This Privacy Policy explains how we collect, use, share, and protect personal data when you use Yinatrix, including any associated applications, APIs, and the third-party artificial-intelligence models we integrate (collectively, the "Service"). It is incorporated by reference into, and should be read together with, our Terms of Service ("Terms"). In the event of a conflict between this Policy and the Terms on a matter not concerning personal data, the Terms control; on matters of personal-data handling, this Policy controls.
Scope note. Yinatrix is an AI tool platform that integrates multiple third-party AI model providers located in various countries. Because of this, the prompts and content you submit may be transmitted to and processed outside your country of residence, as described in Section 5.1. This Policy explains the data-protection rights that may apply to you depending on where you live (Section 9). The Service is not directed to users in the European Economic Area (EEA) or the United Kingdom, and this Policy does not address rights that arise only under EU/UK law.
1. Definitions
In this Policy, capitalized terms have the meanings given below or in the Terms:
- "Personal Data" / "Personal Information" means any information relating to an identified or identifiable natural person (you), as defined under applicable data-protection law.
- "Service", "Terms", "User", "Account", "Subscription", "Plan", "Credits", "Your Content", "Outputs", and "Model Providers" have the meanings given in the Terms.
- "Processing" means any operation performed on Personal Data (collection, storage, use, disclosure, transfer, deletion, etc.).
- "Controller" means the party that determines the purposes and means of Processing; "Processor" means a party that Processes Personal Data on behalf of a Controller.
2. Information We Collect
We collect only what we need to provide and operate the Service.
2.1 Account & Identity. When you register, we collect a valid email address and any name or display name you provide. For age-gated or verified features we may collect age or date-of-birth confirmation. We do not require government-issued ID unless required by law or to resolve a dispute.
2.2 Payment Information. Paid plans are processed by third-party payment processors. We receive confirmation of payment and limited billing metadata (plan, amount, date, last-four of card where applicable) but do not store your full card number or CVV; those are held by the processor under its own policies.
2.3 Content You Provide (Prompts and Uploads). Text, images, audio, video, code, or other material you input, upload, or submit ("Your Content") is collected to generate the outputs you request. Because the Service integrates third-party AI models, Your Content is transmitted to the relevant Model Provider(s) to produce results (see Section 5.1).
2.4 Generated Outputs. Content generated for you (text, images, etc.) is stored as part of your account history so you can view, edit, and export it, subject to your Plan and retention settings.
2.5 Subscription, Plan, and Usage. We collect your Plan type (free or paid, monthly or annual), billing records, credit balances and consumption, feature usage, and support correspondence. Unless a specific distribution provides otherwise, credits are permanently valid; expired or forfeited credits are handled per the Terms.
2.6 Automatically Collected Data. When you use the Service we automatically collect: IP address, device and browser type, operating system, referring URLs, pages viewed, timestamps, and diagnostic logs. We use cookies and similar technologies as described in Section 7.
2.7 Data From Third Parties. We may receive data from payment processors (transaction status), Model Providers (technical results or error logs), and anti-fraud or security vendors (risk signals).
3. How We Use Information
We use Personal Data to:
- (a) create and maintain your Account and authenticate you;
- (b) provide, operate, and improve the Service, including generating Outputs via integrated models;
- (c) process payments and manage Subscriptions, credits, and refunds;
- (d) communicate with you about your Account, Service changes, security, and support;
- (e) enforce the Terms and Acceptable Use Policy, detect and prevent fraud, abuse, and unlawful content;
- (f) comply with legal obligations and respond to lawful requests;
- (g) with your consent where required (e.g., non-essential cookies, marketing communications), send product updates or promotions;
- (h) analyze usage to measure and improve performance.
We will not use Your Content or prompts to train our own or third-party foundation models without your separate, affirmative consent (consistent with Terms Section 6.2).
4. How We Share Information
We do not sell your Personal Data. We share it only as described below.
