Privacy Policy
Effective Date: February 1, 2026
Last Updated: February 17, 2026
Yoho Solutions Inc. (“Chorus,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
1. Information We Collect
Information You Provide
- Account Information: Name, email address, profile information from GitHub OAuth
- Payment Information: Billing details processed by our payment provider (Stripe)
- Project Content: Descriptions, messages, and instructions you provide to the AI
- Support Communications: Messages you send to our support team
Information Collected Automatically
- Usage Data: Features used, actions taken, time spent
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, pages viewed, referring URLs
- Cookies: Session cookies for authentication and preferences
Information from Third Parties
- GitHub: Profile information, repository access (as authorized)
- Vercel: Account information, project details (as authorized)
- Supabase: Account information (as authorized)
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process transactions and send billing information
- Send transactional emails (welcome, receipts, updates)
- Provide customer support
- Analyze usage to improve the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
AI Processing
Your project descriptions and messages are processed by AI systems to:
- Generate code and content
- Provide recommendations
- Analyze issues and feedback
AI processing occurs in real-time and we do not use your project content to train AI models without your explicit consent.
3. How We Share Your Information
We do not sell your personal information. We share information only as follows:
Service Providers
We share information with providers who help operate our Service:
- Stripe: Payment processing
- Anthropic: AI processing
- Vercel: Hosting
- Supabase: Database services
These providers are bound by confidentiality obligations.
Third-Party Integrations
When you connect GitHub, Vercel, or Supabase, we access information in those accounts as authorized. We do not share information between your connected accounts without your direction.
Legal Requirements
We may disclose information if required by law or in response to valid legal process.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4. Data Storage and Security
Storage
Your data is stored on secure servers in the United States. Third-party service data (GitHub, Vercel, Supabase) is stored according to those providers' policies.
Security Measures
We implement industry-standard security measures:
- Encryption in transit (TLS/SSL)
- Encryption at rest
- Access controls and authentication
- Regular security assessments
No system is completely secure. We cannot guarantee absolute security.
5. Data Retention
We retain your information as follows:
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Project content | Until project deletion |
| Usage logs | 90 days |
| Payment records | 7 years (legal requirement) |
| Support communications | 2 years |
After account deletion, we remove your personal information within 30 days, except where retention is required by law.
6. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a portable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing
To exercise these rights, contact us at privacy@getchorus.ai.
California Residents
Under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information we collect, the right to delete, and the right to opt out of sales (we do not sell personal information).
European Residents
Under the General Data Protection Regulation (GDPR), you have additional rights and protections. Our legal basis for processing includes:
- Contract performance (providing the Service)
- Legitimate interests (improving the Service, preventing fraud)
- Consent (where required)
7. Cookies and Tracking
We use cookies and similar technologies for:
- Essential Cookies: Required for authentication and security
- Analytics Cookies: Help us understand usage patterns
- Preference Cookies: Remember your settings
You can control cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.
8. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Review their policies before providing information.
9. Children's Privacy
The Service is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately.
10. International Transfers
If you access the Service from outside the United States, your information may be transferred to and processed in the United States. We implement appropriate safeguards for international transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. The “Last Updated” date indicates the most recent revision.
12. Contact Us
For privacy-related questions or to exercise your rights:
Email: privacy@getchorus.ai
Yoho Solutions Inc.
For general inquiries: support@getchorus.ai