Privacy Policy
Last updated: [DATE OF PUBLISHING]
This policy explains what personal data [ENTITY: UXVision Ltd, company no. XXXXXXXXX] ("we", "us") collects when you visit yesbossagents.com, buy the YES BOSS Agent Kit, or use your account, and what we do with it.
Contact for anything in this policy: [PRIVACY EMAIL], [POSTAL ADDRESS].
1. The short version
- The kit runs on your own computer and your own Claude account. The kit never sends anything to us. Your business notes stay in a folder on your computer.
- We collect what we need to sell you the kit, give you access, support you and improve the site.
- Payments are handled by Dodo Payments. We never see or store your full card number.
- We use analytics and advertising cookies only if you agree to them.
- We do not sell your personal data.
2. What we collect
| What | When | Why |
|---|---|---|
| Email address, name (if given) | When you buy or sign in | To create your account, deliver the kit, send receipts and important notices |
| Order details: product, license tier, price, order id, date, refund status | When you buy | To manage your license, refunds and support |
| Country and billing details | At checkout, collected by Dodo Payments | Tax and fraud checks (Dodo Payments acts as the merchant of record) |
| Download log: account, kit version, time | When you download the kit | To manage your license and help with support |
| Session booking details and your answers to the pre-session form | Only if you bought the Kit + Session tier | To prepare and hold your session |
| Refund request reason (optional) | If you ask for a refund | To process the refund and improve the product |
| Messages you send us | When you contact us | To answer you |
| Device and usage data: pages viewed, clicks, approximate location from IP, browser, referring site, campaign tags | When you browse, with your consent where required | To understand how the site is used and measure our ads |
| A price test cookie | On your first visit | We sometimes test two launch prices. A cookie keeps the price you see the same for 90 days |
We do not collect anything from inside the kit or your Claude account.
3. Cookies and similar tools
- Necessary: sign-in, security, the price test cookie and remembering your cookie choice. These are always on.
- Analytics (Google Analytics 4): how visitors use the site. Only with your consent.
- Advertising (Meta Pixel): to measure and improve our ads on Facebook and Instagram. Only with your consent.
You can change your choice at any time from the "Cookie settings" link in the footer.
4. Who we share data with
We share data only with providers that help us run the business, under contracts that require them to protect it:
- Dodo Payments: checkout, payment, tax and refunds (merchant of record).
- Our website and database host: [Lovable / Supabase, confirm].
- Our email provider: [confirm] for sign-in links and notices.
- Google (Analytics) and Meta (Pixel and Conversions API): only with your consent. When you buy, we may send Meta and Google a purchase event with a hashed (scrambled) email so we can measure our ads.
- Booking tool: [SushiLab booking page / calendar, confirm], only for session buyers.
- Authorities, when the law requires it.
Some of these providers are outside your country, including in the United States. Where the law requires it, we rely on approved safeguards such as standard contractual clauses.
5. How long we keep it
- Account and order records: as long as your account is open, then [7] years for tax and accounting.
- Download logs: [3] years.
- Analytics data: up to 14 months.
- Messages: up to [3] years after the conversation ends.
6. Your rights
Depending on where you live (including Israel, the EU, the UK and US states such as California), you can ask to see, correct, delete or export your data, object to or limit how we use it, and withdraw consent at any time. Write to [PRIVACY EMAIL]. We answer within 30 days. You can also complain to your local data protection authority (in Israel, the Privacy Protection Authority).
7. Security
Sign-in uses one-time links, the kit download link expires after 5 minutes, and access to our systems is limited to the people who need it. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
8. Children
The kit is for businesses and adults. We do not knowingly collect data from anyone under 18.
9. Changes
If we change this policy in a way that matters, we will update the date above and, for significant changes, email account holders.