4.1 With Third-Party AI Model Providers (key disclosure). To generate results, your prompts and the content you submit are sent to the Model Provider(s) you select or that we route your request to. Those providers Process your content to produce the Output and handle it under their own privacy policies and terms. The countries in which Model Providers operate vary and may include the United States and others. We choose providers that offer contractual data-protection commitments, but we do not control their independent Processing and are not responsible for it beyond what this Policy and applicable law require.
4.2 With Service Providers. We share data with vetted vendors who help us operate the Service, including: hosting/cloud infrastructure located outside your country of residence (for example, in the United States); payment processors; analytics providers; email/notification services; and security and fraud-prevention vendors. These providers are bound by contractual obligations to Process data only for us and to apply appropriate safeguards.
4.3 For Legal and Safety Reasons. We may disclose data where required by law, regulation, legal process, or governmental request; to enforce the Terms; to protect the rights, property, or safety of the Service, our users, or the public; or in connection with an investigation of suspected unlawful activity.
4.4 Business Transfers. In the event of a merger, acquisition, asset sale, or similar transaction involving the Service, Personal Data may be transferred to the successor entity, with notice to you where required.
4.5 With Your Consent. We may share data for any other purpose disclosed to you at the time of collection and with your consent.
5. International Data Transfers
5.1 Where Your Data Goes. As a Service hosted outside your country of residence (for example, in the United States) and integrating global third-party AI models, your Personal Data — including Your Content sent to Model Providers — may be transferred to and Processed in countries other than your country of residence, including the United States and the jurisdictions in which Model Providers are located. These countries may have data-protection laws that differ from those in your home country.
5.2 Transfer Safeguards and Your Consent. Where the law of your jurisdiction requires safeguards for cross-border transfers, we implement appropriate measures (such as contractual commitments with our service providers) to protect Personal Data. By using the Service, you acknowledge and consent to the cross-border transfers described in this Section and in Terms Section 6.4.
6. Cookies and Similar Technologies
(This Section fully incorporates the Cookie Policy and is the authoritative cookie notice for the Service.)
6.1 What These Technologies Are. We and some third parties use cookies, local storage, pixels, and software-development kits (collectively, "cookies") to operate, secure, and improve the Service.
6.2 Categories We Use.
- (a) Essential — required for core functionality such as login, session management, security, and fraud prevention. These cannot be disabled without breaking the Service.
- (b) Preferences — remember your settings (e.g., language, theme, Plan state).
- (c) Analytics / Performance — measure usage and help us improve the Service (e.g., page views, feature adoption).
- (d) Advertising / Marketing — deliver and measure promotional messages, but only where permitted and with consent where required.
6.3 Consent and Control. Where the law requires (for example, under applicable cookie and consent laws), we request your consent before placing non-essential cookies and provide a cookie banner or settings panel. You can manage cookies through that banner, your browser settings, or industry opt-out tools (e.g., YourAdChoices). Declining non-essential cookies may limit some features but will not prevent core Service use.
6.4 Third-Party Cookies. Some cookies are set by Model Providers, analytics, or advertising partners under their own policies. We are not responsible for third-party cookies; please review the relevant provider policies.
7. Data Retention
7.1 Account Data is retained while your Account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution needs.
7.2 Your Content and Outputs are retained for the life of your Account so you can access history, subject to your Plan and any deletion you request. Upon account termination or deletion, we will delete or anonymize your Personal Data within a reasonable period, except where we must retain certain records to comply with law, enforce the Terms, or resolve disputes.
7.3 Payment Records are retained as required by tax and financial-regulation law, typically for the statutory minimum period applicable to the relevant jurisdiction.
7.4 Logs and Analytics are retained on a rolling basis (generally 12–24 months) and then deleted or aggregated.
We do not guarantee long-term storage of user-generated content; you are responsible for exporting what you need (see Terms Section 6.5).
8. Data Security
(This Section fully incorporates the Security Policy and is the authoritative security notice for the Service.)
8.1 Measures We Implement. We maintain administrative, technical, and physical safeguards designed to protect Personal Data, including: encryption of data in transit (TLS) and at rest where applicable; role-based access controls and least-privilege principles; network monitoring and logging; vulnerability and patch management; and an incident-response process.
