# Legal

_All documents effective 1 September 2026._

Elaichi is operated by **Yin Yang, Inc.**, a Delaware corporation trading as
Elaichi, with a notice address at 9450 SW Gemini Dr, PMB 69868, Beaverton,
Oregon 97008‑7105, USA.

## Documents

| Document | What it covers |
|---|---|
| [Privacy Policy](/privacy/) | What personal data we handle, in which role, where it is stored, and how long we keep it |
| [Terms of Service](/terms/) | The agreement governing use of Elaichi, including prohibited data and deletion behavior |
| [Data Processing Agreement](/dpa/) | Our processor commitments, security measures, sub-processors, and the Standard Contractual Clauses |
| [GDPR](/gdpr/) | How we support EEA, UK, and Swiss obligations, our representatives, and data subject rights |
| [CCPA Notice](/ccpa/) | California and US state privacy disclosures and how to exercise your rights |
| [Cookie Policy](/cookies/) | Cookies set by the website and the application, and how to change your choices |
| [Your Privacy Choices](/privacy-choices/) | How to opt out of sharing for cross-context behavioral advertising |
| [Sub-processors](/subprocessors/) | The vendors we engage, and how to subscribe to change notifications |

## Security and compliance

Our certifications, control posture, and security documentation are published
in the **[Elaichi Trust Center](https://trust.elaichi.ai)**, with gated documents
released under NDA on request from
**[security@elaichi.ai](mailto:security@elaichi.ai)**.

To report a security vulnerability, see
[/.well-known/security.txt](/.well-known/security.txt) or email
**security@elaichi.ai**. We do not pursue legal action against researchers
acting in good faith under that policy.

## Contact

| Purpose | Address |
|---|---|
| Privacy questions and rights requests | privacy@elaichi.ai |
| Data protection and DPA requests | dpo@elaichi.ai |
| Security and vulnerability reports | security@elaichi.ai |
| Legal notices and contracts | legal@elaichi.ai |