Privacy Policy

1. Introduction

GVSII Orchid, Inc. DBA Yask (“Yask,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use the Yask mobile app, use our services, or interact with us via SMS or other communication channels.

Yask is a workplace tool. The app is provided to you by an organization — typically your employer — which decides who may use it and what work is recorded in it. That organization controls the business records created in the app; we process them on its behalf.

2. Information We Collect

From our website, we may collect:

• Personal Information: Name, email address, phone number, company name, and job title that you provide when filling out our contact form or otherwise communicating with us.
• Usage Data: Information about how you access and use our website, including IP address, browser type, pages visited, and time spent on pages.
• SMS and Communication Data: If you opt in to receive SMS messages from us, we collect your phone number and records of messages sent and received.
• Cookies and Tracking Technologies: We may use cookies and similar technologies to enhance your experience on our website.

From the Yask mobile app, we collect:

• Account Information: Your email address, first and last name, and the organization and role you belong to. We use passwordless sign-in, so we never collect or store a password.
• Work Content: The tasks, descriptions, comments, and conversations you create in the app, including messages you exchange with the in-app assistant.
• Photos: Images you choose to capture or attach to a task or conversation, together with a short AI-generated description of each image (see section 7).
• Voice Recordings: If you use voice dictation, the audio clip you record is transmitted for transcription and converted to text (see section 7).
• Work Assignments: The work locations and job roles your organization assigns to you. These describe where you work, not where you are.
• Device and Notification Data: A notification token and a randomly generated device identifier, so we can deliver notifications to your device. This identifier is created by the app and is not an advertising identifier.

3. Device Permissions and Location

The app asks for the following permissions. Each is optional, each is requested only when the related feature is first used, and you can change your mind at any time in your device settings.

• Camera and Photos: so you can take or attach a photo to a task or conversation.
• Microphone: so you can dictate instead of typing.
• Notifications: so we can tell you when work is assigned to you or needs attention.
• Location (while using the app): so the app can recognize when you have arrived at one of your organization’s work locations.

We do not collect your location. This is worth stating plainly, because it is unusual. When you grant location access, your organization’s work locations are sent to your device, and your device compares them against your position locally. Your position is never transmitted to us and is never stored on our servers. Turning the permission off disables arrival detection and affects nothing else.

The app requests location only while it is open. It does not use background location and does not track your movements.

4. How We Use Your Information

We use the information we collect to:

• Provide the app and its features to you and your organization.
• Sign you in and keep your account secure.
• Send notifications about work assigned to you or requiring your attention.
• Respond to your inquiries and provide customer support.
• Send you SMS messages if you have opted in to our messaging program, including service updates and information related to your inquiry.
• Improve our website, app, and services.
• Analyze usage trends and performance.
• Comply with legal obligations.

We do not use your information for advertising, we do not track you across other companies’ apps or websites, and we do not sell or share your personal information.

5. SMS Messaging Program

If you opt in to receive SMS messages from Yask, the following applies:

• You may receive text messages related to your inquiry, service updates, and operational information from Yask.
• Message frequency varies.
• Message and data rates may apply.
• You may opt out at any time by replying STOP to any message. Upon opting out, you will receive a confirmation message and no further messages will be sent.
• For help, reply HELP to any message or contact us via the form on our website.
• Consent to receive SMS messages is not a condition of purchase or use of our services.

6. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We share information only in the following circumstances:

• Your organization: Work content you create in the app is visible to your organization and the colleagues it grants access to. Yask is a shared workplace tool, not a private notebook.
• Service providers: We use the vendors listed below to operate the service. They process data on our instructions and are bound to protect it to a standard at least equivalent to this policy.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

The service providers that may process your information are:

• Convex — hosting, database, and file storage for the app.
• Resend and Amazon Web Services — delivery of sign-in codes and invitation emails.
• Expo, Apple, and Google — delivery of push notifications to your device.
• Google and OpenAI — AI processing, as described in section 7.
• Amazon Web Services — address lookup when an administrator adds a work location.
• Vercel — hosting of our website and administrative web application.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We may share your data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

7. AI Processing

Some features of the app rely on AI models operated by third parties. We want to be specific about what is sent where:

• The in-app assistant: Your messages to the assistant, and the work context needed to answer them, are sent to Google’s Gemini models.
• Photo descriptions: Photos you attach may be sent to Google’s Gemini models to generate a short written description, so that the assistant can reference what a photo shows without re-processing the image.
• Voice dictation: Audio clips you record are sent to OpenAI for transcription and returned as text.

These providers process this content to return a result to us. We do not permit them to use your content to train their models. Voice dictation, photo attachment, and the assistant are all optional features; if you do not use them, nothing is sent for AI processing.

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information. Data is encrypted in transit, sign-in credentials are stored in your device’s secure keychain, and access to work content is limited to members of the organization it belongs to. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Work content belongs to the organization that created it and is retained for as long as that organization maintains its account, or until the organization deletes it.

10. Deleting Your Account and Data

You can delete your Yask account at any time from inside the app: open the side menu, tap your avatar, then Settings → Delete account. The deletion happens immediately. It is permanent, it cannot be undone, and it is a full deletion rather than a temporary deactivation.

Deleting your account permanently removes your sign-in credentials and session, your name, email address, and profile, your notification registrations and history, your saved assistant memories, your work location and job role assignments, and your organization membership.

The tasks, comments, and photos created in the app are your organization’s business records — in the same way that messages in a company chat tool or tickets in a work tracker are. Those records remain with your organization so your colleagues’ work is not disrupted, but they are permanently disassociated from you: once your account is deleted, nothing in the app identifies you as their author. If you would like anything else removed, contact us at support@yask.co before deleting, and we will work with your organization’s administrator.

If you have already uninstalled the app, you do not need to reinstall it. Email support@yask.co from the address on your account and we will delete it for you.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information.
• Opt out of marketing communications and SMS messages.
• Request that we limit the processing of your information.
• Receive a copy of the personal information we hold about you.

California residents. If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the right to know what personal information we collect and how it is used and shared, the right to request deletion or correction of that information, and the right not to be discriminated against for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is no opt-out for those activities.

To exercise any of these rights, email support@yask.co, use the form on our website, or write to us at: GVSII Orchid, Inc. DBA Yask, 251 Little Falls Drive, Wilmington, DE 19808. If your request concerns work content held on behalf of your employer, we may need to direct you to that organization, which controls those records.

12. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Your continued use of our website, app, and services after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, email support@yask.co or contact us at: