Privacy Policy

This policy explains what Forum Software, Inc. ("YHat Labs", "we") collects when you use yhatlabs.com and the YHat Labs API, why, and how long we keep it. Contact: founders@yhatlabs.com.

What we collect

• Account information: your name, email address, company or institution, and role, when you request access or sign in. Sign-in uses a one-time code sent to your email, a password you set, or a Google or GitHub account if you choose one; we receive your email and name from those providers, nothing else.
• API data: the series or tables you send and the forecasts or predictions we return, with the timestamps, sizes and status of each request.
• Website data: the pages you visit, measured with a cookieless analytics service (Umami) that does not identify you. Contact form submissions include what you type, your IP-derived country, and your browser type.

How we use it

• To provide the Service: compute responses, meter usage against your allowance, and secure your account.
• To support you: diagnose a failed or unexpected request, and answer your questions.
• To run the business: understand which pages and features are used, and contact you about your access.

We do not use your API data to train or improve models, and we do not sell personal data.

Retention

Account information is kept while your account exists. Request metadata (sizes, timings, status) is kept for metering and billing. Request and response bodies are kept for a limited period for debugging and then deleted; you can ask us to turn body retention off for your keys. Contact form submissions are kept until the conversation is closed.

Who processes it

We run on infrastructure from Cloudflare (website, API gateway, accounts, email delivery) and model hosting providers in the United States, and we use Google Workspace for email. These providers process data on our behalf under their own security commitments. Data may be processed in the United States.

Your choices

You can ask us to show, correct or delete the personal data we hold about you, to turn off retention of your request bodies, or to close your account, by emailing founders@yhatlabs.com. If you are in the EU or UK, you also have the right to complain to your data protection authority.

Changes

We may update this policy; the date above shows the current version.