Privacy Policy

Last updated 23 September 2026

Ygora is a product of Ygora AS (org. nr 935 830 427), Norway. This policy explains what personal data we collect when you use Ygora, why we collect it, who processes it, and the rights you have. Questions? Email hello@ygora.ai.

What we collect

• Account data — your email address (used to sign you in with a magic link), and the name, role, and company you give us during setup.
• Company information — the company name and any rough details (size, industry) you provide. We may enrich this from public sources to sharpen the guidance we give you.
• Your stress tests and conversations — your answers, what you type, the conversation you have with Ygora about a stress test, and the replies and documents generated for you.
• Technical data — essential session cookies and standard server logs (such as IP address and browser type) needed to run and secure the service.

We don't ask for special-category data, and we ask that you do not enter sensitive personal information about your team members into Ygora.

Why we use it

• To provide the service and your account — performance of a contract.
• To answer you in the conversation and draft documents you ask for —performance of a contract, and your consent where you choose to share details.
• To secure the service and prevent abuse — legitimate interests.
• To send service emails such as sign-in links — performance of a contract.

Ygora and ByeByeApply

Ygora and ByeByeApply are two products operated by the same company, Ygora AS, on shared infrastructure with a single sign-in. If you use both, the same email address is one account across them. We may use your information across both products to operate them — and, in particular, to match leaders with the people they could work with. We remain the controller of your data throughout; this is not sharing with a separate company. We rely on performance of our contract with you to run the products, and on your consent for any cross-product matching.

Who processes your data

We rely on a small set of trusted providers to run Ygora. Your data may be processed by:

• Supabase — authentication and database hosting.
• Anthropic — when Ygora drafts a document for you, suggests what your goal needs, or answers you in the conversation, what you typed and your stress test answers are sent to Anthropic's Claude API to generate it. Anthropic processes this in the United States, and does not use it to train a model.
• Vercel — application hosting.
• Our email provider — delivery of sign-in and service emails.

Some providers are located outside the EU/EEA (notably Anthropic and Vercel, in the United States). Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Sharing

We do not sell your personal data. We share it only with the providers above, or where we are required to by law.

How long we keep it

We keep your account and company data for as long as your account is active. Your stress tests and your conversations with Ygora are retained so they are still there next time you sign in. Server logs are kept for a limited period for security. You can delete everything yourself, at any time, from Settings.

Your rights

Under the GDPR you can access your data, correct it, delete it, export it (portability), restrict or object to processing, and withdraw consent. Access, portability and deletion are self-serve: in Settings you can download a complete copy of your data as a JSON file, or delete your account outright. Deletion is immediate and permanent, and it covers ByeByeApply too — the same email signs you in to both, so it is one account. For anything else, or if you would rather we did it, email hello@ygora.ai. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).

Cookies

We use only essential cookies needed to keep you signed in and to secure the service. We do not use advertising or third-party tracking cookies.

Changes

We may update this policy. When we do, we'll post the new version here with a revised date.

Ygora AS · Org. nr 935 830 427 · hello@ygora.ai