Ayye
Open Ayye →

Privacy Policy

Last Updated: August 2026

This Privacy Policy describes how Ayye, LLC (“we”, “us”, or “our”), a California limited liability company registered in the State of California, collects, uses, and protects your information when you use Ayye (the “Service”), a proof-of-agreement platform for capturing, tracking, and storing decisions and agreements. By using Ayye, you agree to the collection and use of information in accordance with this policy.

For questions about this Privacy Policy or your personal data, contact us at team@getayye.com.

1. Information We Collect

Account Information

When you create an Ayye account, we collect:

  • Name and email address (via Clerk with Google, GitHub, Apple, or email)
  • Profile photo (optional)
  • Username and display name (optional)
  • Phone number (when using 2-factor authentication for signing)

Decision and Agreement Data

When you use Ayye to create, track, or sign decisions, we collect:

  • Quick Ayye and Ayye Doc content you create
  • Responses and signatures from people you share decisions with
  • Attached documents and files you upload
  • Timestamps and verification data for completed decisions
  • Visibility settings for each decision — whether it is public (viewable by anyone with the link, no login required) or private (requires login to view or respond)
  • Group and shared template data associated with any Groups you create or join, and any shared templates you use (available on Growth and Studio plans)

Usage Information

We automatically collect:

  • Device information and browser type
  • IP address and general location
  • Pages visited and features used within Ayye
  • Error logs and performance data

Billing Information

If you subscribe to a paid plan or purchase a decision pack, we collect:

  • Payment details processed by our third-party payment processor, including payment card or bank information, billing address, and transaction history — we do not store your full payment card number
  • Plan and usage data, including your subscription tier, seat count, and decision-pack usage, including for team and studio accounts

2. How We Use Your Information

We use your information to:

  • Provide the Service: Create and manage your account, process decisions, and enable sharing
  • Verify Identity: Use phone verification codes to authenticate signers
  • AI Features: Analyze documents and provide AI-powered summaries, risk assessments, and insights when you request them
  • Send Notifications: Deliver decision reminders, response notifications, and important account updates
  • Improve Ayye: Analyze usage patterns to enhance features and fix issues
  • Ensure Security: Detect fraud, abuse, and unauthorized access
  • Process Payments: Bill your subscription or decision-pack purchases through our payment processor
  • Enable Collaboration: Support Groups, shared templates, and multi-party (custom) Ayyes so teams can work together
  • Provide Exports: Generate PDF and CSV exports of your decision records when you request them

3. Data Security

We take the security of your data seriously:

  • Encryption: Sensitive data is encrypted using AES-256-GCM encryption at rest
  • Secure Transmission: All data is transmitted over HTTPS/TLS
  • Access Controls: Only authorized personnel can access user data
  • Audit Logging: We maintain logs of access to sensitive data
  • Cryptographic Verification: Decision receipts are cryptographically signed for authenticity

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Third parties that help us operate Ayye (hosting, authentication, SMS delivery)
  • Cloud Infrastructure: Google Cloud Platform, which stores and processes your data on our behalf in the United States
  • Payment Processors: Third parties that handle billing for paid plans and decision packs; we do not share your full payment card details with anyone other than our payment processor
  • AI Services: When you use AI features, document content is processed by OpenAI to generate insights
  • Recipients You Choose: People you share Quick Ayyes or Ayye Docs with can see the decision content
  • Legal Requirements: When required by law, court order, or to protect rights and safety

5. Your Rights and Choices

You have control over your data:

  • Access: View your profile and decision history anytime in the app
  • Correction: Update your profile information in Settings
  • Export: Download PDF or CSV copies of your decision records directly from the app, or request a full export of your account data by contacting us
  • Deletion: Delete your account and all associated data from Settings at any time
  • Consent Withdrawal: You can opt out of the service at any time

6. Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law. Retention periods vary by category of information:

  • Account Information: retained while your account is active, and for up to 30 days after you delete your account
  • Decision and Agreement Data: retained for the life of your account and, in most cases, beyond it — Ayye’s decision and signature records are designed to serve as a durable, verifiable proof of agreement that you or the other party may need to reference indefinitely. You may request deletion of specific records subject to the limitations described in Section 5
  • Usage Information: retained for up to 24 months for security, troubleshooting, and service-improvement purposes
  • Billing Information: retained for as long as required by applicable tax, accounting, and financial recordkeeping laws (generally up to 7 years)

When you delete your account, we delete or de-identify your personal data within 30 days, except where retention is required to comply with the law, resolve disputes, enforce our agreements, or preserve the evidentiary integrity of decision records that you or others may rely on.

7. Cookies and Tracking

Ayye uses essential cookies to maintain your login session and remember your preferences. We do not use third-party advertising cookies or sell data to advertisers. If your browser sends an opt-out preference signal, such as Global Privacy Control (GPC), we will honor it as a valid request to opt out of any sale or sharing of your personal information, as described in Section 9.

8. Children’s Privacy

Ayye is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

For decisions involving minors (ages 13-17), Ayye provides guardian consent features that require a parent or guardian to acknowledge and approve the decision.

9. California Privacy Rights (CCPA/CPRA)

This section applies to California residents and supplements the rest of this Privacy Policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), and its implementing regulations issued by the California Privacy Protection Agency (“CPPA”).

Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information, as defined by Cal. Civ. Code § 1798.140:

  • Identifiers (name, email address, username, phone number, IP address)
  • Customer records information (billing details, payment information)
  • Commercial information (subscription and purchase history)
  • Internet or network activity (pages visited, features used, device and browser data)
  • Audio, visual, or similar information (profile photos you choose to upload)
  • Geolocation data (general, IP-based location only — we do not collect precise geolocation)
  • Inferences drawn from the above to operate core features (for example, showing you relevant decisions)

We do not collect government identification numbers, Social Security numbers, precise geolocation, biometric information used to identify you, or health information as part of our regular data practices.

Sources of Personal Information

We collect personal information directly from you, automatically through your use of the Service, and from service providers who help us operate Ayye (such as our authentication and payment providers).

Purposes for Collection and Use

See Section 2 (“How We Use Your Information”) above for the business and commercial purposes for which we collect and use each category of personal information.

Categories of Third Parties We Disclose Personal Information To

See Section 4 (“Data Sharing”) above. In the preceding 12 months, we disclosed personal information to the following categories of third parties for business purposes: service providers (cloud infrastructure, authentication, SMS delivery, payment processing), AI service providers (for AI-powered features you choose to use), recipients you choose to share decisions with, and government or law enforcement entities when required by law.

Retention

See Section 6 (“Data Retention”) above for the retention period, or the criteria used to determine the retention period, for each category of personal information.

Sale and Sharing of Personal Information

We do not sell personal information, and we do not “share” personal information (as CPRA defines that term, which includes disclosures for cross-context behavioral advertising) for any purpose. Because we do not sell or share personal information, no “Do Not Sell or Share My Personal Information” opt-out link is required. If you have a browser-based opt-out preference signal enabled, such as Global Privacy Control, we will honor it as a valid opt-out request in the event our practices change.

Sensitive Personal Information

We do not collect “sensitive personal information” as defined by CPRA (such as government identification numbers, precise geolocation, or biometric information used to identify you), except where you voluntarily choose to include such information in the content of a decision or document you create using Ayye. Any sensitive personal information you choose to include is used only to provide the Service you requested, and is not used or disclosed for purposes that would trigger a “Limit the Use of My Sensitive Personal Information” right. Phone numbers we collect for two-factor authentication are used solely for identity verification and are not treated as sensitive personal information under CPRA. If our practices change, we will update this policy and provide any required notice and opt-out mechanism.

Your California Privacy Rights

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, and (if applicable) sell or share
  • Delete personal information we have collected from you, subject to certain exceptions
  • Correct inaccurate personal information we maintain about you
  • Opt out of the sale or sharing of your personal information (we do not sell or share personal information)
  • Limit the use and disclosure of sensitive personal information (we do not use sensitive personal information beyond what is necessary to provide the Service)
  • Non-discrimination for exercising any of these rights
  • Appeal a denial of a rights request, as described below

Minors

We do not sell or share the personal information of any consumer, including consumers we know to be under 16 years old. See Section 8 (“Children’s Privacy”) above for our guardian consent process for users ages 13-17.

How to Exercise Your Rights

You may submit a request to know, delete, or correct your personal information by:

  • Emailing us at team@getayye.com, or
  • Using the data-management tools available in your account Settings

We will verify your identity before fulfilling a request, using information such as your account credentials and, where necessary, additional verification steps proportionate to the sensitivity of the data requested. You may designate an authorized agent to submit a request on your behalf; we may require proof of the agent’s authorization and may still separately verify your identity.

We will respond within 45 days of receiving a verifiable request. If we need more time, we will notify you and may extend our response period by an additional 45 days (90 days total), as permitted by law.

Right to Appeal

If we deny your request in whole or in part, you may appeal our decision by replying to our denial email or contacting us at team@getayye.com with “Privacy Appeal” in the subject line. We will respond to your appeal within 45 days, which we may extend by an additional 45 days when reasonably necessary.

Shine the Light Disclosure

California Civil Code Section 1798.83 allows California residents to request information about our disclosure of personal information to third parties for their own direct marketing purposes. We do not share personal information with third parties for their own direct marketing purposes, so there is no information to disclose under this law. If you have questions, contact us at team@getayye.com.

10. Additional California Requirements

As a California-registered limited liability company, Ayye, LLC is also subject to the following California-specific requirements, in addition to the CCPA/CPRA rights described in Section 9.

Age-Appropriate Design Code Act

California’s Age-Appropriate Design Code Act (Cal. Civ. Code § 1798.99.28 et seq.) establishes design and privacy standards for online products likely to be accessed by children. Portions of this law remain subject to ongoing litigation (NetChoice v. Bonta) and are not currently in effect, while other provisions have taken effect. To the extent applicable, we design Ayye’s guardian consent features (see Section 8) with the best interests of minor users in mind, and we will continue to monitor this law and update our practices as its requirements are finalized.

Data Broker Registration

Under the Delete Act (Cal. Civ. Code § 1798.99.80 et seq.), businesses that meet the statutory definition of a “data broker” must register annually with the California Privacy Protection Agency. Because we do not sell personal information to third parties, Ayye, LLC does not meet the definition of a data broker and is not required to register.

Health-Related Information

If you use Ayye to record a decision that includes health-related information, that information is provided voluntarily by you as part of your decision content. We do not solicit and are not designed to process protected health information, and we handle any such information you choose to include with the same security safeguards described in Section 3.

Policy Review Cadence

We review and, as needed, update this Privacy Policy at least once every 12 months to reflect changes in our practices and in applicable law. The date at the top of this policy reflects the most recent update.

11. International Users

Ayye is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States. By using Ayye, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending you an email. Your continued use of Ayye after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

Ayye, LLC
A California Limited Liability Company
Email: team@getayye.com