Yatiisma.ai, a trading name of Yati Isma Binti Badaruddin ("we"), operates Yatiisma.ai and is the data controller for the personal data described here, in line with Malaysia's Personal Data Protection Act 2010.
What we collect and why
- Account data (name, email, login credentials) — to create and run your account (contract).
- Your content (projects, uploads, prompts, generated products, survey responses you collect) — to provide the service (contract).
- Usage and device data (IP address, browser, AI usage, credit activity) — security, fraud prevention, usage limits and improving the product (legitimate interests).
- Support messages — to help you (contract / legitimate interests).
- Referral data (who referred you) — to award referral credits (contract).
Who we share it with
- Service providers: hosting, database, AI model providers and web research tools that process data to run the service.
- Paddle, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing.
- Professional advisers (legal, accounting) and authorities where required by law.
Retention
We keep data while your account is active and delete or anonymise it within 30 days of account closure, unless the law requires us to keep it longer.
Your rights
You may request access to, correction of, or deletion of your personal data, limit its processing, or withdraw consent, by emailing support@yatiisma.ai. We respond within 21 days.
Security
We use encryption in transit, access controls and per-account data isolation to protect your data.
Cookies
We only use essential browser storage to keep you signed in and remember referral links. We do not use advertising cookies.