Privacy Policy

1. Information we collect

• Account data such as name, email address, profile image, and authentication method (Google or magic link).
• Project content such as project names, issues, comments, approvals, attachments, and client-visible activity.
• Invite data such as email addresses, roles, invite status, and acceptance timestamps.
• Email intake content when you or your clients use project or issue email addresses, including message headers and attachments.
• Billing data provided by Paddle, such as subscription status, plan, billing email, and billing country (we do not store full payment card details).
• Usage and technical data such as IP address, device information, and log data generated by normal use of the Service.
• Cookies and similar technologies to keep you signed in and to secure the Service.

2. How we use information

• Provide, operate, and maintain the Service.
• Authenticate users and enforce access controls.
• Process subscriptions, taxes, and billing status.
• Communicate service and account notifications.
• Protect the Service from fraud, abuse, or security risks.
• Improve features, performance, and reliability.

3. Legal bases (EEA/UK)

If you are in the EEA or UK, we process personal data based on: (a) contractual necessity to provide the Service, (b) legitimate interests in maintaining and improving the Service and protecting it from abuse, and (c) consent where required for specific communications.

4. How we share information

We share information with trusted processors that help us run the Service. Examples include:

• Paddle for subscription billing and tax handling.
• Google for authentication.
• AWS (SES and S3) for email delivery and file storage.
• Database and hosting providers for data storage.

We may disclose information if required by law or to protect the rights, safety, and security of IssueClear and its users.

5. Data retention

We retain account and project data while your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data, subject to lawful retention requirements and backups.

6. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

You can access, update, or delete your account information by contacting us. Depending on your location, you may have rights to request access, correction, deletion, or restriction of processing, or to object to certain processing.

8. International transfers

We may process information in countries other than where you live. We take steps to ensure appropriate safeguards when transferring personal data.

9. Data controller

YY Digital is the data controller for personal information processed under this Privacy Policy.

10. Children

The Service is not intended for children under 16, and we do not knowingly collect personal information from them.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated policy and update the date above.

12. Contact

Questions about privacy can be sent to [email protected] (YY Digital). .