Summary of key points

What do we process?

Account and contact data, customer content you connect or submit, AI interaction data, and product activity data — depending on how you use the Services.

Do we process sensitive personal information?

We do not intentionally collect or use sensitive personal information to infer characteristics about individuals. Please don't provide it unless necessary and authorized.

Do we collect information from third parties?

Yes — from integrations you connect, identity providers, analytics providers, customers who sync data, and publicly available sources.

How do we use it?

To provide, secure, maintain, support, and improve the Services; to generate AI features; to communicate with you; to prevent abuse; and to comply with law.

Who do we share it with?

Service providers and subprocessors, customer-directed integrations, professional advisors, authorities when legally required, and parties to a business transaction.

What are your rights?

Depending on your location: access, correction, deletion, restriction, objection, portability, and consent withdrawal. Contact privacy@ycrest.ai.

1. What information do we collect?

In short: we collect information you provide, information generated by using the product, and limited information collected automatically.

Account and contact data

Names, work email addresses, phone numbers, company names, job titles, account credentials, billing information where applicable, and communications with us — provided when you register, request a demo, submit a form, or contact us.

Customer content

Information you connect to Ycrest or submit into the product, including relationship notes, product usage context, communications metadata, and operational records. When you connect email, calendar, CRM, or other third-party services, we receive and process information from those integrations to provide the requested features.

AI interaction data

Prompts, instructions, uploaded context, and generated outputs needed to provide AI-assisted product features.

Product activity data

Sign-in events, feature usage, clicks, page views, workflow actions, device and browser details, IP address, referring URLs, diagnostics, and error logs — collected automatically to keep Ycrest reliable, secure, and useful.

Sensitive information

We do not intentionally collect or use sensitive personal information for the purpose of inferring characteristics about individuals. Please do not provide sensitive personal information unless it is necessary and authorized.

Information from third parties

We may receive personal information from integration partners, identity providers, analytics providers, customers who upload or sync data to the Services, and publicly available sources.

Google API

Our access to and use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

In short: to run Ycrest and improve the customer's own experience in Ycrest.

• Provide the service: authenticate users, connect systems, store state, and deliver product functionality.
• Generate AI features: process customer context to produce summaries, insights, recommendations, and workflow support inside Ycrest.
• Improve the in-product experience: use activity signals to debug issues, reduce latency, improve relevance, refine workflows, and make the product more useful for the customer using it.
• Protect the service: detect abuse, investigate incidents, enforce limits, and maintain security.
• Communicate with you: respond to requests, support issues, onboarding questions, and product updates.
• Comply and enforce: meet legal obligations and enforce our terms.

3. How do we use AI providers?

4. What legal bases do we rely on?

If you are located in the EEA, UK, or Switzerland, we process personal information only where we have a valid legal basis, which may include:

• Consent — where you have given permission for a specific purpose;
• Performance of a contract — where processing is necessary to provide the Services;
• Legitimate interests — such as operating, securing, and improving the Services and supporting B2B workflows;
• Legal obligations — where processing is necessary to comply with law;
• Vital interests — in limited circumstances involving someone's safety.

Canada

If you are located in Canada, we may process your information with your express or implied consent where permitted by law, and in limited circumstances without consent where authorized by applicable law.

5. When and with whom do we share information?

• Service providers: hosting, analytics, security, communications, and AI subprocessors that help us operate Ycrest. We require them to handle information for service delivery and operational support, not for unrelated use.
• Customer-directed integrations: when you connect third-party systems or request outputs that depend on them.
• Professional advisors: lawyers, auditors, and insurers.
• Legal or safety reasons: to comply with law, protect rights, investigate abuse, or respond to valid legal process.
• Business transfers: in connection with, or during negotiations of, a merger, financing, acquisition, reorganization, or sale of assets.

6. Do we use cookies and other tracking technologies?

We use cookies and similar technologies to keep the website and Services functioning, remember preferences, improve security, and understand usage and performance. You can control cookies through your browser settings and, where applicable, our consent tools.

For details, see our Cookie Policy.

7. How long do we keep your information?

We retain information for the period reasonably needed to provide Ycrest, maintain security, resolve support issues, comply with legal, tax, accounting, and contractual obligations, and enforce agreements. Retention varies by data type and by the customer configuration or contract in place.

When personal information is no longer required, we delete, anonymize, or securely archive it in accordance with our retention practices.

8. How do we keep your information safe?

We use administrative, technical, and organizational safeguards designed to protect data from unauthorized access, loss, misuse, or disclosure. No method of transmission or storage is completely secure — but protecting customer data is a core product requirement for us, not an afterthought.

9. Do we collect information from minors?

Our Services are intended for business use and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact privacy@ycrest.ai.

10. What are your privacy rights?

11. Privacy preference signals

Some browsers and extensions offer privacy preference signals, such as the Global Privacy Control (GPC). Where required by applicable law, and where the signal can be recognized and processed in the relevant context, we treat such a signal as a request to opt out of the sale or sharing of personal information for the browser or device transmitting it.

Because we do not sell personal information or share it for cross-context behavioral advertising, the signal may not change our processing in a given context.

12. Do California residents have specific privacy rights?

In short: yes — under the California Consumer Privacy Act, as amended by the CPRA ("CCPA").

Categories of personal information we collect

In the preceding 12 months, depending on how you interact with the Services, we may have collected: identifiers (name, business email, IP address); business contact and billing information; commercial information (transaction and subscription records); internet activity (usage, device, and diagnostic data); approximate geolocation derived from IP address; professional or employment-related information; audio or electronic information contained in support communications or meeting metadata; and inferences drawn from the above to improve service functionality and data quality.

Sources

Directly from you; automatically from your use of the Services; from customers who upload, sync, or connect data; from integration, identity, analytics, and marketing providers; and from publicly available sources.

Sale or sharing

California rights

Subject to certain exceptions, California residents may have the right to know the categories and specific pieces of personal information we collect, the sources, purposes, and third parties involved; to request deletion or correction; to opt out of sale or sharing (not applicable, as we do neither); to limit use of sensitive personal information (we do not use it to infer characteristics); and to not receive discriminatory treatment for exercising these rights.

How to exercise them

Email privacy@ycrest.ai or write to the address in the contact section below. You may designate an authorized agent, subject to verification requirements.

13. Do we make updates to this notice?

Yes — we may update this Privacy Notice to reflect changes in our practices, technologies, legal requirements, or other operational needs. When we do, we'll revise the "Last updated" date above and provide additional notice where required by law.

14. How can you contact us?

Yes — we may update this Privacy Notice to reflect changes in our practices, technologies, legal requirements, or other operational needs. When we do, we'll revise the "Last updated" date above and provide additional notice where required by law.