Privacy policy.
// last updated June 2026
This policy explains what personal data Ybor Technology LLC ("Ybor", "we") collects, how we use it, and the choices you have. It covers the marketing site at ybor.ai and the people who contact us, subscribe, or evaluate the platform. The way the platform handles your production data is governed separately, below and in your master agreement.
//The short version
The platform runs in your cloud accounts. We do not store your application data, your secrets, or your source code on Ybor-controlled infrastructure. On the marketing side we collect only what we need to respond to you and run the site, and we don't sell personal data or share it for third-party advertising.
//What we collect
- Contact details you give us. When you fill in a form, request a demo, ask for the SOC 2 report, or email us, we collect your name, work email, company, role, and whatever you put in the message.
- Newsletter email. If you subscribe, we keep your email address until you unsubscribe.
- Site analytics. Aggregate, privacy-respecting usage data: pages viewed, referrer, approximate region. We do not run third-party advertising trackers on this site.
- Platform metadata. For customers, the control plane processes operational metadata (cluster status, deploy timestamps, object-model state) as described on the security page.
//What we never collect
We do not collect or store your application data, customer secrets, source code, or business records. Those stay in your cloud accounts. The control plane manages platform state, not your business state.
//How we use it
- To respond to your request and route you to the right team.
- To send the newsletter you asked for, and product or release updates relevant to an active evaluation.
- To operate, secure, and improve the site and the platform.
- To meet legal, audit, and SOC 2 examination obligations.
We rely on your consent for marketing email, and on our legitimate interest in running the business for the rest. You can withdraw consent at any time.
//Sharing and subprocessors
We share personal data only with vendors that help us run the business (for example, our CRM, email delivery, analytics, and compliance-monitoring providers) under contracts that limit them to processing on our behalf. We publish our subprocessor list and controls through the Trust Center. We do not sell personal data.
//Where data lives and how long we keep it
Marketing data is processed in the United States. We keep contact records for as long as we have a relationship with you or your company, and newsletter data until you unsubscribe. Platform data retention is set per customer and documented in your agreement.
//Your choices
- Unsubscribe from any email in one click.
- Ask us to access, correct, or delete your personal data.
- Object to processing based on legitimate interest.
Email privacy@ybor.ai and we'll act within the timeframes the law requires.
//Security
Ybor's controls are covered by a SOC 2 Type 2 report and monitored continuously through Secureframe. Data is encrypted in transit and at rest, access is least-privilege, and our practices are evidenced in the Trust Center.
//Changes
We update this policy as the product and the law evolve. Material changes will be posted here with a new "last updated" date.
//Contact
Questions about privacy: privacy@ybor.ai. Security disclosures: security@ybor.ai. Ybor Technology LLC, United States.