Privacy Policy
Last updated July 19, 2026
This Privacy Policy explains how Shift Logic LTD (“yokey”, “we”, “us”) collects, uses, and shares personal data when you use yokey, the creative platform at yokey.ai and its studio application (the “Service”). It should be read together with our Terms of Use.
Contents
1. Who is responsible for your data
Shift Logic LTD is the controller of the personal data described here. For any privacy question or request, contact us at legal@yokey.ai.
2. Data we collect
- Account data. When you sign up, our identity provider Clerk processes your name, email address, authentication credentials, and, if you use social sign-in, basic profile details from that provider.
- Workspace and content data. The prompts, references, uploads, and generated Output you create, along with the workspaces, teams, clients, and projects you organize them into.
- Connected provider credentials. If you connect a third-party AI provider to generate content, we store the API key or credentials you provide in encrypted form so we can route your generations. We never display the key back to you.
- Billing data. yokey is currently in early access and we do not process payments, so we do not collect any payment details today. When billing becomes available, payment details will be handled by a payment processor, and we will not receive or store your full card details.
- Usage and device data. Log data such as IP address, browser and device type, pages viewed, generation activity, and timestamps, along with cookies and analytics identifiers set by our analytics providers, collected to operate, secure, and improve the Service.
3. How we use your data
- to provide, maintain, and secure the Service and your account;
- to route the Inputs you submit to the third-party AI provider you connect, and return the Output to your workspace;
- to prevent fraud and abuse, and, once billing is available, to process payments and manage subscriptions;
- to communicate with you about your account, changes to the Service, and support requests;
- to monitor, troubleshoot, and improve performance, reliability, and features; and
- to comply with legal obligations and enforce our Terms.
4. Legal bases
Where the EU or UK GDPR applies, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent abuse); your consent (where we ask for it, such as certain communications and non-essential cookies); and compliance with legal obligations.
5. Service providers we share data with
We share personal data with vendors who process it on our behalf under appropriate agreements, including:
- Clerk - authentication and account management;
- The third-party AI provider you connect - receives the Inputs you submit so it can generate Output, under your own account and its terms;
- Hosting and storage providers - to host, store, and deliver your content;
- Mixpanel - product analytics, to understand how features are used and improve the Service;
- Google Analytics - website analytics, to measure traffic and usage patterns; and
- Error-monitoring providers - to detect and diagnose faults and keep the Service reliable.
We do not sell your personal data. We may disclose data if required by law or to protect our rights, users, or the public.
7. Marketing communications
With your consent where required, we may send you emails about the Service and related updates. You can opt out of marketing emails at any time using the unsubscribe link in the message or by contacting support@yokey.ai. We will still send you essential account and transactional messages.
8. International transfers
We and our providers may process your data in, or transfer it to, countries other than your own, including outside the European Economic Area. Where required, we rely on lawful transfer mechanisms such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
9. Retention
We keep personal data for as long as your account is active and as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You can delete content from your account, and closing your account will remove or anonymize associated data within a reasonable period, subject to backups and legal retention requirements.
10. Your rights
Depending on your location, you may have the right to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent. To exercise these rights, contact legal@yokey.ai. You also have the right to lodge a complaint with your local data protection authority.
11. Security
We use technical and organizational measures designed to protect personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.
14. Contact
For any privacy question or request, write to yokey at legal@yokey.ai.