Privacy Notice

Who is responsible

Caner Altinbasak is the controller and operates YourView as a sole trader from England. The beta is offered only in the United Kingdom.

Email privacy questions or rights requests to [email protected]. For general service help, email [email protected].

Who and what this notice covers

This notice covers information about:

• account owners, including their name, email address, password hash, verification status, sessions, account emails and usage records;
• feedback requests, including the public subject name, photo, introduction and questions, and the owner's private creation brief, drafts and self-assessment;
• responders, including their submitted answers and the safety and insight records produced from them;
• people mentioned in a request or answer, who may not have supplied the information themselves; and
• security, abuse-prevention, email-delivery and privacy-minimised operational records.

Do not use YourView if you are under 18. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.

Why we use information and our legal bases

• Provide the service and manage accounts. We use owner account details, private request inputs, public request content, answers and derived reports to take steps at the owner's request and perform our Terms with the owner.
• Accept and privately analyse feedback. We rely on our legitimate interests in providing the feedback experience the responder expects, protecting responders from a raw-comment feed, and giving owners useful private patterns. We minimise collection, warn against identifying details, and balance these interests against the responder's and mentioned person's rights.
• Keep the service safe and reliable. We rely on legitimate interests to verify requests, limit bots and floods, classify unsafe submissions, diagnose failures, secure accounts and keep bounded usage records.
• Meet legal obligations and protect legal rights. We may use the minimum necessary information where the law requires it or to establish, exercise or defend legal claims.

We do not use consent as a label where withdrawal is not the real control. You may object to processing based on legitimate interests; see “Your rights” below.

What anonymous means here

Feedback is anonymous to the request owner. YourView does not ask responders to create an account or provide a name, and the owner does not receive a raw comment feed. The owner sees only private, structured insights produced from eligible responses.

This is not absolute anonymity. A responder can identify themselves or someone else in an answer. Cloudflare processes technical request and bot signals. YourView stores short-lived, secret-keyed abuse identifiers, but not raw IP addresses. Providers and legal obligations may also require limited processing. Avoid names, secrets and uniquely identifying details in written answers.

How artificial intelligence is used

YourView sends limited owner and responder inputs to OpenAI to help draft questionnaires, classify submission safety, generate private insights, rewrite text where identification risk is detected, and compare an owner's self-assessment with feedback patterns. Depending on the task, this may include a private creation brief, self-assessment, public questions or eligible raw answers.

The application asks for structured results and validates them before use. It instructs the model to treat user text as untrusted data and applies name-risk checks, but redaction is imperfect: unusual names, indirect clues and context can remain. AI output can be inaccurate, incomplete or misleading. It is not professional advice, and owners remain responsible for decisions made from feedback.

OpenAI requests use store: false, so they are not stored as Responses application state. Under the currently disclosed default posture, OpenAI's abuse-monitoring logs may retain customer content for up to 30 days. OpenAI documents that it may retain that content longer where required by law or reasonably necessary to protect its services or a third party from harm. Encrypted prompt-cache data may be retained for up to 24 hours. We do not claim that this processing is retention-free.

AI helps moderate and summarise feedback. It does not make a decision with legal or similarly significant effects about any person.

Service providers and international transfers

We use these processors for narrow operational purposes:

• Render for application hosting, workers, database, private image storage, logs and recovery in Frankfurt, Germany;
• Cloudflare and Turnstile for DNS, TLS, proxying, technical request signals and bot verification on a global network;
• Resend for verification and password-reset email and, while legacy invite-only access remains active, requested waitlist, invitation, withdrawal and operator-notification email;
• OpenAI for the AI purposes described above; and
• Sentry for privacy-minimised application errors and reliability signals, using Germany-region projects. Raw feedback, question text and request bodies must not be sent to Sentry.

Some providers or their subprocessors process information outside the UK. Where the UK's restricted-transfer rules apply, we use an applicable UK adequacy regulation or contractual safeguard, such as a UK International Data Transfer Agreement or Addendum, and a transfer assessment where required. Email [email protected] to request current subprocessor or transfer-safeguard information.

How long information is kept

• Accounts and feedback: primary account data, private briefs, published request data, raw answers and generated safety/insight state remain until the owner permanently deletes the account. Removing a request ends public access but is a soft delete, not immediate erasure. Referenced images are removed when replaced or when the account is permanently deleted.
• Retired beta waitlist: when direct account creation replaced invite-only access, we deleted application-held waitlist contacts, invitation records and queued waitlist notifications. We retained only identity-free daily totals that cannot be joined back to a person. Before that cutover, a legacy invite-only or closed deployment keeps an existing contact until confirmed withdrawal, account deletion or the public cutover. Messages already delivered through Resend or to a recipient's mailbox disappear under those providers' retention controls rather than synchronously with the application records.
• Sessions and tokens: sessions remain until expiry, revocation or account deletion. Email-verification tokens expire after one hour; password-reset tokens expire after 30 minutes and are invalidated when used or superseded.
• Abuse and usage controls: secret-keyed actor dimensions rotate every seven days. Rate-limit buckets last only to the end of their configured window and bounded cleanup; account usage records remain until account deletion.
• Hosting and recovery: current Render logs and metrics are available for seven days. Database point-in-time recovery is three days and Render logical exports expire after seven days. We do not make routine local exports; any incident copy is deleted within seven days after the incident closes.
• Email: Resend documents 30-day email-data visibility. A delivered message may remain in the recipient's mail system.
• AI: under the current default posture, OpenAI may retain customer content in abuse-monitoring logs for up to 30 days, with the legal-or-harm exception described above, and encrypted prompt-cache data for up to 24 hours.
• Monitoring: Sentry events are kept for the shortest event-retention period available on the active plan. Render and provider backup copies disappear on their own schedules rather than synchronously with an application deletion.

Cookies and similar technologies

YourView uses strictly necessary account-session storage and Cloudflare/Turnstile technology to authenticate users, preserve security state, prevent abuse and deliver the service. Session storage lasts until its configured expiry, revocation or account deletion; Turnstile and Cloudflare signals last according to the security task and the provider's applicable retention controls.

The beta has no advertising, cross-site tracking, product-analytics script or optional personalisation storage. We therefore do not show a decorative cookie banner. If optional storage is introduced later, it will require a genuine prior choice where the law requires one.

Your rights

Depending on the processing and circumstances, UK data-protection law may give you rights to be informed, access information, correct it, erase it, restrict its use, receive portable information, and object to processing based on legitimate interests. You can also complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

Account owners can use the permanent account-deletion control or contact us. Request removal only disables public access; permanent account deletion removes the primary database graph and referenced images, subject to the recovery and provider periods above.

Because YourView deliberately does not collect a responder identity, we may be unable to find or verify one anonymous responder's answer. We will not ask for excessive identity evidence that defeats the privacy design, and we will never reveal whether a particular person responded or disclose another person's raw answer.

Security, changes and contact

We use access controls, encryption in transit, an authenticated edge, bot and rate-limit controls, and privacy-minimised logging. No online service can promise perfect security or absolute anonymity. Report a suspected security issue to [email protected].

We will update the date above and bring material changes to users' attention before beginning a materially new use of personal information. A new country, age group, processor, tracking technology or purpose requires another review before it starts.