Back to Home
Terms of Service

Privacy Policy

Effective starting: December 28, 2025

Privacy policy overview

Your privacy matters to us. This privacy policy explains how YUMA ("we", "us", "our") collect, use, share, and protect your information when you use our products, services, websites, or otherwise interact with us. We offer a comprehensive task management and project collaboration platform, including AI-powered features, calendar integrations, and enterprise solutions. We refer to all of these products, together with our other services and websites, as "Services" in this privacy policy. This privacy policy also explains your choices surrounding how we use information about you, which includes how you can object to certain uses of information about you and how you can access and update certain information about you. If you do not agree with this privacy policy, do not access or use our Services or interact with any other aspect of our business. For individuals in the European Economic Area, United Kingdom, or the United States: please refer to the appropriate "Regional disclosures" for additional details that may be relevant to you. This privacy policy is intended to help you understand: • Information we collect • How we use information • How we disclose information • How we store and secure information • How long we keep information • How to access and control your information • Our policy towards children • Regional disclosures • Changes to our privacy policy • How to contact us Privacy policy summary: YUMA collects information directly from you when you provide it to us, automatically when you use our Services, and from other sources including other users of the Services, other services you link to your account, partners, and third-party providers. How we use information depends on which Services you use, how you use them, and any preferences you have communicated to us. We use information for a range of purposes described below, including to provide the Services and personalize your experience, to develop and improve our Services, to communicate with you, to conduct marketing and promotional activities, to provide customer support, to maintain Service safety and security, to protect our interests and rights, with your consent, and to aggregate or de-identify data. We disclose information as described below, including to service providers, partners, providers of third-party services, for compliance with enforcement requests and applicable laws, to enforce our terms and policies and our rights, to affiliated companies or in connection with business transfers, as well as with your consent. Additionally, when you use the Services, we disclose certain information about you to other Service users as described in more detail below. Where applicable under local law, you may have certain rights or choices with respect to your personal information, including to request information about our processing of information, to request a copy of your information, to object to our use of information, to request the deletion or restriction of information, to request a disclosure of information in a portable format, or to opt out of certain disclosures of personal information and targeted advertising. See the "How to access and control your information" section for more detail on specific choices and how to exercise the rights you may have.

Information we collect

We collect information about you when you provide it to us, when you use our Services, and from other sources, as further described below. Information you provide We collect information about you when you input it into the Services or otherwise provide it directly to us. This includes the following categories of information: Account Information and Profile Information: We collect information when you register for an account, create or modify your profile, set preferences, sign up for or make purchases through the Services. For example, you provide contact information (e.g., name or email address) and, in some cases, billing information (e.g., billing address, email address or name), when you register for the Services. You also have options to add a display name, profile photo, job title, timezone preferences, and other details to your profile. We also keep track of your preferences when you select settings within the Services. You may also provide information to us when you integrate or link a third-party service with our Services. For example, if you create an account or log into the Services using your Google credentials, we receive your name and email address as permitted by your Google profile settings in order to authenticate you. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what information may be disclosed to us or shared with our Services. Content you provide through our products: The Services include the YUMA products you use, where we collect and store content that you post, send, receive and share. This includes tasks, documents, comments, attachments, calendar events, and any other content you create within the platform. Content you provide through our websites: The Services also include websites owned or operated by us. We collect content that you submit to these websites. For example, you provide content to us when you provide feedback, directly to us through our Services or otherwise, or when you participate in any interactive features, surveys, contests, promotions, sweepstakes, activities or events. Information you provide through our support channels: The Services also include customer support, where you may submit inquiries or other information regarding a problem you are experiencing with a Service. Whether you designate yourself as a technical contact, open a support ticket, speak to one of our representatives directly or otherwise engage with our support team or support features, you will be asked to provide contact information, a summary or description of the problem you are experiencing, and any other documentation, screenshots or information that would be helpful in resolving the issue. Payment Information: We collect payment and billing information when you register for certain paid Services. For example, we ask you to designate a billing representative, including name and contact information, upon registration. You might also provide payment information, such as payment card details, which we collect via secure payment processing services. Information we collect automatically We automatically collect information about you when you use our Services, including browsing our websites and taking certain actions within the Services. This includes the following categories of information: Your use of the Services: We collect information about your use, operation, and interaction with any of our Services, including when you connect third party services to or use those services with ours. This information includes, for example, the features you use, the actions you perform, the links you click on; the type, size and filenames of attachments you upload to the Services; search terms; how you interact with others on the Services. We also collect information about the teams and people you work with and how you work with them, like who you collaborate with and communicate with most frequently. Device and Connection Information: We collect information about your computer, phone, tablet, or other devices you use to access the Services. This device information includes your connection type and settings when you install, access, update, or use our Services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, and diagnostic and crash data. We use your IP address and/or country preference to approximate your location to provide you with a better Service experience. How much of this information we collect depends on the type and settings of the device you use to access the Services. Cookies and Other Tracking Technologies: YUMA and our third-party partners use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality, to recognize you across different Services and devices, or to demonstrate that certain content was viewed or clicked. Information from other sources We also receive information about you from other Service users, our business and channel partners, and third-party providers, including from social media platforms and public databases. We may combine this information with information we collect through other means described above. Other users of the Services: We receive your email address from other Service users when they provide it in order to invite you to the Services. Similarly, an administrator may provide your contact information when they designate you as the billing or technical contact on your company's account or when they designate you as an administrator. Partners: We work with a global network of partners who provide consulting, implementation, training and other services around our products. Some of these partners also help us to market and promote our Services, generate leads for us, and resell our Services. We receive information about you and your activities on and off the Services from these partners. Third-Party Providers: We may receive information about you from third-party providers of business and security information and from publicly available sources (e.g., social media platforms), including physical mail addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), IP addresses and social media profiles.

