Privacy Policy

Who is responsible

Ken Kais Group (ABN 75 754 703 525), based in Queensland, Australia, is responsible for the personal information described here. Questions or requests go to ken@kenkais.com.

This policy covers the Yaatuber website and the purchase process. It does not describe the internals of the desktop application.

What we collect, and why

Your email address

When you buy, Stripe passes us the email address you entered at checkout. We store it because it is your licence: it is what the download page checks to confirm you are entitled to the software. We also use it to reply to you if you contact support.

Payment details

Handled entirely by Stripe, trading as Link, which is the seller of record for the payment. We never receive or store your card number, expiry, or security code. Stripe also collects the billing name and address it needs to calculate tax, and issues your receipt; we do not see that address. What reaches us includes the amount, the date, your email address, payment references and refund or dispute status. We store a payment reference linked to your email and whether access for that purchase has been granted or revoked. This lets us process refunds without treating a repeated payment notification as a new purchase. See Stripe’s privacy policy (opens in a new tab).

Affiliate referrals

If you arrive through an affiliate link, that affiliate is credited for anything you buy during your visit. This uses the code in the web address and stores nothing on your device.

We ask separately whether you are happy for us to remember the referral for 30 days, so the affiliate is still credited if you come back later and buy then. That is the only part that needs a cookie, it is only set if you say yes, and saying no changes nothing about your visit today.

When that link is first followed we record the referral: the affiliate’s code, which page you landed on, any campaign tags in the link, and the referring website. We do not send your IP address with it, and this record is not linked to you personally unless you go on to buy.

If you apply to the affiliate program

We collect your name, your email address, and the PayPal email address you want commission paid to. We use them to assess the application, to sign you in to the affiliate dashboard, and to pay you. The PayPal address is used for nothing else, and it is never shown to buyers.

Your dashboard shows the sales you referred. It does not show buyers’ email addresses.

Your IP address

Used only to rate-limit our own endpoints so they cannot be abused, and to avoid counting a page reload as a second affiliate click. It is held in memory for the length of that window and is not written to a database or shared. Our hosting providers keep their own standard server logs.

What we do not do

• No Google Analytics, no Meta Pixel, no advertising or profiling trackers. There is no third-party analytics package installed on this site.
• We do not sell or rent your information to anyone.
• We do not send marketing email you did not ask for.

Cookies we set

If you arrive through an affiliate link, your visit is credited to that affiliate using the code in the web address. That needs no cookie, and we do not set one for it.

yt_attr

Signed, HTTP-only. Remembers which affiliate referred you so they are still credited if you buy on a later visit. Expires after 30 days. Only set if you agree when we ask. If you decline, it is not set and any existing one is deleted.

yt_consent

Records whether you agreed to the cookie above, so we stop asking. Set either way, including when you decline — without it we could not honour your answer.

ref

An older, plain version of yt_attr. No longer set. Still read so visitors tagged before we changed the format are not dropped.

yt_aff_session

Signed, HTTP-only. Only set if you log in to the affiliate dashboard. It keeps you signed in.

yt_admin_session

Encrypted, HTTP-only. Only set for site staff signing in to the admin area. Expires after 8 hours.

None of these are advertising cookies, none build a profile of you, and none are shared with third parties.

Who we share it with

Only the services needed to actually run the product, each of which acts on our instructions:

• Stripe takes payment and issues receipts.
• Vercel hosts this website.
• Railway hosts the licence database that stores your email address.
• Resend delivers the download and account emails, so it receives your email address.
• Sentry collects error reports so faults can be fixed. Email addresses, payment identifiers and access tokens are stripped out before a report is sent.
• PayPal, affiliates only. We use the payout address you gave us to send your commission.

These providers operate internationally, so your email address may be stored or processed outside Australia.

We will also disclose information where the law requires it, and we will tell you unless we are prohibited from doing so.

How long we keep it

Your email address is kept for as long as your licence exists, because deleting it would remove your ability to download the software you paid for. Stripe keeps payment records for the period Australian tax and financial-record law requires, which is generally five years.

A refund revokes access for that purchase. Another valid purchase may keep your licence active. After a refund we keep the payment reference and your email for 180 days, which covers the period in which a card payment can still be disputed. After that we automatically delete the email and keep only the payment reference marked as refunded, so a repeated payment notification cannot restore refunded access. Payment records held by Stripe follow the tax period above.

Affiliate applications are kept while you are in the program. If you leave, or an application is declined, we delete your PayPal payout address once any commission owed to you has been paid. Records of the payments themselves are kept for the same tax period as above.

Your choices

You can ask us to:

• tell you what we hold about you;
• correct it if it is wrong;
• delete it. Note that deleting your email address ends your access to downloads, so we will confirm you understand that first. We then remove your email from every licence record we hold; only anonymous payment references remain. Stripe keeps its own payment records, and if you bought through an affiliate link we keep the commission record for your purchase, both for the tax period above;
• send you a copy of it.

Email ken@kenkais.com and we will respond within 30 days. You can refuse or delete the cookies above in your browser settings; the affiliate ones only affect whether a referrer gets credited, and none of them are needed to buy or download.

If you are unhappy with how we have handled your information, contact us first. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner, or to the data protection authority where you live.

Security

The site is served over HTTPS. Cookies that matter are signed and HTTP-only so they cannot be read or forged by scripts in your browser. Administrative endpoints require a secret key. No system is perfectly secure, but the only personal information we hold is an email address.

Children

Yaatuber is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, the date at the top of the page changes with it. See also our Terms of Sale and Refund Policy.

Contact

ken@kenkais.com
Ken Kais Group
ABN 75 754 703 525
Queensland, Australia