YONA Privacy Policy

The business using YONA determines why its customer and staff data is processed. YONA provides the software service for that data.

YONA determines the purposes of processing for account registration, support requests, security, and subscription billing data.

Account and staff data: name, email, a strongly hashed password, role, work schedule, and a Telegram identifier when voluntarily linked.

Data about a businessʼs customers: name, phone, email, bookings, selected services, visit history, payment status, and signed consents. YONA does not store card numbers.

Technical data: IP address, security logs, request and error details, and session identifiers. The contact form stores the submitted name, email, company, and message.

To provide accounts and workspaces, booking, scheduling, notifications, payment status, inventory, document signing, support, abuse prevention, and contractual service delivery.

YONA does not sell personal data or use a businessʼs customer list for third-party advertising.

Data is shared only with providers needed to operate the service, such as hosting and database providers, object storage, Payme, and Telegram when the relevant integration is enabled.

Some providers may process data in another country. Available contractual and technical safeguards are used where applicable.

Data is retained while an account exists or as needed for bookings, accounting, dispute resolution, and legal requirements. Retention differs by record type and business settings.

YONA uses tenant and role isolation, encryption of sensitive fields, password hashing, audit logs, and request limits. No system can guarantee absolute security.

Depending on applicable law, you may request access, correction, deletion, restriction, or export. Customers of a business should contact that business first; account-related YONA requests can be sent through the official contact form.

Do not submit passwords, card details, or medical documents through the contact form.

Before you sign in, YONA writes nothing to your browser. Cookies appear only after sign-in: they hold the session and the language you chose. These are strictly necessary — sign-in and language do not work without them, and they need no consent.

Traffic on public pages is counted with Google Analytics. That counter is not loaded until you agree: on a first visit a choice appears at the foot of the page, declining is as easy as accepting, and the decision is remembered. You can change it at any time through the «Cookies» link in the site footer.

The counter is configured to collect only what answers «where did people come from»: the IP address is anonymised, Google signals and ad personalisation are off. There are no advertising or tracking cookies on this site.