Legal

Privacy Policy

How we handle personal information across YELTOM.com and YELTOM.app.

Last updated: 4 August 2026

Important: This document is a practical interim legal framework tailored to YELTOM’s current service model. It should be reviewed by an Australian lawyer before paid commercial launch or whenever YELTOM’s legal entity, suppliers, prices or service inclusions change.

1. Purpose of this policy

This Privacy Policy explains how YELTOM collects, holds, uses and discloses personal information through YELTOM.com, YELTOM.app and related services. It is designed around the Australian Privacy Principles where they apply.

YELTOM is the trading name used for this service. The final legal operator name, ABN and principal business address will be published before paid commercial launch. Privacy enquiries can be submitted through our Contact page.

2. Information we collect

Depending on how you use YELTOM, we may collect:

identity and contact details, including legal first and last names, email, phone number and business contact details;
account credentials, security information and verification records;
business questionnaire answers, ideas, services, target customers, locations, preferences and other content you provide;
domain registrant, administrative, technical and billing contact information;
website, logo, branding, email and hosting content and configuration;
subscription, invoice, payment status and transaction information;
support requests, messages, feedback and communications;
device, browser, IP address, log, cookie, diagnostic, security and usage information;
AI prompts, generated outputs and related interaction data.

3. Payment information

Payments may be handled by Stripe or another disclosed payment processor. YELTOM generally receives payment status, transaction identifiers, billing details and limited card information such as brand and last four digits, rather than complete payment-card numbers.

4. How we collect information

We collect information directly from you when you create an account, complete questionnaires, request a Blueprint, purchase services, communicate with us or upload content. We also collect information automatically through cookies, logs and similar technology, and may receive information from service providers, domain registrars, payment processors, identity or fraud services and integrations you authorise.

5. Why we use personal information

to create and administer accounts;
to generate and deliver free and paid Blueprint outputs;
to provide logo, domain, website, hosting, SSL, email and support services;
to process payments, invoices, renewals, cancellations and refunds;
to register and manage domains and comply with registry requirements;
to communicate service, security, billing and support information;
to personalise, secure, diagnose and improve the Services;
to prevent fraud, misuse and security incidents;
to comply with legal, regulatory, tax, accounting and supplier obligations;
to send marketing where you have consented or where otherwise permitted by law, with an unsubscribe mechanism.

6. AI processing

Information you submit may be processed by AI and automation providers to generate plans, copy, branding directions, images, recommendations and support responses. We aim to minimise unnecessary personal information in prompts and configure providers appropriately where available. You should not submit highly sensitive personal information unless it is genuinely necessary and requested.

7. Disclosure to service providers

We may disclose information to providers that help us operate YELTOM, including payment processors, cloud and database hosts, authentication providers, domain registrars and registries, hosting and deployment platforms, email providers, analytics and security services, customer-support tools, professional advisers and AI providers.

Current or planned providers may include Stripe, OpenSRS or related domain and hosted-email suppliers, Supabase, Netlify, Bolt and Google services. The provider list may change as the platform develops.

8. Overseas disclosure and processing

Some providers may store or process information outside Australia. Countries may include the United States, Canada, European Union member states and other locations used by our suppliers. Privacy protections in those locations may differ from Australian law. Where required, we take reasonable steps to assess and manage overseas disclosure.

9. Domain-registration data

Domain registration requires disclosure of registrant and contact data to registrars, registries and related service providers. Some registration information may be published or made accessible through registration-data services where required by registry rules or law, although privacy or proxy services may be used where available and appropriate.

10. Cookies and similar technologies

We use essential cookies for authentication, security, sessions and preferences. We may also use analytics and performance technologies to understand usage and improve the Services. More information is available in our Cookie Policy.

11. Direct marketing

We may send product, educational or promotional communications where permitted. You can unsubscribe using the link in the message or by contacting us. We may still send necessary account, billing, security and service communications.

12. Security

We use reasonable administrative, technical and organisational measures designed to protect information, including access controls, authentication, encryption where appropriate, logging and supplier security measures. No online service can guarantee absolute security.

13. Retention

We retain information for as long as reasonably needed to provide the Services, maintain business and legal records, resolve disputes, prevent fraud and comply with legal or supplier obligations. Retention periods vary by data type. When information is no longer required, we take reasonable steps to delete or de-identify it.

14. Access and correction

You may request access to personal information we hold about you or ask us to correct inaccurate or outdated information. We may need to verify your identity and may refuse or limit a request where permitted by law. Where we refuse, we will generally explain why and available complaint options.

15. Account deletion

You may request account closure and deletion. Some information may need to be retained for legal, tax, fraud-prevention, domain-registration, dispute or backup purposes. Closing an account does not automatically cancel or transfer third-party domains, hosting, email or subscriptions unless the relevant cancellation process is also completed.

16. Children

YELTOM is not intended for children under 18. We do not knowingly offer accounts to children.

17. Privacy complaints

Submit a privacy complaint through the Contact page with enough detail for us to investigate. We will acknowledge and assess the complaint within a reasonable time. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner.

18. Data breaches

We maintain processes to assess suspected data breaches and will notify affected individuals and regulators where required by applicable law.

19. Changes to this policy

We may update this policy as the Services, suppliers or law change. The current version and effective date will be published here. Material changes may also be notified through the app or email.

20. Contact

For privacy questions, access or correction requests, use the Contact page. A dedicated privacy email and the final legal operator details will be added before paid commercial launch.