Privacy Policy

Yoga Write Code operates the Yoga Write Code web application (yogawritecode.com). It is built and run by Sachin Pandey as a solo, bootstrapped product, currently based in Nepal. This policy explains what is collected, why, and what choices you have.

Account information: email address and password hash, managed by Supabase.

Content you create: project names, website URLs you submit, and the analyses, opportunities, clusters, briefs, outlines, and drafts the service generates or you write.

Website data you submit: when you ask me to analyze a website, I fetch publicly accessible pages from that site (title, meta description, headings, and page text) to produce the analysis.

Technical information: standard server logs (IP address, user agent, timestamps) kept by my hosting provider for security and debugging.

Analytics: if you accept analytics in the cookie banner, I load Google Tag Manager, which loads Google Analytics 4 to measure how visitors use the public pages of the site, such as which pages are viewed and which sources they arrive from. Google Analytics sets cookies such as _ga to distinguish a visit from a returning one. Nothing is loaded and no cookie is set if you decline or ignore the banner. You can change your choice at any time using the “Cookie settings” link in the site footer.

Session recordings: if you accept analytics, I also use Microsoft Clarity to record anonymous replays of how the public pages are used, so I can find pages that are confusing or broken. Recordings mask the content of text fields. They are limited to the public marketing pages, the sign-in and sign-up pages: your dashboard, where you create content and submit website URLs, is excluded from recording and is not visible to Microsoft.

• to operate, secure, and improve the service;
• to generate the analyses and content you request;
• to authenticate you and persist your workspace;
• to respond to support requests;
• to comply with legal obligations.

I do not sell personal data.

To generate results, the website text and project context you submit are sent to my AI provider, Amazon Bedrock (Anthropic Claude models), under my account. AI providers process this input to produce outputs for you. I do not claim that submitted data is never used for model training unless the relevant provider contractually confirms it; current provider terms: [TO BE CONFIRMED per provider documentation].

• Vercel — application hosting and edge delivery;
• Supabase — PostgreSQL database, authentication, and row-level security;
• Amazon Web Services (Bedrock) — AI model inference;
• Google Tag Manager and Google Analytics — page view measurement, only when you have accepted analytics cookies;
• Microsoft Clarity — session recordings of the public pages, only when you have accepted analytics cookies;
• Dodo Payments — payment processing and merchant of record for Pro subscriptions.

Each provider processes data under its own privacy terms.

I use essential session cookies required for authentication (Supabase SSR auth cookies). If you accept analytics, Google Tag Manager loads Google Analytics, which sets cookies such as _ga to measure usage of the public pages, and Microsoft Clarity sets its own cookies (such as _clck and _clsk) to record sessions on the public pages. These are only set after you accept, and you can withdraw them with the “Cookie settings” link in the site footer. I do not use advertising or cross-site tracking cookies, and I do not run advertising or remarketing pixels.

I share data only with the providers listed above, or when required by law. I do not share your drafts or analyses with other users; access is enforced per-account by database row-level security policies.

I keep your data while your account exists. You can delete projects (which cascades to analyses, opportunities, clusters, briefs, outlines) and drafts from the dashboard at any time. Account deletion: contact support@yogawritecode.com [mailbox to be provisioned]; I will delete or anonymize your personal data within a reasonable period. Specific backup retention windows: [TO BE CONFIRMED].

I use industry-standard measures: HTTPS everywhere, hashed passwords, server-side session cookies, row-level security in the database, and server-only secret storage. No method of transmission or storage is 100% secure.

My providers process data in regions including the United States and Europe. By using the service from other countries, you consent to these transfers as necessary to provide the service.

Depending on your location (e.g., GDPR, CCPA), you may have rights to access, correct, export, or delete your personal data. To exercise them, email support@yogawritecode.com. I will respond within a reasonable timeframe. You may also withdraw analytics consent at any time through the “Cookie settings” link in the site footer. Including this section does not by itself constitute a claim of compliance with any specific regime.

The service is not directed to children under 16. I do not knowingly collect their data.

I may update this policy. The "Last updated" date will change, and material changes will be announced in the product.

support@yogawritecode.com [mailbox to be provisioned].