How we use information

How we use the information we collect depends on which Services you use, how you use them, and any preferences you have communicated to us. We use information for the following purposes: To provide the Services and personalize your experience: We use information about you to provide the Services to you, including to process transactions, authenticate you when you log in, provide customer support, and operate, maintain, and improve the Services. We may use your email domain to infer your affiliation with a particular organization or industry to personalize the content and experience you receive on our websites. Based on your interactions with different YUMA products, third-party services you link or install, and advertisements, we will personalize your experience and tailor our communications, recommendations and offers to you. To develop and improve our Services: We are always looking for ways to make our Services smarter, faster, secure, integrated, and useful. We use information and collective learnings (including feedback) about how people use our Services to troubleshoot, to identify trends, usage, activity patterns and areas for integration, to improve our Services and to develop new products, features and technologies that benefit our users and the public. For example, to improve the @mention feature, we automatically analyze recent interactions among users and how often they @mention one another to surface the most relevant connections for users. In some cases, we apply these learnings across our Services to improve and develop similar features, to better integrate the Services you use, or to provide you with insights based on how others use our Services. We also test and analyze certain new features with some users before rolling the feature out to all users. To communicate with you about the Services: We use your contact information to send transactional communications via email and within the Services, including confirming your purchases, reminding you of subscription expirations, responding to your comments, questions and requests, and providing customer support. We also provide tailored communications based on your activity and interactions with us, and we may contact you regarding product feedback. If an opt out is available, you will find that option within the communication itself or in your account settings. To conduct marketing and promotional activities: We use information about you and how you use the Services for analysis, research and communications relating to marketing (including targeted advertising of products that may interest you), promotional activities, and business development. We may use your contact information and information about how you use the Services to send promotional communications that may be of specific interest to you, including by email and by displaying YUMA ads on other companies' websites and applications. To provide customer support: We use your information to resolve technical issues you encounter, to respond to your requests for assistance, to analyze crash information, and to repair and improve the Services, including for development, training, or fine-tuning of machine learning and artificial intelligence models. We may also use generative artificial intelligence in responding to your support related requests. To maintain Service safety and security: We use information about you and your use of the Services to verify accounts and activity, to detect, prevent, and respond to potential or actual security incidents, and to monitor and protect against other malicious, deceptive, fraudulent, illegal or inappropriate activity, including violations of Service policies. Detection and response may leverage generative artificial intelligence or machine learning tools. To protect our legitimate business interests and legal rights: Where required by law or where we believe it is necessary to protect our legal rights and interests, or the legal rights or interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business. With your consent: We use information about you where you have given us consent to do so for a specific purpose not listed above. For example, we may publish testimonials or featured customer stories to promote the Services, with your permission. To aggregate or de-identify data: We may aggregate or de-identify your information collected through the Services so it can no longer be re-identified by us or another party. We may use and disclose aggregated or de-identified data for a number of purposes, including to develop and improve our Services and to conduct marketing and promotional activities. To the extent we aggregate any data originally based on personal information, we maintain and use such data in de-identified form and will not attempt to re-identify the data.

How we disclose information

We make collaboration tools, and we want them to work well for you. This means disclosing information through the Services and to certain third parties. We disclose information we collect in the ways discussed below. Disclosing to third parties We disclose information to third parties that help us operate, provide, improve, integrate, customize, support, and market our Services. Service Providers: We work with third-party service providers to provide website and application development, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analysis, marketing, and other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under close instruction from us, including appropriate security and confidentiality procedures designed to protect your information. Partners: We work with a global network of partners who provide consulting, implementation, training and other services around our products. We may disclose your information to these third parties in connection with their services, such as to assist with billing and collections, to provide localized support, and to provide customizations. We may also disclose information to these third parties where you have agreed to that disclosure. Third-Party Services: You, your administrator or other Service users may choose to add new functionality or change the behavior of the Services by installing or connecting third-party services. Doing so may give third-party services access to your account and information about you, like your name and email address. When you intentionally interact with such third-party services, we may disclose certain information to those third parties or receive information from those third parties, consistent with your privacy settings on the third-party service. Links to Third-Party Sites: The Services may include links that direct you to other websites or services whose privacy practices may differ from ours. If you submit information to any of those third-party sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit. With your consent: We may also disclose information about you to third parties when you give us consent to do so. For example, we often display personal testimonials of satisfied customers on our public websites. With your consent, we may post your name alongside the testimonial. Compliance with Enforcement Requests and Applicable Laws; Enforcement of Our Rights: We may disclose information about you to government authorities, law enforcement, or industry peers if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or enforceable governmental request, or legal obligation, (b) enforce the terms of our agreements and our policies, (c) protect the security or integrity of our products and services, (d) protect YUMA, our customers or the public from harm or illegal activities, or (e) respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person. Disclosing to affiliated companies We disclose information we collect to affiliated companies and, in some cases, to prospective affiliates. Affiliated companies are companies owned or operated by us. The protections of this privacy policy apply to the information we disclose in these circumstances. Business Transfers: We may disclose or transfer information we collect under this privacy policy in connection with any merger, sale of company assets, financing, reorganization, dissolution, or acquisition of all or a portion of our business to another company. You will be notified via email and/or a prominent notice on the Services if a transaction takes place, as well as any choices you may have regarding your information. Disclosing to other Service users When you use the Services, we disclose certain information about you to other Service users. Managed accounts and administrators: If you register or access the Services using an email address with a domain that is owned by your employer or organization, or associate that email address with your existing account, and such organization wishes to establish an account or site, certain information about you, including your name, profile picture, contact info, content and past use of your account may become accessible to that organization's administrator and other Service users sharing the same domain. If you are an administrator for a particular site or group of users within the Services, we may disclose your contact information to current or past Service users, for the purpose of facilitating Service-related requests.

How we store and secure information

We use industry standard technical and organizational measures to secure the information we store. Technical safeguards: • Encryption in transit (TLS/HTTPS) for all data transmission • Encryption at rest for sensitive data stored in our databases • Secure password hashing using bcrypt algorithm • Refresh token rotation for enhanced session security • Regular security audits and vulnerability assessments Access controls: • Role-based access control (RBAC) for workspace and space management • Two-factor authentication (2FA) support for enhanced account security • Enterprise SSO/SAML integration for centralized identity management • IP allowlisting for enterprise customers • SCIM provisioning for automated user lifecycle management Infrastructure security: • Secure cloud infrastructure with redundancy • Automated vulnerability scanning • Incident response procedures • Regular backup and disaster recovery testing While we implement safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the Internet, we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care, is absolutely safe from intrusion by others.

How long we keep information

How long we keep information we collect about you depends on the type of information, the purposes for which it was collected, applicable legal or regulatory requirements, and user expectations and preferences. After such time, we will either delete or de-identify your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible. Account information: We retain your account information for as long as your account is active and a reasonable period thereafter in case you decide to re-activate the Services. We also retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our Services. Where we retain information to develop and improve our Services, we take steps to de-identify the information. Information you share on the Services: If your account is deactivated or disabled, some of your information and the content you have provided will remain in order to allow your team members or other users to make full use of the Services. For example, we continue to display messages you sent to the users that received them and continue to display content you provided. Managed accounts: If the Services are made available to you through an organization (e.g., your employer), we retain your information as long as required by the administrator of your account. Marketing information: If you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our Services, such as when you last opened an email from us or ceased using your YUMA account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.

