Draft for legal review. This is our plain-English draft and may change before it's final.
Privacy policy
Last updated 11 November 2026
How Yeply uses personal information: yours if you use Yeply, and your customers' if they get a message from us on your behalf.
Who we are
Yeply is run by [Company name], company number [Company number], registered at [Registered address]. ICO registration: [ICO registration number, if required]. Questions about your data: [Contact email].
Two roles, two kinds of data
- Your account (you, the business owner). We decide how this is used, so we are the controller.
- Your customers' details (names, mobiles, emails, quotes, invoices, replies). You decide who to follow up, so you are the controller and we are your processor, under our data processing agreement.
What we hold about you, and why
- Your name, business name, email and mobile: to run your account, send your reply alerts and Monday summary. Legal basis: our contract with you.
- Billing details: handled by Stripe. We never see your full card number. Legal basis: contract, and our legal duty to keep financial records.
- How you use the app (sign-ins, quotes added, buttons pressed): to keep it working, fix problems and see whether it helps. Legal basis: our legitimate interest in running a reliable service.
If you got a message from us on behalf of a business
A business you asked for a quote, or who did work for you, uses Yeply to follow it up. The message was sent in their name, about that quote or invoice only. We never use your details for anything else, never sell them and never send you marketing.
- Reply STOP to any text, or use the link in any email, and no business using us will message you again.
- Your reply goes to the business that contacted you.
- To ask what we hold, or to have it deleted, contact that business, or us at [Contact email]. We'll pass it on and help them act on it.
Who helps us
We use these companies to run the service. Each one is bound by a contract to protect the data.
| Who | What for | What they get | Where |
|---|---|---|---|
| Supabase | Database and sign-in | All account, customer, quote, invoice and message data | London, UK |
| Cloudflare | Hosting the app | Requests passing through, not stored | Global network |
| The SMS Works | Sending and receiving texts | Customer mobile numbers and message text | UK |
| Resend | Sending emails | Email addresses and message text | United States |
| Stripe | Taking subscription payments | Your billing details (not your customers') | UK, EU and United States |
| Anthropic | Optional AI helpers: reading a quote you upload, reading a customer's reply | The quote document or reply text | United States |
Where data goes outside the UK (to the United States), we rely on the UK's adequacy rules (the UK-US data bridge) or the ICO's international data transfer agreement.
The optional AI helpers
Two features use Anthropic's Claude: reading a quote you upload to fill in the form, and reading a customer's reply to suggest what to do next. They only suggest; nothing changes until you tap. Anthropic does not use this data to train its models.
How long we keep it
- While your account is open, for as long as you need it. You can delete a customer at any time, or ask us to.
- When you close your account, we delete your customers' details within 12 months, sooner if you ask.
- Opt-outs (just the number or email) are kept for good, so that person is never messaged again.
- Billing records are kept for 6 years, as UK tax law requires.
- Encrypted backups roll over and are deleted within 30 days.
Security
Data is stored in London, encrypted in transit and at rest. Each business can only ever see its own customers. Only a small number of our staff can access the systems, and only to support you or fix a problem.
Your rights
You can ask to see, correct, delete or move your data, object to how we use it, or ask us to restrict it. Email [Contact email] and we'll reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our cookie policy. In short: only what's needed to keep you signed in, unless you agree to more.