8.2 No Absolute Guarantee. No method of transmission or storage is completely secure. We cannot guarantee absolute security and disclaim liability for breaches beyond our reasonable control except as required by law.
8.3 Your Responsibilities. You must use a strong, unique password, enable available protections (e.g., two-factor authentication), keep credentials confidential, and promptly notify us of any suspected compromise at security@yinatrix.com.
8.4 Breach Notification. Where legally required (including under applicable US state laws and, where the operator's obligations arise, the PIPL), we will notify affected users and, where mandated, regulators of a confirmed Personal Data breach without undue delay.
9. Your Privacy Rights
Your rights depend on where you live and which data-protection law applies to you. We will respond to verified requests within the timeframes required by law.
9.1 Users in the United States. If you are in the United States, comprehensive state privacy laws may apply to you depending on your state (for example, California, Virginia, Colorado, Connecticut, Texas, and Oregon). You may have the right to: know and access the categories and specific pieces of Personal Information we hold; correct inaccurate Personal Information; delete your Personal Information; opt out of any "sale" or "sharing" of Personal Information for cross-context behavioral advertising (note: we do not sell your Personal Information, and we do not "share" it for cross-context behavioral advertising without consent where required); and appeal a decision on a request where the law provides. We will not discriminate against you for exercising these rights. To exercise them, contact privacy@yinatrix.com.
9.2 Users in Other Jurisdictions. If you are located elsewhere, your local privacy law may give you rights to access, correct, delete, port, or object to the Processing of your Personal Information. This includes, where applicable, the Personal Information Protection Law of China (PIPL) for individuals in China, and the laws of other countries where we have users. We honor these rights to the extent they apply to you.
9.3 How to Exercise. Contact privacy@yinatrix.com. We may need to verify your identity. You may use an authorized agent where permitted. There is no fee except where a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse, as permitted by law.
10. Children's Privacy
The Service is not directed to children. We do not knowingly collect Personal Data from children below the applicable age of digital consent. Under the Terms (Sections 1.3 and 9.5), the Service is not directed to children, individuals below the applicable age of digital consent are not permitted to access or use the Service, and we require users to be at least 13 (or the higher minimum age required by applicable law) or to have valid parental/guardian consent. For US users, we comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect Personal Data from children under 13.
11. AI-Specific Processing Notice
11.1 Model Providers. Your prompts and submitted content are transmitted to and Processed by third-party AI model providers to generate Outputs. Those providers' handling of your data is governed by their own policies, which we encourage you to review.
11.2 No Training on Your Content. Consistent with Terms Section 6.2, we will not use Your Content or prompts to train our own or third-party foundation models without your separate, affirmative consent. Model Providers may Process Your Content solely to generate the Outputs you request, subject to their own terms.
11.3 Outputs Are Not Unique or Private by Default. Outputs may be similar to content generated for other users, and we do not guarantee that any Output is novel, eligible for copyright, or free of third-party rights (see Terms Sections 5.4 and 7.8). You are responsible for applying any legally required labeling of AI-generated or synthetic media and for clearing third-party rights where needed, including rights in any individuals' likeness, image, or voice you use as source material.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified in advance (e.g., by email or in-Service notice) where practicable, and the updated Policy will state an effective date. Your continued use after the effective date constitutes acceptance. If you do not agree, stop using the Service. The current version is always available at this URL.
13. Contact
Questions or requests about this Policy, or to exercise your rights, contact:
- Support & privacy rights: support@yinatrix.com
- Security incidents / Data: security@yinatrix.com
- Legal notices / DMCA: legal@yinatrix.com
- Postal address: [Postal address of the Operator]
14. Governing Law
This Policy is governed by the laws of the People's Republic of China and disputes are resolved by the exclusive jurisdiction of the competent courts at the Operator's place of incorporation, People's Republic of China, as set out in the Terms (Section 20). Nothing in this Policy limits any non-waivable right you have under the mandatory data-protection or consumer-protection laws that apply to you in your country of residence. Either party may seek interim or injunctive relief in any court of competent jurisdiction for breaches of confidentiality or intellectual-property obligations.