Privacy Policy

Last updated 30 June 2026

Ygora is a product of Ygora AS (org. nr 935 830 427), Norway. This policy explains what personal data we collect when you use Ygora, why we collect it, who processes it, and the rights you have. Questions? Email hello@ygora.ai.

What we collect

• Account data — your email address (used to sign you in with a magic link), and the name, role, and company you give us during setup.
• Company information — the company name and any rough details (size, industry) you provide. We may enrich this from public sources to sharpen the guidance we give you.
• Coach conversations — the messages you send to the Ygora coach and the responses generated for you.
• Technical data — essential session cookies and standard server logs (such as IP address and browser type) needed to run and secure the service.

We don't ask for special-category data, and we ask that you do not enter sensitive personal information about your team members into the coach.

Why we use it

• To provide the service and your account — performance of a contract.
• To generate coach responses and diagnostics — performance of a contract, and your consent where you choose to share details.
• To secure the service and prevent abuse — legitimate interests.
• To send service emails such as sign-in links — performance of a contract.

Ygora and ByeByeApply

Ygora and ByeByeApply are two products operated by the same company, Ygora AS, on shared infrastructure with a single sign-in. If you use both, the same email address is one account across them. We may use your information across both products to operate them — and, in particular, to match leaders with the people they could work with. We remain the controller of your data throughout; this is not sharing with a separate company. We rely on performance of our contract with you to run the products, and on your consent for any cross-product matching.

Who processes your data

We rely on a small set of trusted providers to run Ygora. Your data may be processed by:

• Supabase — authentication and database hosting.
• Anthropic — the coach sends your conversation text to Anthropic's Claude API to generate responses. Anthropic processes this in the United States.
• Vercel — application hosting.
• Our email provider — delivery of sign-in and service emails.

Some providers are located outside the EU/EEA (notably Anthropic and Vercel, in the United States). Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Sharing

We do not sell your personal data. We share it only with the providers above, or where we are required to by law.

How long we keep it

We keep your account and company data for as long as your account is active. Coach conversations are retained so the coach can pick up where you left off across sessions. Server logs are kept for a limited period for security. You can ask us to delete your data at any time.

Your rights

Under the GDPR you can access your data, correct it, delete it, export it (portability), restrict or object to processing, and withdraw consent. To exercise any of these, email hello@ygora.ai. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

Cookies

We use only essential cookies needed to keep you signed in and to secure the service. We do not use advertising or third-party tracking cookies.

Changes

We may update this policy. When we do, we'll post the new version here with a revised date.

Ygora AS · Org. nr 935 830 427 · hello@ygora.ai