Yellow Orange (“we”, “our”, “us”) values the protection of personal data. This privacy policy explains what personal data we collect and process through our online platforms (including AI chat functionalities, document storage and search), for what purposes we do so, and what rights you have.
Scope
This privacy policy applies to all users of Yellow Orange’s platforms, including but not limited to administrators, project members, and external participants who have access to a Yellow Orange environment.
Data Controller
Yellow Orange B.V.
Chamber of Commerce: 20119253
Email: hello@yelloworange.nl
What data do we process?
When using our platforms, we may process the following personal data:
- Account details: name, email address, organization, user role, login credentials.
- User activity: logs of login attempts, viewed documents, questions asked to the AI chat, and other interactions within the platform.
- Document details: files and text that you upload or share. We assume you will not share personal data in documents unless necessary.
- Technical data: IP address, browser and device information, usage timestamps.
Purposes and legal bases
We process the above data only for the following purposes:
- Platform functionality: enabling uploading, searching and analyzing documents with AI functionalities.
- Authentication and security: managing user roles and access rights, monitoring to prevent abuse.
- Maintenance and improvement: analyzing log data to improve stability and performance.
- Contractual obligations: performing agreements with your organization.
- Legal obligations: compliance with legal retention requirements and requests from competent authorities.
Processing is based on: Performance of a contract (Art. 6(1)(b) GDPR); Legal obligations (Art. 6(1)(c) GDPR); Legitimate interest (Art. 6(1)(f) GDPR) for improving and securing our services.
Sharing data with third parties
We do not share personal data with third parties, except where necessary to: host and technically operate the platform (e.g., cloud and security providers); fulfill legal obligations; perform support services under data processing agreements. We do not sell or trade data to third parties.
International data transfers
We aim to store and process data only within the European Economic Area (EEA). If a transfer outside the EEA is necessary, we will implement appropriate safeguards (such as Standard Contractual Clauses).
Retention periods
We retain personal data no longer than necessary:
- Account data: as long as you are an active user and up to 6 months after account termination.
- Log files: up to 12 months unless legally required otherwise.
- Uploaded documents: as long as users make them available or until the project is removed.
Your rights
You have the right to access, correct, or delete your data; object to or request restriction of processing; data portability; and to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Contact us at hello@yelloworange.nl for any requests.
Security measures
We take appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest.
- Granular access control with different user roles.
- Regular security audits and updates.
AI functionality and data usage
Our AI functionality analyzes documents you or your organization upload. Generated answers are not used to train external models.
Changes
We may update this privacy policy from time to time. We encourage users to review this policy regularly. Significant changes will be clearly communicated via the platform or by email.
Questions?
Please contact us at hello@yelloworange.nl or visit www.yelloworange.nl.