Skip to main content
Legal · Privacy

Privacy Policy

This policy explains what information Yusr processes, why we process it, and the choices available to workspace owners, team members, and people who communicate through a Yusr-connected channel.

Effective: October 13, 2026
01

Scope and roles

Yusr provides AI agents, a unified inbox, CRM, knowledge, inventory, analytics, and channel integrations for businesses. For workspace account and service data, Yusr determines how that information is processed. For customer-conversation data a business uploads or receives through its connected channels, that business decides why the data is processed and Yusr processes it to provide the service.

This policy applies to yusr-ai.com, Yusr workspaces, the public API, and related support communications. A business can connect Yusr to WhatsApp (by QR scan or through the official WhatsApp Business Platform), Instagram, Facebook Messenger, Telegram, LINE, Viber, SMS through its own Twilio account, its own email mailbox, a website chat window, and its own systems through the Yusr API. Each of these platforms also applies its own privacy terms.

02

Information we collect

Account and workspace information
Name, email address, authentication identifiers, workspace name, role, preferences, and subscription status.
Customer and conversation information
Names, phone numbers, usernames, messages, attachments, voice-note transcripts, lead fields, notes, tags, and conversation history received through connected channels or added by workspace users.
Agent and business content
Agent instructions, scenarios, safety rules, knowledge files, inventory records, media, templates, and integration configuration, plus WhatsApp chat exports an owner uploads to build an agent (their text is deleted after 7 days).
Channel and integration information
Provider account identifiers, connection status, encrypted provider credentials, webhook endpoints, API-token prefixes, and delivery records. When a workspace member connects an AI assistant such as ChatGPT or Claude to Yusr, that assistant reads only what the member may see, with customer phone numbers and emails masked by default.
Usage and diagnostic information
Session counts, feature activity, timestamps, device and request information, error reports, security events, and service logs. Our public website counts visits with Umami, an analytics tool we run ourselves that sets no cookies.
Billing information
Plan, billing cycle, and manual activation status. Billing is currently handled manually, and Yusr does not collect or store payment-card numbers.
03

How we use information

Provide the service
Authenticate users, route messages, generate agent replies, retrieve knowledge, transcribe voice notes, synthesize voice replies, manage leads, and deliver integrations.
Operate and secure Yusr
Monitor availability, diagnose errors, prevent abuse, enforce tenant isolation, rate-limit requests, and protect accounts and connected channels.
Manage subscriptions
Maintain plan limits, record usage, provide billing support, and apply plan changes requested directly by workspace owners.
Communicate with you
Respond to support requests, provide service notices, and send preference-controlled product or assignment notifications.
Improve the product
Understand aggregate feature use, test reliability, and improve workflows and model instructions. We do not sell personal information or use customer conversations for third-party advertising.
04

Service providers and connected platforms

Yusr uses specialist providers to operate the service. Depending on the features a workspace enables, information may be processed by:

SupabaseAuthentication, PostgreSQL database, storage, and realtime updates
Google CloudGemini AI replies, embeddings, voice-note transcription, and web search; text-to-speech
AnthropicClaude AI replies
OpenAIAI replies and voice-note transcription, when selected for a feature
Meta, Telegram, LINE, Viber, and TwilioMessage transport for the channels a workspace connects
HetznerApplication hosting
UpstashSecure asynchronous message and webhook delivery queues
SentryApplication error monitoring and diagnostics

Yusr may also disclose information when required by law, to protect rights and safety, or as part of a merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality protections.

05

Retention and deletion

We retain account and workspace information while the workspace is active and for a reasonable period afterward when needed for security, billing, dispute resolution, backup integrity, or legal obligations. Conversation records, contacts, files, and integration data remain available according to workspace use and product controls.

Workspace owners can remove many records directly in Yusr and may request workspace deletion through support@yusr-ai.com. Some records may remain in restricted backups until their normal rotation completes.

Step-by-step instructions for deleting your data, including data received through Facebook, Instagram, and WhatsApp, are on our data deletion page.

06

Security and international processing

Yusr uses tenant isolation, access controls, encrypted transport, encrypted provider credentials, signed webhooks, scoped API keys, and operational monitoring to protect information. No online service can guarantee absolute security, so workspace owners should protect login credentials, rotate exposed keys, and grant only necessary team access.

Yusr and its providers may process information in countries other than the one where a user or customer is located. Those locations may have different data-protection laws. We use provider and contractual safeguards appropriate to the service and data involved.

07

Your choices and rights

Account information
Workspace users can update profile information and communication preferences from their account.
Workspace data
Authorized users can access, correct, export, archive, or delete supported records using product controls and the public API.
Channel data
Disconnecting a channel stops new message ingestion from that connection. The connected platform may retain its own copy.
Privacy requests
Depending on applicable law, a person may request access, correction, deletion, restriction, or a copy of personal information. We may need to verify identity and workspace authority.

If a request concerns a business’s customer conversations, contact that business first. Yusr will assist workspace owners with verified requests where appropriate.

08

Children

Yusr is a business service and is not directed to children. Do not use Yusr to intentionally collect children’s personal information unless the workspace owner has a lawful basis, provides required notices, and configures appropriate safeguards.

09

Changes to this policy

We may update this policy as the service or legal requirements change. We will post the revised policy here, update the effective date, and provide an additional notice when a change materially affects how information is processed.

10

Get in touch

Questions, privacy requests, and account-data requests can be sent to:

See also the Terms of Service.