Privacy Policy
This Privacy Policy explains how Sachin Kumar Ray ("we", "us", "Yoro") handles personal data in connection with the Yoro desktop application and the website yoro.software. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices) Rules, 2011.
1. Who is the Data Fiduciary
Sachin Kumar Ray, House no. 313, Tanda Ujjain, Kashipur, Udham Singh Nagar, Uttarakhand 244713, India, is the Data Fiduciary for the limited personal data we process. For data you send to third-party AI providers using your own keys, that provider is the data recipient and you are their customer.
2. Data that stays on your device
The following is processed entirely on your computer and is never transmitted to us:
- Interview audio from your microphone and system output.
- Transcripts of what was said, stored in a local database on your machine.
- AI answers and your session history.
- Context documents you load: resume, job description, preparation notes.
- API keys you enter, which are stored in your operating system's secure credential store (for example, Windows Credential Manager), never in a plain file and never sent to us.
You control this data. Yoro lets you delete any single answer, an entire session, or wipe everything, and export your history as a file.
3. Personal data we actually process
| Data | When | Why |
|---|---|---|
| Your email address (embedded in your licence key) | When you buy a licence | To issue, verify and support your licence |
| Payment and billing details | At checkout | To take payment and issue a tax invoice |
| Support correspondence | If you contact us | To answer you |
That is the complete list. We do not collect your name (unless you give it in an email), your location, device identifiers, telemetry, usage analytics, or the contents of any interview.
4. How activation works
Yoro is unlocked by an offline, cryptographically-signed licence key. When you paste your key, the app verifies its signature on your own machine. No information is sent to us to activate, and we do not learn when, where or how often you run the app.
5. AI providers you configure
Yoro can send prompts (which may include your transcript, context documents, on-screen text, or screenshots) to an AI provider to generate answers. This only happens for a provider you have configured with your own API key, and:
- The provider, not Yoro, receives and processes that data, under the provider's own privacy policy and your account with them. Yoro is a conduit; we add no relay server and keep no copy on any server of ours.
- Which providers can receive data depends entirely on which keys you enter. If you run a local model instead, nothing leaves your machine at all.
- Cloud transcription of audio is off by default. Audio is transcribed on your device unless you explicitly switch transcription to a cloud provider.
Please read the privacy policy of any AI provider whose key you add.
6. Website, payments and updates
- Website. Standard web-server logs (IP address, browser, pages requested) may be recorded by our hosting provider for security and diagnostics.
- Payments are processed by a third-party payment processor. We do not store your full card details; the processor handles them under its own policy and PCI-DSS obligations.
- Update checks. On launch the app may contact our software-distribution host to check whether a newer signed version exists. This is a version check, not a tracker.
7. Sharing
We do not sell, rent or trade personal data. We share it only with our payment processor to take payment, with professional advisers under confidentiality, and where required by law. The AI providers above receive data because you direct the app to send it to them, not because we share it.
8. International transfers
If you configure an AI provider or use a payment processor located outside India, your data is processed in that provider's jurisdiction, under its safeguards. We do not transfer personal data to any country restricted under the DPDP Act.
9. Retention
- Licence email: for the life of the licence and as long as tax law requires.
- Invoices and payment records: as required by Indian tax law.
- On-device data: for as long as you keep it. You can delete it any time.
- Support emails: until no longer needed to help you.
10. Your rights
Under the DPDP Act you may access, correct or complete, and erase the personal data we hold about you (where we are not required to keep it by law); withdraw consent; nominate another person to exercise your rights; and complain to us and, if unsatisfied, to the Data Protection Board of India. To exercise any right, email support@yoro.software.
11. Grievance Officer
In accordance with the DPDP Act and the IT Rules, 2011:
- Grievance Officer: Sachin Kumar Ray
- Designation: Proprietor and Grievance Officer
- Email: support@yoro.software
- Address: House no. 313, Tanda Ujjain, Kashipur, Udham Singh Nagar, Uttarakhand 244713, India
We acknowledge every complaint within 48 hours of receipt and resolve it within one month, as the Consumer Protection (E-Commerce) Rules, 2020 and the IT Rules, 2011 require.
12. Children
Yoro is intended for adults preparing for interviews and is not directed at children under 18. We do not knowingly process a child's personal data without verifiable parental consent.
13. Security
API keys are stored in your OS secure credential store. We apply reasonable technical and organisational measures to the limited data we hold. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India as the DPDP Act requires.
14. Changes
We may update this policy as the app or the law changes. The effective date above marks the current version, and material changes will be posted at yoro.software.
15. Contact
Sachin Kumar Ray
House no. 313, Tanda Ujjain, Kashipur, Udham Singh Nagar, Uttarakhand 244713, India
support@yoro.software
yoro.software