Privacy notice

30 September 2026

Yuvin connects company sources to a workspace and lets authorised members ask questions against imported company material. This notice explains what the hosted Yuvin account and connector service handles. A company administrator chooses which services to connect and which people may use its workspace.

Information we handle

For accounts, we handle your email address, identity provider identifier, verification status, workspace membership and role. We record sign-in, session, member, and connector activity needed to secure the service and provide an audit trail. Google Identity Platform handles email/password credentials and password reset delivery; Yuvin does not receive your password.

When an administrator connects a service, Yuvin requests the permissions displayed by that provider. The hosted connector broker holds OAuth app credentials and, after a successful grant, the provider tokens needed to maintain the connection. It supplies short-lived access tokens only to a desktop paired with the same workspace. The paired desktop imports accessible records into local company memory. The data available depends on the provider, the granted scope, and the account's permissions.

How the information is used and protected

We use account information to sign you in, manage membership, enforce workspace boundaries, and show security activity. We use connected-source access to import records requested by the company administrator. Hosted grants are designed to be encrypted with a dedicated Google Cloud KMS key and stored under the owning workspace in Firestore before connector access is released. The service is being rolled out by provider; a provider is not offered as ready until this protection and its OAuth configuration have been verified.

Google Cloud provides hosting, identity, database, key management, and secret storage for the hosted service. The connected provider processes its own authorization and API requests. Yuvin does not use a provider's data to train a general model through this connector flow.

Your controls

Workspace administrators can disconnect a source, revoke a paired desktop, remove members, and review workspace activity. You can sign out, revoke account sessions, and request a password reset. Disconnecting a source stops future access through Yuvin's stored grant. It does not automatically delete records already imported into a desktop's local company memory or necessarily revoke the authorization at the provider. To remove imported records, use the local memory controls and review the provider's connected-app settings.

Questions and requests

For access, correction, or deletion requests about the hosted account or workspace, contact manojlamba@okomo360.in. If your company manages your workspace, its administrator may also control your access and connected sources. We may update this notice as more providers become available; the date above identifies this version.