# Privacy Policy

**Effective Date:** January 8, 2026  
**Last Updated:** January 8, 2026

This Privacy Policy describes how Yollab ("Yollab", "we", "us", or "our") collects, uses, and discloses your Personal Information when you register as a creator, upload designs, or interact with our platform at yollab.com (the "Platform").

---

## 1. Information We Collect

When you use the Platform, we collect certain information about you, your device, your interaction with the Platform, and the designs you upload. We refer to any information that can uniquely identify an individual as "Personal Information".

### 1.1 Account Information

**Examples of Personal Information collected:**
- Full name
- Email address
- Mobile number (Indian format preferred)
- Password (encrypted and stored securely)

**Purpose of collection:**
- To create and manage your creator account
- To authenticate your identity
- To communicate with you about your submissions and account
- To send you updates about new features, platform changes, and marketing communications

**Source of collection:** Collected directly from you during registration.

**Disclosure for business purposes:** May be shared with our database service providers (MongoDB Atlas), email service providers, and payment processors when necessary for service delivery.

---

### 1.2 Design Upload Information

**Examples of Personal Information collected:**
- Uploaded PNG design files
- Design metadata (title, tags, description, price)
- Product type and color selections
- Design placement data (position, scale, orientation)
- Submission timestamps and status
- Generated mockup images

**Purpose of collection:**
- To process your design submissions
- To generate product mockups for review
- To create listings on our sales platform (Shopify) after approval
- To display your designs to customers
- To generate AI-assisted descriptions (using OpenAI)
- To track submission history and status

**Source of collection:** Collected directly from you during the upload process.

**Disclosure for business purposes:** 
- Stored on AWS S3 (cloud storage)
- Processed through OpenAI API for description generation
- Published to Shopify after moderator approval
- Shared with print-on-demand suppliers for fulfillment

---

### 1.3 Financial Information

**Examples of Personal Information collected:**
- Bank account details or UPI ID (collected only when you make your first sale)
- Transaction history and earnings data
- Payout records

**Purpose of collection:**
- To process your earnings payouts (15% of product sale price)
- To maintain financial records and tax compliance
- To provide you with earnings reports

**Source of collection:** Collected directly from you when you provide payout information.

**Disclosure for business purposes:** Shared with payment processors to facilitate payouts. We do not store complete bank account numbers or card details on our servers.

---

### 1.4 Device and Usage Information

**Examples of Personal Information collected:**
- IP address
- Web browser type and version
- Device type and operating system
- Time zone and location data
- Pages visited and actions taken on the Platform
- Upload success/failure logs
- Session duration and interaction patterns

**Purpose of collection:**
- To load the Platform accurately for you
- To optimize Platform performance and user experience
- To analyze usage patterns and improve our services
- To detect and prevent fraud or unauthorized access
- To troubleshoot technical issues

**Source of collection:** Collected automatically when you access the Platform using cookies, log files, web beacons, and similar technologies.

**Disclosure for business purposes:** Shared with our hosting provider (Vercel), database provider (MongoDB Atlas), and storage provider (AWS S3).

---

### 1.5 Communication Information

**Examples of Personal Information collected:**
- Customer support inquiries and correspondence
- Feedback and suggestions
- Email responses and interactions

**Purpose of collection:**
- To provide customer support
- To respond to your inquiries
- To improve our services based on feedback

**Source of collection:** Collected directly from you when you contact us.

**Disclosure for business purposes:** Shared with our email service providers and customer support team.

---

## 2. How We Use Your Information

We use your Personal Information for the following purposes:

- **Account Management:** Creating and maintaining your creator account, authentication, and profile management
- **Design Processing:** Reviewing, approving/rejecting, and publishing your design submissions
- **Product Sales:** Listing your approved designs on our Shopify store and processing customer orders
- **Payments:** Calculating earnings, processing payouts, and maintaining financial records
- **Communication:** Sending order confirmations, approval/rejection notifications, payout updates, and platform announcements
- **Marketing:** Sending promotional emails about new features, opportunities, and platform updates (you can opt-out anytime)
- **Platform Improvement:** Analyzing usage patterns to enhance user experience and optimize performance
- **Legal Compliance:** Complying with applicable Indian laws, regulations, and legal processes
- **Security:** Protecting against fraud, unauthorized access, and other security threats

---

## 3. Design Ownership and Usage Rights

### 3.1 License Grant

By uploading a design to the Platform, you grant Yollab a **non-exclusive, worldwide, royalty-bearing license** to:
- Reproduce and display your design
- Create product mockups and listings
- Sell products featuring your design
- Market and promote products with your design
- Store and process your design files

### 3.2 Artist Rights

You retain ownership of your original design. However:
- Yollab has the right to sell products featuring your design on our store
- You earn 15% of the sale price for each product sold
- You may request to remove your design at any time by contacting us
- Upon removal request, we will cease selling products with your design, but previously sold items remain valid

### 3.3 Artist Representations

By uploading a design, you represent and warrant that:
- You own all rights to the design or have permission to upload it
- The design does not infringe on any third-party intellectual property rights
- The design does not contain illegal, defamatory, or offensive content
- You have the right to grant the license described above

---

## 4. Information Sharing and Disclosure

We share your Personal Information with third parties only as described below:

### 4.1 Service Providers

We work with third-party service providers to operate our Platform:

- **AWS S3:** Cloud storage for design files and mockup images
- **MongoDB Atlas:** Database hosting for account and submission data
- **Vercel:** Platform hosting and deployment
- **Shopify:** E-commerce platform for selling products
- **OpenAI:** AI-powered description generation
- **Payment Processors:** Processing artist payouts (bank transfers/UPI)
- **Email Service Providers:** Sending transactional and marketing emails
- **Print-on-Demand Suppliers:** Fulfilling customer orders with your designs

These providers are contractually obligated to use your information only for providing services to us and in compliance with this Privacy Policy.

