Privacy Policy

YoloLabel AI ("we", "us", or "our") operates the YoloLabel AI API and dashboard at yololabel.com. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

By using our service you agree to the collection and use of information in accordance with this policy.

Account information. When you register, we collect your email address and a hashed password. If you sign in via Google OAuth, we receive your name and email from Google.

Usage data. We log API requests, job IDs, image dimensions, detection prompts, compute time, and timestamps. We do not store the content of uploaded images beyond the time needed to run inference (images are discarded immediately after processing).

Billing data. Payment information is handled directly by Stripe. We store only your Stripe customer ID and subscription status — no raw card numbers.

Technical data. We collect standard server logs including IP addresses, browser user-agents, and referring URLs for security and debugging.

• To provide and maintain the service
• To enforce usage quotas and billing
• To send transactional emails (account verification, password reset, billing receipts)
• To detect and prevent abuse, fraud, or security incidents
• To improve the service through aggregated, anonymised analytics

We do not sell your personal data to third parties.

Images you submit via the API are processed in memory and are not persisted to disk or stored in any database. They are discarded immediately after the detection job completes. We do not use your images to train models.

Account and usage records are retained for as long as your account is active. Job metadata (job IDs, status, prompts, timestamps) is retained for 90 days for debugging and audit purposes, then automatically deleted.

You may request deletion of your account and all associated data at any time by emailing hello@yololabel.com.

We use browser localStorage to store your JWT access token and refresh token. No third-party tracking cookies are set. We do not use analytics cookies.

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Google OAuth — optional sign-in. Subject to Google's Privacy Policy.
• Vercel — frontend hosting. Subject to Vercel's Privacy Policy.

We use HTTPS for all communications, bcrypt hashing for passwords, and short-lived JWT tokens with refresh token rotation. Despite these measures, no transmission over the internet is 100% secure.

Depending on your jurisdiction you may have the right to access, correct, or delete personal data we hold about you, or to object to or restrict certain processing. To exercise these rights, contact us at hello@yololabel.com.

We may update this policy from time to time. We will notify you of significant changes by email or by a notice on the dashboard. Continued use of the service after changes constitutes acceptance.

Questions about this policy? Email us at hello@yololabel.com.