Skip to content
yves
Legal

Privacy notice

Last updated 20 August 2026

How Yves Intelligence handles personal data across this website, the anonymous portal and the console. Written to be read in ten minutes.

This notice covers Yves as a company and as a data processor. Each deployment carries its own notice, written for that institution and reviewed by its own legal contact, and that one governs the portal your people write into.

01Who we are

Yves Intelligence operates a decision intelligence platform used by institutions on four continents to collect and analyse anonymous feedback at scale.

For this website we are the data controller. For a deployment, the institution is the controller and we act as processor, on the terms set out in the data processing agreement.

02The anonymous portal collects no identity

The portal runs account-free, address-free and tracker-free. Fonts are self-hosted, so every request a visitor makes reaches your domain and stops there.

It maintains a rotating, salted cryptographic device hash. This token resolves to no individual identity and is excluded from console displays. It exists strictly so automated bursts from a single device remain distinguishable from authentic distributed consensus.

03What people write is what we hold

The message body is stored verbatim alongside its translation and derived classification metadata. Where a respondent includes personal identifiers within free-text input, the enrichment pipeline flags the entry, suppresses it from aggregate console summaries, and restricts raw access to authorized operators with a documented operational purpose.

Institutions in regulated sectors run additional rules. In healthcare deployments the form asks for medical detail to stay out and the on-device coach steers people toward the site and the date, because health information is a special category of personal data under GDPR and its equivalents worldwide.

04This website

  • This site runs free of advertising technology and cross-site tracking of every kind.
  • Aggregate, tracker-free analytics tell us which pages get read. They stay on this domain and resolve to nobody.
  • An email address you give us for a trial, a demo or the Wednesday note is used for exactly that, and you can remove it in one click.
  • Images and video on this marketing site load from their providers' content delivery networks, which carries your address to those providers as a technical necessity of delivering the file. The portal and the console load every asset from your own domain.

05Where data goes

Message text reaches our language model provider for translation and classification under a contract excluding it from training. Everything else stays inside the platform boundary, permanently.

On the shared backend, data is held in managed EU infrastructure. On isolated deployments it is held in the region the institution chooses. On Dedicated deployments it can be held on the institution's own infrastructure with their own model keys.

06How long we keep it

Retention is configured per deployment and enforced by scheduled jobs. The default keeps every original message for as long as you want it, since the original text is the one irreplaceable asset in the system, and ages out derived material on a shorter schedule.

Quarantined content stays in your corpus, readable and reversible. Permanent removal takes an administrator, a typed confirmation, and an audit entry naming the account that performed it.

07Your rights

Under GDPR and the equivalent regime in your jurisdiction you may ask what personal data we hold about you, have it corrected, have it erased, and complain to your supervisory authority.

One consequence of the design deserves stating plainly: a message sent through the anonymous portal stays anonymous permanently, including from us, which is what makes the guarantee worth having.

08Contact

Write to privacy@yves.africa. We answer inside one working day, every time.