### 4.2 Legal Requirements

We may disclose your Personal Information if required to do so by law or in response to:
- Valid legal processes (subpoena, court order, government request)
- Protecting our rights, property, or safety
- Investigating fraud or security issues
- Enforcing our Terms of Service

### 4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your Personal Information may be transferred to the acquiring entity. We will notify you of any such change and ensure continued protection of your data.

---

## 5. Data Retention

We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

- **Active Accounts:** Data retained as long as your account is active
- **Inactive Accounts:** We may delete accounts inactive for more than 2 years after notification
- **Design Submissions:** Approved designs retained indefinitely unless you request removal; rejected designs may be deleted after 90 days
- **Financial Records:** Transaction and payout data retained for 7 years for tax and legal compliance
- **Communication Logs:** Support inquiries retained for 1 year

You may request deletion of your account and associated data at any time by contacting us at contact@yollab.com.

---

## 6. Data Security

We implement reasonable technical and organizational measures to protect your Personal Information:

- **Encryption:** Passwords are encrypted using industry-standard hashing (bcrypt)
- **Secure Transmission:** All data transmitted over HTTPS/TLS encryption
- **Access Controls:** Limited access to Personal Information on a need-to-know basis
- **Regular Audits:** Periodic security reviews and updates
- **Third-Party Security:** We work only with providers that maintain robust security standards (AWS, MongoDB Atlas, Shopify)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your Personal Information, we cannot guarantee absolute security.

---

## 7. Your Rights and Choices

You have the following rights regarding your Personal Information:

### 7.1 Access and Correction
- You can access and update your account information at any time through your Dashboard
- Contact us to request a copy of your Personal Information

### 7.2 Deletion
- You can request deletion of your account and associated data
- Note: Some data may be retained for legal or legitimate business purposes

### 7.3 Design Removal
- You can request removal of any of your designs from our store
- Email contact@yollab.com with the design ID/title

### 7.4 Marketing Opt-Out
- You can unsubscribe from marketing emails using the link in any promotional email
- Note: You will still receive transactional emails (submission updates, payout notifications)

### 7.5 Data Portability
- You can request a copy of your data in a machine-readable format

To exercise any of these rights, contact us at contact@yollab.com.

---

## 8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

### 8.1 Essential Cookies

**Purpose:** Required for Platform functionality

| Cookie Name | Purpose | Duration |
|-------------|---------|----------|
| `authToken` | User authentication | Session |
| `user` | Store user profile data | Session |
| Session cookies | Maintain login state | Session |

### 8.2 Analytics Cookies

**Purpose:** Understand Platform usage and optimize performance (currently not implemented, but may be added in the future)

You can control cookies through your browser settings. Note that disabling cookies may affect Platform functionality.

---

## 9. International Users

The Platform is available to creators worldwide. By using our Platform, you consent to the transfer of your Personal Information to India, where our servers and business operations are located.

**Note:** All payouts are processed in Indian Rupees (INR) only. Currency conversion and international transfer fees may apply.

We comply with Indian data protection laws, including the Information Technology Act, 2000, and associated rules. If you are located in a jurisdiction with additional data protection requirements (such as GDPR in the EU), please contact us to discuss specific compliance measures.

---

## 10. Children's Privacy

The Platform is not intended for individuals under the age of 13. We do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us immediately at contact@yollab.com, and we will delete such information.

**Note:** While we have no minimum age restriction for creators, we recommend that users under 18 obtain parental consent before registering.

---

## 11. Do Not Track Signals

We do not currently respond to "Do Not Track" (DNT) signals from web browsers, as there is no consistent industry standard for DNT compliance. We will continue to monitor developments in this area.

---

## 12. Third-Party Links

The Platform may contain links to third-party websites or services (e.g., Shopify, social media). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any Personal Information.

---

## 13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- New features or services
- Legal or regulatory requirements

We will notify you of significant changes by:
- Posting the updated policy on the Platform with a new "Last Updated" date
- Sending an email notification to your registered email address
- Displaying a prominent notice on the Platform

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

---

## 14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email:** contact@yollab.com

**Postal Address:**  
Yollab  
502, Coral Heights  
Ramaprastha Greens, Sec-7  
Vaishali, Uttar Pradesh 201010  
India

**Response Time:** We aim to respond to all inquiries within 7 business days.

---

## 15. Grievance Officer

In compliance with the Information Technology Act, 2000, and rules made thereunder, the contact details of the Grievance Officer are provided below:

**Name:** Achintya Shankar  
**Email:** contact@yollab.com  
**Address:** 502, Coral Heights, Ramaprastha Greens, Sec-7, Vaishali, UP 201010, India

If you have any grievances regarding the processing of your Personal Information, you may contact the Grievance Officer, who will address your concerns within one month.

---

## 16. Consent

By registering for an account and using the Yollab Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

---

**Last Updated:** January 8, 2026

© 2026 Yollab. All rights reserved.