How to access and control your information

Your Rights: Where applicable under local law, you may have certain rights with respect to your personal information. Depending on which jurisdiction you live in, you may have the right to: • Request information about our processing of your information • Request a copy of your personal information • Object to our use of your information (including for marketing purposes) • Request the deletion or restriction of your information • Request your information in a structured, electronic format • Request to correct or update your information • Request that we transfer your information to a third party • Request to opt out of certain disclosures of personal information and targeted advertising Your Choices: You have certain choices available to you when it comes to your information. Below is a summary of those choices, how to exercise them and any limitations: Access and update your information: Our Services give you the ability to access and update certain information about you from within the Service. For example, you can access your profile information from your account and update your profile information within your profile settings. Delete your information, including your account: Our Services give you the ability to delete certain information about you from within the Services. For example, you can remove certain profile information within your profile settings. If you would like to delete your YUMA account, you can do so through account settings. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions, or to comply with our legal obligations. Request that we stop using your information: In some cases, you may ask us to stop accessing, storing, using and otherwise processing your information where you believe we don't have the appropriate rights to do so. For example, if you believe a Services account was created for you without your permission, or you are no longer an active user, you can request that we delete your account as provided in this privacy policy. Where you gave us consent to use your information for a limited purpose, you can contact us to withdraw that consent, but this will not affect any processing that has already taken place at the time. Opt out of communications: You may opt out of receiving promotional communications from us by using the unsubscribe link within each email, updating your email preferences within your Service account settings menu, or by contacting us as provided below to have your contact information removed from our promotional email list or registration database. Even after you opt out from receiving promotional messages from us, you will continue to receive transactional messages from us regarding our Services. Data portability: Data portability is the ability to obtain some of your information in a format you can move from one service provider to another. Depending on the context, this applies to some of your information, but not to all of your information. Should you request it, we will provide you with an electronic file of your basic account information and the information you create on the spaces under your control.

Our policy towards children

Our Services are not intended for use by anyone under the age of 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe we have collected data from a child under 16, please contact us immediately at privacy@yuma.app, and we will take steps to delete such information from our systems.

Regional disclosures

Depending on where you live, you may have specific privacy rights that apply to you. The following privacy representations and disclosures are intended to supplement the main privacy policy and provide additional information about those rights and other information relevant to data subjects located in specific jurisdictions. European Economic Area and United Kingdom privacy disclosures If you are an individual in the European Economic Area (EEA) or United Kingdom (UK), we collect and process information about you only where we have legal bases for doing so under applicable data protection laws. The legal bases depend on the Services you use and how you use them. This means we collect and use your information only where: • We need it to provide you the Services and personalize your experience, provide customer support and to maintain Service safety and security; • It satisfies a legitimate interest (which is not overridden by your data protection interests), such as to develop and improve our Services, to conduct marketing and promotional activities and to protect our legal rights and interests; • You give us consent to do so for a specific purpose; or • We need to process your data to comply with a legal obligation. If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we have a legitimate interest to do so, you have the right to object to that use, though, in some cases, this may mean no longer using the Services. Where applicable under local law and subject to applicable exceptions, you have the following rights regarding your personal information: • To request access to and/or a copy of certain information we hold about you (including in a portable and/or machine-readable format) • To object to how we process your personal information • To update or correct your personal information • To request that we delete certain personal information we hold about you • To restrict how we process certain personal information about you • To request that we transfer your information to a third-party provider of services • To withdraw your consent at any time (where you have provided consent for the processing) • To lodge a complaint with the relevant supervisory authority International transfers: We collect information globally and may transfer, process, and store your information outside of your country of residence, to wherever we or our third-party service providers operate for the purpose of providing you the Services. Whenever we transfer your information, we take steps to protect it using appropriate safeguards including Standard Contractual Clauses (SCCs) and Data Processing Agreements with service providers. U.S. State privacy disclosures If you are a U.S. resident, you have the following rights regarding your personal information: • To request information about our processing of your personal information • To request access to and/or a copy of certain information we hold about you • To update or correct your personal information • To request that we delete certain personal information we hold about you, subject to certain exceptions • To opt out of the "sale" of personal information, the "sharing" of personal information or "targeted advertising" (as these terms are defined under applicable laws) • The right not to be discriminated against for exercising your rights • The right to appeal our decision to deny your request, if applicable Sensitive personal information: We do not use or disclose sensitive personal information for purposes other than permitted under applicable law.

Changes to our privacy policy

We may change this privacy policy from time to time. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice by adding a notice on the Services homepages, login screens, or by sending you an email notification where you have subscribed to receive legal updates. We also keep prior versions of this privacy policy in an archive. We encourage you to review our privacy policy whenever you use the Services to stay informed about our information practices and the ways you can help protect your privacy. If you disagree with any changes to this privacy policy, you will need to stop using the Services and deactivate your account(s) and/or submit a request to delete your personal information, as outlined in the "How to access and control your information" section.

How to contact us

Your information is controlled by YUMA. If you have questions or concerns about how your information is handled, or if you wish to exercise your rights, please contact us: Email: privacy@yuma.app Data Protection Officer: dpo@yuma.app Support: support@yuma.app EU/UK Representative (for GDPR inquiries): Contact us at gdpr@yuma.app We aim to respond to all inquiries within 30 days. If you have a complaint or concern about your personal information, we encourage you to contact us first, and we will do our best to resolve your concern.