Legal

Privacy Policy

Effective: 9 July 2026  ·  Last updated: 9 July 2026

This Privacy Policy explains what information Yoinky ("we," "us," or "our") collects when you use a Yoinky workspace, talk to the Yoinky bot on Telegram, upload company knowledge, or connect publishing accounts (together, the "Service"), how we use it, and the choices and controls you have over it.

By starting a conversation with Yoinky or connecting an account, you acknowledge that you have read and understood this Policy. If you do not agree, please stop using the Service.

1. Information We Collect

1.1 What you send us directly

• Text messages you send to the Yoinky bot on Telegram.
• Your Telegram account identifiers (username, user ID) needed to run the bot conversation.
• Documents, transcripts, notes, links, and other sources you add to a workspace.
• Any feedback, bug reports, or support messages you send us.

1.2 Your connected public history

When you connect your X or LinkedIn account, you authorise Yoinky to read the public posts, profile information, and engagement permitted by that platform. This helps Yoinky learn voice, evidence, and content performance. We do not request access to private messages on those platforms. Publishing requires the permissions and approval rules configured for your workspace.

1.3 Your company knowledge layer

From the material above, Yoinky builds and stores a workspace knowledge layer that may include:

• Insights, evidence, claims, quotes, objections, themes, and other structured objects extracted from approved sources.
• Narrative architecture, audiences, messaging, territories, and editorial decisions.
• Briefs, drafts, revisions, approvals, distribution records, and source lineage.
• Workspace permissions and member actions needed for access control and audit history.

Knowledge objects retain their source and permission context. Workspace owners and authorised members can review or remove material through the controls available in the Service.

1.4 Usage and diagnostic data

• Crash reports and error logs.
• Feature interaction events (e.g. which drafts you approve, edit, or dismiss).
• Bot version and anonymised device or client identifiers.
• During beta: additional diagnostic telemetry to help us identify and fix issues faster (see Section 10).

2. How We Use Your Information

• Provide the Service - structure permissioned knowledge, maintain narrative systems, and produce grounded briefs and drafts.
• Improve the Service - analyse aggregated, anonymised patterns to improve extraction and draft quality.
• AI inference - send relevant context to AI model APIs to extract knowledge, build narratives, and generate or review content (see Section 5).
• Communications - send product updates and respond to support requests.
• Safety and legal compliance - enforce permissions, detect abuse, enforce our Terms of Service, and comply with applicable laws.

We do not use your personal data to train shared AI models that are exposed to other users, without your explicit, separately-obtained consent.

3. Storage and Security

3.1 Where data is stored

Your hosted workspace data is stored on our cloud infrastructure and protected in transit. Telegram and connected platforms may separately cache data under their own policies. Self-hosted installations are operated by the person or organisation deploying them and are outside our hosted data controls.

3.2 Security measures

We implement technical and organisational safeguards including encryption, strict access controls, and regular security reviews. No system is entirely breach-proof. If we become aware of a security incident that affects your personal data, we will notify you as required by applicable law.

3.3 Retention periods

• Workspace knowledge and content: retained until an authorised user deletes it or the workspace is closed.
• Account data: deleted within 30 days of account closure.
• Diagnostic logs: retained for up to 12 months for debugging, then deleted.
• Anonymised aggregate statistics: may be retained indefinitely.

4. Your Controls

Transparency and control are core to Yoinky. Depending on your workspace role, the app and bot let you:

• View knowledge objects with their source, permission, and review state.
• Review proposed insights and claims before they become approved company knowledge.
• Control workspace membership, source permissions, and publication approvals.
• Disconnect connected publishing platforms.
• Delete sources, content, or an account subject to workspace role and retention requirements.

5. AI Processing and Third-Party Model Providers

Yoinky sends relevant portions of permissioned workspace context to configured AI model APIs to extract knowledge, build narrative architecture, and generate or review content. When doing so:

• We send the minimum context necessary for each inference request.
• We bind AI providers by data processing agreements that prohibit them from using your data to train their own models.
• Inference happens transiently; providers do not persistently store your data beyond the scope of each request.

6. Sharing and Disclosure

We do not sell your personal information. We may share it in the following limited circumstances:

• Service providers - hosting, analytics, and AI inference providers who process data on our behalf.
• Connected platforms - only the data necessary to perform an authorised action. We do not send your full workspace knowledge layer to X, LinkedIn, or Telegram.
• Legal requirements - if required by applicable law, court order, or governmental authority, after taking reasonable steps to notify you where legally permitted.
• Business transfer - if Yoinky is acquired or its assets transferred, your data may pass to the successor entity. We will provide notice before your data becomes subject to a materially different privacy policy.
• With your consent - for any other purpose, with your prior explicit consent.

7. Connected Platforms

Yoinky connects to Telegram, X, LinkedIn, and configured knowledge or model providers. When you connect an account:

• You explicitly authorise access via that platform's own OAuth flow.
• We request only the scopes necessary for the features you enable.
• Your use of Telegram, X, and LinkedIn is separately governed by their own terms and privacy policies.
• Authorised users can disconnect a platform. Disconnecting stops future access but does not automatically delete knowledge or content already derived from it. Use your Controls in Section 4 for that.

8. Your Rights

8.1 All users

You have the right to access your personal data, delete your data, and export it in a portable format. These controls are available directly through the bot (Section 4). You may also withdraw consent to processing at any time, which may require you to discontinue using the Service.

8.2 European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are located in the EEA or UK, our lawful bases for processing your personal data are your consent and our legitimate interest in providing and improving the Service. You have additional rights including: restriction of processing, objection to processing based on legitimate interests, and the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, or your national DPA in the EU).

8.3 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect and how it is used, to delete personal information, to correct inaccurate information, to opt out of the sale or sharing of personal information (we do not sell or share your data), and not to be discriminated against for exercising these rights.

To exercise any of the above rights, message the bot or contact us at parry@meetyoinky.com. We will respond within the timeframe required by applicable law (typically 30 days).

9. Children's Privacy

Yoinky is not directed at children under 16 years of age and we do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected data from a child under 16, please contact us immediately at parry@meetyoinky.com and we will delete it without delay.

10. Beta Program Notice

Yoinky is currently in private beta. During the beta period, we may collect additional diagnostic and interaction data to help us identify bugs, understand usage patterns, and prioritise improvements. Beta users may experience changes in features, data handling, and this Privacy Policy as the product evolves. We will update this Policy and notify you of material changes when they occur.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes that significantly affect your rights or our data practices, we will notify you by email (if you have provided one) or by a message from the bot at least 14 days before the change takes effect. Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised Policy.

12. Contact

For privacy questions, data requests, or to exercise your rights: