Effective date: 5 June 2025

We, Yin Yang Inc. ("we", "us", "our", "Company") are the owners and operators of elaichi.ai (the "Website") and the associated software‑as‑a‑service platform and related products and services (collectively, the "Services"). Our Services enable customers to connect their third‑party software‑as‑a‑service ("SaaS") applications to large language models ("LLMs") via the Model Context Protocol ("MCP"), ask questions, and perform actions—in a single hub that we refer to in this Privacy Policy as the "Platform".

We respect your privacy rights and are committed to protecting the personal information we collect through the Platform. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you interact with the Platform.

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY CLICKING ON THE CONSENT CHECKBOX OR OTHERWISE PROVIDING US WITH PERSONAL INFORMATION, YOU CONSENT TO THE PRACTICES DESCRIBED HEREIN. IF YOU DO NOT AGREE, YOU MAY WITHDRAW YOUR CONSENT OR CHOOSE NOT TO PROVIDE PERSONAL INFORMATION.

If you access or use the Platform on behalf of a third party, you represent that you have authority to bind that third party to this Privacy Policy. If you lack such authority, or if you (or the third party) do not agree to these terms, do not use the Platform.

This document is an electronic record executed pursuant to applicable data‑protection laws.

1. Definitions

• "User", "you", "your" – Any individual who visits, accesses, or uses the Platform.

• "Customer" – Any person or entity that purchases, subscribes to, or otherwise uses the Services.

• "Personal Information" – Information that identifies or can reasonably identify an individual, including but not limited to name, phone number, postal address, email address (personal or work), company name, and job title.

• "Controller" – A natural or legal person that determines the purposes and means of processing Personal Information.

• "Processor" – A natural or legal person that processes Personal Information on behalf of the Controller.

2. Personal Information We Collect

2.1. Information You Provide Directly

• Website interactions — When you complete forms, request demos, download resources, or send messages on the Website, you may share your name, email address, phone number, company name, job title, and any other details you include. The Company acts as Controller for this data.

• Account creation — When you register for an elaichi.ai account, you provide your name, email address, company name, job title, username, and password. The Company is the Controller.

• Payment processing — To purchase Services you provide your name and email address; payment‑card information is given directly to our payment processor and never stored by us. The Company is the Controller for the limited billing data we receive.

• Recruitment — If you apply for a job, you may provide your name, email address, phone number, résumé, education history, and employment details. The Company is the Controller.

• Social media — We may collect publicly available information and any messages you send to us via LinkedIn, X (Twitter), Facebook, Instagram, or YouTube. The Company is the Controller.

2.2. Personal Information Processed on Behalf of a Customer

When a Customer uses the Services to connect third‑party accounts or execute MCP‑based actions, we may receive Personal Information originating from those third‑party systems (e.g., CRM records, ticket data, or contact details). In such cases, the Customer acts as Controller and Yin Yang Inc. acts solely as Processor, handling data strictly under the Customer’s documented instructions.

If you believe your Personal Information has been provided to us by a Customer and you wish to exercise privacy rights, please contact that Customer directly. We will support resolution of any data‑subject requests we receive in our Processor capacity.

We rely on vetted sub‑processors; for the current list and full data‑processing terms, see the Data Processing Addendum ("DPA") at https://elaichi.ai/dpa or request a signed copy via legal@elaichi.ai

3. Cookies and Similar Technologies

We use cookies, web beacons, tags, and similar technologies to:

1. recognise repeat visitors;

2. analyse traffic and usage patterns; and

3. improve Platform performance and user experience.

You may disable non‑essential cookies through your browser settings. For details, see our Cookie Policy at https://elaichi.ai/cookie-policy

4. Accuracy of Information

You are responsible for ensuring that any Personal Information you provide—whether your own or a third party’s—is accurate, current, and lawful. If you share Personal Information about another individual, you represent that you have lawful authority and any required consent to do so.

5. How We Use Personal Information

We use Personal Information to:

• respond to inquiries, demo requests, and other communications;

• deliver, operate, maintain, and improve the Services and Platform;

• provide customer support and manage our relationship with you;

• create business intelligence or analytics relating to the Services (using secure third‑party tools where needed);

• process payments and fulfil contractual obligations;

• evaluate and process job applications; and

• comply with legal obligations and enforce our rights.

6. Disclosures of Personal Information

We do not sell or rent your Personal Information. We disclose it only in these limited circumstances:

• Affiliates — To support, improve, or develop the Services. All affiliates are bound by privacy commitments consistent with this Privacy Policy.

• Service providers — Trusted partners assisting with hosting, analytics, customer support, and payment processing may access Personal Information solely to perform these tasks under strict confidentiality and security obligations.

• Corporate transactions — In connection with a merger, acquisition, bankruptcy, or sale of assets, Personal Information may be transferred to a successor entity that must continue to honour this Privacy Policy.

• Legal and regulatory authorities — We may disclose Personal Information when required by law, to enforce agreements, protect rights and safety, prevent fraud, or respond to legal process.

7. Data Retention

We retain Personal Information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or contract. When retention is no longer necessary, data is securely deleted or anonymised.

8. Security

Personal Information is stored on third‑party cloud infrastructure secured with industry‑standard measures, including 256‑bit encryption at rest where applicable. While we maintain strong safeguards, no system is guaranteed impenetrable.

9. Your Rights

Subject to applicable law, you may have the right to:

• access the Personal Information we hold about you;

• request correction, deletion, or restriction of processing;

• object to our processing;

• withdraw consent at any time (which does not affect processing already performed under valid consent);

• data portability; and

• lodge a complaint with a supervisory authority.

To exercise any right, email legal@elaichi.ai We may request verification information to protect your data.

10. Information for EU & UK Residents

We adhere to the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and the UK Data Protection Act 2018.

• Legal bases — We process Personal Information when we have at least one lawful basis: consent, performance of a contract, or legitimate interests not overridden by data‑subject rights.

• International transfers — Where we transfer Personal Information outside the EU/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.

• Additional rights — EU/UK residents may contact their supervisory authority (e.g., the ICO in the UK). We encourage direct contact with us first so we can address concerns.

11. Choice & Opt‑Out

We may send administrative notices and, where permitted, marketing communications. You may opt‑out of marketing emails by following the unsubscribe instructions in each message or by emailing legal@elaichi.ai

12. Third‑Party Links

The Platform may contain links to third‑party websites or applications. We do not control and are not responsible for the privacy practices of such third parties. Review the privacy policies of any site you visit via external links.

13. Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the State of Delaware, USA. The courts located in Delaware shall have exclusive jurisdiction over any disputes arising under this Privacy Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Website or via email. The "Effective date" at the top indicates when the latest version was posted.

15. Contact Us

For questions, concerns, or requests related to privacy, contact:

Email — legal@elaichi.ai
Postal Address — 9450 SW Gemini Dr, Beaverton, Oregon 97008, USA