Who we are
yozhik (“yozhik”, “we”, “us”) is a 3D logo studio, currently running as a public preview. We are the controller of the personal data described here. yozhik is in preview: some features below (paid plans, AI creations) are described as they will work when they go live.
Questions or requests about your data: zacosadchuk@gmail.com.
What we collect
- Account details. Your email address and, if you sign in with Google, the name and profile picture Google shares with us. Your password goes straight to our sign-in provider (Supabase), which stores only a salted hash. We never see or keep it in plain text.
- Waitlist. If you join the launch waitlist, your email address and the date you joined.
- Plan and billing. The plan you choose. When paid plans launch, payments are handled by Stripe: we receive confirmation of payment and the last four digits of your card, never the full card number.
- Your logos and designs. In the current studio, files you upload are turned into 3D inside your browser and are not sent to our servers. If you later save looks to your library, we store those files and settings in your account.
- AI creations. When AI creations launch, we process the text you type to generate your object, and count how many creations you have used.
- Technical data. Like any website, our hosting and delivery providers receive your IP address, browser type and the pages you request, and keep short-lived logs for security and reliability.
- Choices you make on the site. Your cookie choice and, while you sign up, the plan you picked (see Cookies and similar storage).
How we use it, and why we are allowed to
- To give you your account and the studio, including signing you in, keeping your saved work and applying your plan’s limits. Legal basis: performing our contract with you.
- To keep yozhik secure and working, prevent abuse, and fix problems. Legal basis: our legitimate interests.
- To email you about your account: confirmations, password resets and important changes. Legal basis: contract. We only send marketing emails if you opt in, and every one has an unsubscribe link.
- To tell waitlist members about the launch: release updates and launch bonuses, sent only to the address you gave us for that. Legal basis: consent, which you can withdraw at any time with the unsubscribe link in every email or by emailing us.
- To improve yozhik with analytics, only if you allow analytics cookies. Legal basis: consent, which you can withdraw at any time.
- To meet legal obligations, such as keeping payment records. Legal basis: legal obligation.
We do not sell your personal data, and we do not use your logos or prompts to train AI models.
Who we share it with
We use a small number of providers who process data on our behalf, under contracts that require them to protect it:
- Supabase: sign-in and our database, hosted in the EU (Ireland).
- Netlify: website hosting.
- Google: only if you choose “Continue with Google”, to confirm who you are.
- jsDelivr and Google Fonts: deliver the site’s code libraries and typeface, and see your IP address when they do.
- Stripe: payments, once paid plans launch.
We may also share data if the law requires it, or to protect the rights and safety of our users and others.
International transfers
Some of these providers are based in, or have staff or servers in, countries outside the UK and EU, such as the United States. Where that happens, transfers are protected by safeguards recognised under UK and EU data protection law, such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or the EU–US Data Privacy Framework and its UK extension.
How long we keep it
- Account data and saved work: for as long as you have an account. When you delete your account, we delete it within 30 days, except where we must keep something by law.
- Payment records: for as long as tax law requires (in the UK, generally six years).
- Technical logs: kept by our providers for a short period, typically up to 30 days.
Your rights
Under UK and EU data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on consent, you can withdraw it at any time. Email zacosadchuk@gmail.com and we will reply within one month.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
Cookies and similar storage
- Sign-in session (essential): keeps you signed in. Set by Supabase in local storage under a key starting with “sb-”.
- Your cookie choice (essential): remembers what you picked in the cookie notice, so we don’t ask on every page (“yozhik-consent”).
- Chosen plan (essential): remembers the plan you picked while you finish signing up, and is cleared when you close the tab (“yozhik-plan”).
- Analytics and marketing (optional): we don’t use any yet. If we add them, they will only run if you turn them on in the cookie notice.
You can change your choice at any time with “Cookie settings” in the footer.
Children
yozhik is not meant for children under 13, and we don’t knowingly collect their data. If you think a child has signed up, contact us and we will delete the account.
Changes to this policy
If we make important changes, we will update the date at the top and, if you have an account, tell you by email before they take effect.
See also our Terms of Service.