Privacy Policy

1. Introduction

Yumesorai ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This policy applies to visitors worldwide and addresses obligations under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and India’s Digital Personal Data Protection Act (DPDP).

2. Data We Collect

2.1 Information You Provide

• Contact details submitted through forms (name, email, phone, company).
• Messages or inquiries sent via our contact or briefing request forms.
• Information provided when using our interactive calculators or tools.

2.2 Automatically Collected Data

We use Plausible Analytics, a privacy-first analytics platform that does not use cookies and does not collect personal data. Plausible collects:

• Page URL and referrer
• Browser and operating system (aggregated, non-identifying)
• Country of origin (derived from IP, which is discarded)
• Custom events (e.g., form submissions, downloads) without personal identifiers

No IP addresses are stored. No cross-site or cross-device tracking occurs. For details, see Plausible’s Data Policy.

3. How We Use Your Data

• To respond to your inquiries and provide requested services.
• To improve our website, content, and user experience.
• To send communications you have opted into (newsletters, updates).
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

• Consent – where you have given explicit consent (e.g., subscribing to communications).
• Legitimate interest – to improve our services and respond to inquiries.
• Contractual necessity – to fulfill services you have requested.
• Legal obligation – where required by applicable law.

5. Cookies & Tracking

Our website does not use tracking cookies. Plausible Analytics operates without cookies and is fully compliant with GDPR, CCPA, and PECR without requiring cookie consent for analytics.

We may use essential cookies strictly necessary for the functioning of the website (e.g., session management). These do not require consent under applicable privacy laws.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers who assist in operating our website and services (under data processing agreements).
• Legal authorities when required by law or to protect our rights.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact form submissions are retained for up to 24 months unless you request earlier deletion.

8. Your Rights Under GDPR (EEA Residents)

If you are in the European Economic Area, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict processing of your data.
• Data portability – receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time.

To exercise these rights, contact us at privacy@yumesorai.com. We will respond within 30 days.

9. Your Rights Under CCPA (California Residents)

California residents have the right to:

• Know what personal information is collected and how it is used.
• Delete personal information held by us.
• Opt-out of the sale of personal information. We do not sell personal data.
• Non-discrimination for exercising your privacy rights.

To submit a request, email privacy@yumesorai.com.

10. Your Rights Under DPDP (Indian Residents)

Under India’s Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of your personal data and processing activities.
• Correction and erasure of inaccurate or unnecessary data.
• Grievance redressal – file a complaint with our grievance officer.
• Nominate another person to exercise your rights on your behalf.

Our Grievance Officer can be reached at privacy@yumesorai.com.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms, to protect your data in accordance with applicable law.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security assessments.

13. Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

15. Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at: