Privacy Policy

YouRL ("we", "us", or "our") operates the YouRL mobile application and web platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2.1 Information You Provide

• Account information (name, email address, phone number)
• Business profile data (store name, address, operating hours, service menus)
• Content you create or upload (photos, videos, captions)
• Customer communication data (chat messages, inquiry responses)

2.2 Information from Third-Party Services

When you connect your social media accounts, we may collect:

• Instagram / Facebook: Business account profile information (username, profile picture, follower count), content publishing status, and business insights (reach, impressions, engagement metrics)
• Google Business Profile: Business listing information, reviews, and map data
• TikTok: Open ID, display name, and username of your authorized account, along with the publishing status of videos you choose to upload through the Service
• YouTube: Channel ID, channel title, and the upload status of videos you choose to publish to your channel
• Pinterest: Account username, account type, and the publishing status of pins you choose to create through the Service

We only access data that you explicitly authorize through the OAuth consent flow. We do not access your personal Facebook profile or private messages.

For TikTok, YouTube, and Pinterest, we access only the scopes required to publish the content you create in the Service. We do not read your private videos, watch history, or personal activity on these platforms.

2.3 Automatically Collected Information

• Device information (device type, operating system)
• Usage data (features used, interaction patterns)
• Log data (access times, error logs)

• To provide and maintain the Service, including booking management, content publishing, and customer communication
• To publish content to your connected social media accounts on your behalf
• To display business analytics and insights from your connected accounts
• To send appointment reminders and notifications to your customers
• To improve and personalize the Service
• To provide AI-powered features (caption generation, translation, scheduling recommendations)
• To process payments and manage subscriptions
• To comply with legal obligations

We do not sell your personal information. We may share your data with:

• Service providers: Cloud hosting (Vercel, Supabase), payment processors (Stripe, TossPayments), AI services (Google Gemini, Anthropic Claude) — only as necessary to provide the Service
• Social media platforms: When you use our content publishing feature, we send your content to the platforms you have connected (Instagram, Facebook, TikTok, YouTube, Pinterest, Google Business Profile)
• Legal requirements: When required by law, regulation, or legal process

We do not share data obtained from Instagram, Facebook, TikTok, YouTube, or Pinterest with any third parties beyond what is necessary to provide the Service features you use. Content sent to each platform is delivered only to the destination you connected and authorized.

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Social media data (insights, publishing history) is retained only while your social media account is connected. This applies to Instagram, Facebook, TikTok, YouTube, and Pinterest alike. Upon disconnection, the stored access tokens and connection data for that platform are deleted within 7 days.

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security policies on all database tables
• Secure token storage for social media connections
• Regular security audits and monitoring
• Access controls limiting data access to authorized personnel only

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Data portability: Request your data in a machine-readable format
• Withdraw consent: Disconnect social media accounts or revoke permissions at any time through the app settings
• Object: Object to processing of your personal data for certain purposes

To exercise any of these rights, please contact us at privacy@yrlapp.com. We will respond within 30 days.

You can request deletion of your data through the following methods:

• In-app: Go to My > Settings > Delete Account
• Email: Send a request to privacy@yrlapp.com

Upon receiving a deletion request, we will delete all your personal data, business data, connected social media tokens, and associated content within 30 days.

If you remove our app from your Facebook or Instagram settings, Meta sends us a data deletion request automatically. We verify the request, then delete the stored connection and access tokens for that account, and return a confirmation code you can use to check the status.

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information.

Your information may be transferred to and processed in countries other than your own, including South Korea and the United States. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@yrlapp.com
• Website: https://yrlapp.com