YONA Privacy Policy

The business using YONA determines why its customer and staff data is processed. YONA provides the software service for that data.

YONA determines the purposes of processing for account registration, support requests, security, and subscription billing data.

Account and staff data: name, email, a strongly hashed password, role, work schedule, and a Telegram identifier when voluntarily linked.

Data about a business's customers: name, phone, email, bookings, selected services, visit history, payment status, and signed consents. YONA does not store card numbers.

Technical data: IP address, security logs, request and error details, and session identifiers. The contact form stores the submitted name, email, company, and message.

To provide accounts and workspaces, booking, scheduling, notifications, payment status, inventory, document signing, support, abuse prevention, and contractual service delivery.

YONA does not sell personal data or use a business's customer list for third-party advertising.

Data is shared only with providers needed to operate the service, such as hosting and database providers, object storage, Payme, and Telegram when the relevant integration is enabled.

Some providers may process data in another country. Available contractual and technical safeguards are used where applicable.

Data is retained while an account exists or as needed for bookings, accounting, dispute resolution, and legal requirements. Retention differs by record type and business settings.

YONA uses tenant and role isolation, encryption of sensitive fields, password hashing, audit logs, and request limits. No system can guarantee absolute security.

Depending on applicable law, you may request access, correction, deletion, restriction, or export. Customers of a business should contact that business first; account-related YONA requests can be sent through the official contact form.

Do not submit passwords, card details, or medical documents through the contact form.