Your information, handled with care.

This Privacy Policy applies to the Yebo Invoices website and app (together, Yebo). It describes how personal information is collected, used, stored, and shared when you use the service.

Yebo is designed for small businesses. When a business enters information about its customers, that business decides why the information is used and is responsible for having a lawful basis to use it. This notice also explains how Yebo handles account and service information.

We handle information you provide, information created as you use Yebo, and limited technical information processed by the providers that operate the service.

• Account and sign-in information, such as your email address and account and session details managed through Supabase Auth. If you choose Google sign-in, Google also provides basic account information needed to authenticate you.
• Business profile information, such as your business name, email, phone number, website, address, company or VAT registration details, optional banking details, logo, brand colour, and quote settings.
• Client and document information, such as client names, phone or WhatsApp numbers, email addresses and addresses; job descriptions and locations; quote and invoice line items, prices, tax, dates, payment terms, notes, and document status or response events.
• Information you choose to submit to AI features, including typed work details and voice recordings. A voice recording is transcribed to return an editable quote draft.
• Payment information: if you connect PayFast, we store your PayFast merchant details securely on our server. When a client pays an invoice through PayFast, we receive the status, amount and PayFast reference of the payment. We do not receive or store card numbers.
• Subscription information: your plan, its status and billing dates. Card or bank details for your Yebo subscription are handled by PayFast, not stored by Yebo.
• Targets and progress: the monthly money and quote targets you set, which are used to show your progress.
• Basic technical and security information that hosting, authentication, and other service providers may process to deliver and protect the website, such as request timestamps, browser information, and network information.

We use information only as needed to provide and protect Yebo, including to:

• Create and secure accounts, remember business settings, and provide customer support.
• Prepare, store, display, and export the quotes and invoices you request.
• Send a document and its PDF to the recipient when you choose the email option, and provide a public document link when you share one.
• Send you service emails, such as a notice when a client accepts a quote or pays an invoice, and send your client a receipt when they pay.
• Pass a client's payment to PayFast when they choose to pay online, and record the payment once PayFast confirms it.
• Generate AI-assisted messages, transcriptions, or quote drafts when you choose those features.
• Record document events such as sending, viewing, acceptance, decline, or a payment entry; prevent misuse; diagnose service issues; and meet legal obligations.

You control the business and client information you enter. Before uploading or sharing someone else's information, make sure you are allowed to do so, provide any notice required by law, and keep the information accurate and limited to what the service needs.

Yebo processes client and document information to provide the features you request, maintain the service, and protect it. You remain responsible for your relationship with your clients, your privacy notices, and responding to requests that relate to information you control.

When you share a Yebo quote or invoice link, anyone who has that link may be able to view the document and download its PDF. The document may show the client's name, job details, prices, payment terms, your business details, and any banking details included on the page. A recipient may forward or save the link.

Yebo records document events such as a page view or a quote response so the business can follow the document's progress. Treat each public link as a shareable link, and send it only to the intended recipient.

If you choose an AI feature, the information needed for that request is sent to Groq, our AI provider, to generate a draft, a tidied piece of text or a transcription. Depending on the feature, this may include a voice recording or transcript, business name, item descriptions, and job details.

The voice-drafting feature returns a transcript and editable draft to your browser; it does not add the recording or transcript to your saved Yebo documents by default. AI providers may process or retain request information under their own current terms and retention practices. Avoid including sensitive details that are not needed, and review every generated result before using or sharing it.

We use third-party providers to run Yebo and deliver features. Based on the current service, these include Supabase for authentication, database, and logo storage; Vercel for hosting; Groq for AI requests; Resend to deliver emails and attached PDFs; and PayFast to process online payments and subscription payments.

WhatsApp buttons in Yebo only open WhatsApp on your own device with a message already written. Yebo does not send WhatsApp messages on your behalf. WhatsApp's own terms and privacy notice apply to anything you send there.

We may also disclose information when needed to comply with law, respond to valid legal requests, protect users and the service, or transfer the service as part of a business reorganisation. We do not sell personal information for advertising.

Our providers may process information in countries other than South Africa. Their locations and infrastructure can change. Where applicable, we take steps intended to meet the requirements for cross-border transfers under South African privacy law and require service providers to handle information under their applicable terms.

Yebo uses essential session cookies to keep you signed in and support protected pages. The current app does not intentionally use advertising cookies or third-party ad tracking. Blocking essential cookies may prevent sign-in or parts of the service from working.

We keep account, business, client, and document information while it is needed to provide the service, while your account is active, and for any additional period required for security, dispute resolution, or legal obligations. Backups and provider logs may remain for a limited period under the provider's retention practices.

The current app does not include a self-service account deletion control. You may request access, correction, or deletion using the service contact details at the end of this notice. Some information may need to be retained where the law permits or requires it.

We use access controls and the security features provided by our infrastructure providers to protect information. No website or storage system can be guaranteed completely secure, so please protect your sign-in method and tell us promptly if you believe your account has been accessed without permission.

Subject to applicable law, you may request access to or correction or deletion of personal information, object to or limit certain processing, and ask questions about how information is handled. Contact details for Yebo are listed below. We may need to verify your identity and clarify the request before responding.

If you are in South Africa, you may also raise a complaint with the Information Regulator of South Africa. A business user's client should direct a request about a quote or invoice to the business that created and shared it.

Yebo is a business service and is not designed for children. We do not knowingly invite children to create accounts. If you believe a child has provided personal information to Yebo, contact us using the details below.

We may update this notice as Yebo changes. The updated date at the top of this page shows when the current version was published. If a change materially affects how information is handled, we will take reasonable steps to provide notice through the service.