Privacy policy

Yako (yakobooks.com) is operated by Casia Growth Lab LLC, Villa 33, Cluster 10, Damac Hills 2, Dubai, United Arab Emirates("we", "us"). We are responsible for the personal data described in this policy that we collect to run Yako, such as your account details.

When a business uses Yako, the records it puts into its workspace (for example details of its customers, suppliers and employees) belong to that business. We process those records on the business's behalf to provide the service, and the business decides what goes in.

• Account data. Your name, email address, password (stored only as a one-way hash), the organization and workspaces you belong to, and your role in each.
• Workspace financial data. What you or your team add to a workspace: bank statements and transactions, invoices, bills, quotes, credit notes, customers and vendors, employees and payroll details, tax settings, journal entries and notes.
• Documents.Receipts, invoices and other files you upload or forward to a workspace's inbox address, including the sender, subject and body of forwarded emails.
• People you invite. The names and email addresses of team members and external advisers you invite.
• Messages you link. If you link a WhatsApp number, that phone number and the messages and files you send to Yako.
• Usage analytics. Which pages and features are used and when. We do not record sessions or your screen, and we do not capture what is displayed on your pages.
• Technical logs. IP address, browser and device type, and error reports, used to keep Yako running and secure.
• Payment data. Card payments are handled by Stripe or Paystack. We receive the status of your payments and subscription. We never see or store your full card number.
• Your messages to us. What you send when you email support or sales.

• To provide Yako: building your books, reports and tax positions from what you upload.
• To run AI features: reading documents and statements, suggesting how transactions should be coded and answering your questions in Ask Yako.
• To give you support when you ask for it.
• To bill you and manage your subscription.
• To keep Yako and your account secure, prevent abuse and fix errors.
• To understand which features are used, so we can improve the product.
• To send emails about the service: account and security messages, billing notices, and product emails such as monthly briefings of your books and AI agent reports. Briefings and agent emails have an unsubscribe link or an in-app setting to turn them off.

AI features in Yako are processed through Anthropic's API. To do this, the relevant content (for example a statement, a receipt or your question with the figures needed to answer it) is sent to Anthropic for processing.

Your data is not used to train AI models, either ours or Anthropic's. Anthropic does not train its models on data sent through its API.

AI output in Yako is a proposal. Coding suggestions, extracted figures and journal proposals are approved by a person before they reach your books. AI answers can be wrong, so please check them before you act on them.

We use the following providers to run Yako. Each processes data only to provide its part of the service to us.

We also share data:

• With people you choose. Members of your workspace, and external advisers you invite through an engagement, see what their role or engagement allows, for the period you set.
• When the law requires it. We may disclose data if we are legally required to, for example by a court order, and we will only disclose what is required.
• If the business changes hands. If Casia Growth Lab LLC or Yako is sold or merged, data may pass to the new owner, who will be bound by this policy.

We do not sell your data, and we do not share it with advertisers.

Our providers operate in several countries, including the United States and countries in the European Union. This means your data may be stored or processed outside the country where you or your business are based. We choose providers that protect data under their own security and privacy commitments to us.

• We keep your data for as long as your account is active.
• If you ask us to delete your data, we delete it from our live systems. Copies in backups are removed as those backups age out.
• We may keep some records for longer where the law requires it, for example billing and tax records.

Your business may also have its own legal duty to keep financial records for a number of years. Export your data before asking us to delete it.

Depending on where you live, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong;
• export your data in a usable format (most of it you can export yourself, as CSV or Excel);
• delete your data;
• stop or limit some uses of your data, or object to them.

Email support@yakobooks.com to make a request. We may need to confirm your identity first. If your request is about records in a workspace owned by another business, we may refer it to that business, since it decides what is in its books. You may also have the right to complain to a data protection authority where you live.

• Essential. An encrypted session cookie keeps you signed in. Yako does not work without it. We also remember a few preferences, such as the reporting period you last chose.
• Analytics. Our product analytics (PostHog) stores an identifier in your browser so we can count how features are used. It does not record sessions.
• Bot protection. Cloudflare Turnstile runs on the sign-up page to stop automated registrations.

We do not use advertising cookies.

Yako is a business tool and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you think a child has given us data, email support@yakobooks.com and we will delete it.

We protect data with encryption at rest, HTTPS for all traffic, hashed passwords, role-based permissions and an audit trail. The details are on our security page.

If we change this policy, we will update the date at the top of this page. If a change materially affects how we use your data, we will tell you by email or in the app before it takes effect.

Questions or requests about privacy: support@yakobooks.com. By post: Casia Growth Lab LLC, Villa 33, Cluster 10, Damac Hills 2, Dubai, United Arab Emirates.

The terms for using Yako are in our terms of service.

This policy is governed by the laws of the United Arab Emirates.