Security & privacy
For many, protection is a box to tick. At Yasi, it is how things are built: what follows is not a hidden setting you have to find, it is how the platform is made.
Five commitments, kept today
-
You are not the product.
Your data is not sold, and we never use it to train any model, whichever it is.
-
Memory that only switches on if you want it.
Automatic memory stays off until you turn it on. Every note it uses can be viewed and edited, and you can delete them one by one or all at once.
-
A log where any alteration shows.
Changes our team makes from the administration console are recorded in it.
-
The price first, your credits back if it fails.
Every message and every creation shows its price range before it goes out. If an answer, a creation or a research run fails, the credits for what was not produced come back to you automatically.
-
Encrypted exchanges, restricted access.
Your exchanges with the platform are encrypted in transit. Administrative access to our servers works only with a key, never with a password, and the console grants each member of our team only the rights of their role.
What also protects you, and is rarely said
- Your browser never loads an image from another site on its own inside answers: a cited image stays a link, which you open if you decide to. Only the small icons of the cited sites come from an external icon service.
- In answers that analyze your documents, a quotation of four words or more is checked verbatim: if it is not found there exactly as written, it loses its quotation marks. And Yasi is instructed to say when it does not know.
- Sources of low editorial quality are set aside by their nature, never by the entity they mention, and their count is shown under the answer.
- Nothing is published or shared in your name without your click.
- Your documents remain yours: once deleted, they go to the trash; empty it and they are erased at once, otherwise at the end of the delay you chose, unless required by law. Our backups, for their part, go back no further than 15 days.
- No advertising, and nothing is designed to keep you hooked: no audience measurement tool, no notification to bring you back, and the time you spend is never measured.
Private mode
In one gesture, a conversation becomes private: its content is encrypted with a key of its own, then erased when it ends. A switch makes all your new conversations private, and private mode also exists one conversation at a time.
A private conversation neither draws on your memory nor feeds it. It is neither indexed in your searches nor summarised, and it opens only from the session where you started it: another device never sees it.
When you end it, when you sign out, when you turn the mode off on this device, or after 24 hours without activity, its key is destroyed: its messages, the files read and the images created are deleted, unless required by law. Our database backups, for that matter, leave it out from the start.
You then receive an erasure receipt. It counts what was deleted without naming anything: no text, no title, no conversation identifier. Anyone can verify it, at any time and without an account, at https://app.yasi.one/v1/public/wipe-receipts/<id>.
By choice, private mode refuses whatever would write files its key does not cover: deep research, exports, the creation of videos, documents and spreadsheets, audio and video attachments, and the reading of scanned pages.
What we do not say
We display no label we do not hold. Certifications will come; we will announce them only once obtained, and we promise no date. And we do not claim to be infallible: when we fall short, we say so, and we publish the figure.
Where your data is
The platform runs on servers we administer ourselves, at a professional host. We name no location: our current hosting is transitional, and the location will be announced only once our permanent setup is in place and verified. Like any platform, we work with technical subprocessors; their list by category is in our privacy policy.
What we keep, and for how long
This table reproduces, from the same source, rows of the table the app shows on the Your data page, in normal mode and in private mode; the complete table is in the app.
| Data | Normal mode | Private mode |
|---|---|---|
| Active conversations | Kept until you delete them, or until a timer runs out. | Until you end them, when a timer runs out, and after 24 h without activity at the latest, unless required by law. |
| Deleted conversations | Erased within 30 days, unless required by law. | Not applicable: a private conversation does not go through the trash, it is erased with its key, unless required by law. |
| Closed account | Pseudonymised at once, erased after 30 days, unless required by law. | Pseudonymised at once, erased after 30 days, unless required by law. |
| Attachments and documents | Kept with their conversation. | Encrypted, erased at the end, unless required by law. Images are never written: they stay in RAM while the conversation uses them. |
| Generated media | In « My content » until you delete it. | Encrypted, erased at the end, unless required by law. |
| Memory | Kept until you delete it. | Never written. |
| Billing lines | Amount, date, action code, opaque reference: kept after account deletion for accounting law. | Same, and content-free by construction. |
| Connection identifiers | Account id, IP, time: 12 months, kept after account deletion, then erased, unless required by law. | Identical: signing in is not part of a conversation. |
| Staff audit trail | Kept, tamper-evident. | Kept, and it carries nothing about a private conversation. |
| Safety flags | A safety check that fires leaves one row: account, category, language, time, never the text. Kept; the link to the conversation goes when the conversation is erased. | The same row, and it never names the conversation. It survives the erasure, and the receipt does not count it. |
| Erased data | Database backups may keep a copy of it for up to 15 days. They are used only to restore the service in the event of an incident, and are then erased automatically, unless required by law. | Private rows are excluded from the backups. |
A security control copy, dissociated from the account, lasts a limited time, unless required by law; private mode does not shorten it.
Your rights, one line each
- Access your data.
- Correct it.
- Erase it.
- Export your documents.
- Withdraw a consent.
Write to compliance@yasi.one. Exporting your conversations, your memory and your documents, like deleting your account, can also be done directly in the app, on the Your data page.
Report a vulnerability
Found a vulnerability? Write to compliance@yasi.one. We answer, we fix, we thank.
Born in the Gulf, designed for the whole planet, and built so that your data stays yours.