hold about you and to request correction if it is inaccurate. If you believe we have breached our obligations under applicable privacy law, please contact us at info@yarlo.co and we will investigate and respond promptly.

12. Do we make updates to this policy?

We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "last updated" date. If we make material changes, we will notify you by email or via a prominent notice in the app. We encourage you to review this policy periodically.

13. How can you contact us?

If you have questions or comments about this policy, you can contact us at:

Yarlo Limited
New Zealand
info@yarlo.co

14. How can you review, update, or delete your data?

You can review and update your account information from the Settings page at any time. To request a copy or deletion of your personal information, email us at info@yarlo.co and we will respond within 30 days.