Legal
Privacy Policy
Last updated: August 2026
Yele is based in Spain and serves clients worldwide, including the United States. We take your privacy seriously and comply with the EU General Data Protection Regulation (GDPR). We also honor the rights described below for all users, regardless of where you live, and provide specific rights for U.S. and California residents.
Data Controller
- Name: Yele Design
- Email: info@yele.design
Information We Collect
We collect information you provide directly — such as your name, email, business details and any content you send us through our contact form, chat assistant, booking tool, or during onboarding — and information collected automatically when you use the site, such as usage data, device and browser information, and interactions captured by our analytics tools.
How We Use Your Information
We use your information to respond to your requests, provide and manage the service you contract, process payments, communicate with you, operate and improve our website, and comply with legal obligations. We do not use it for purposes unrelated to those described here.
Communications, Phone Calls & Text Messages
When you submit a form and provide a phone number, you expressly agree that Yele may contact you at that number about your enquiry and the service — including by automated technology, artificial intelligence (AI)-generated or prerecorded voice calls, and text messages (SMS), as well as by email and messaging apps such as WhatsApp. This may include an outbound AI voice assistant that calls you to follow up on your request, answer questions, and help schedule your project.
Your consent to receive automated or AI calls and texts is not a condition of purchasing any product or service. Message frequency varies, and message and data rates may apply. You can opt out of calls at any time by telling us during a call or emailing info@yele.design, and you can opt out of texts by replying STOP to any message (reply HELP for help). We will honor opt-out requests promptly.
We do not sell or share your phone number with third parties for their own marketing. Calls may be recorded for quality and training where permitted by law.
The Web Police Tool
“Web Police” is a free, satirical tool at yele.design/webpolice that reviews the design of a website you submit. When you or anyone submits a website address (URL) to the tool, we process and store: the URL, a screenshot of its publicly accessible homepage, the automated design analysis we generate from it, and technical metadata about the request (such as a truncated/derived identifier of the requesting device and the approximate country). We keep these submissions and analyses in our database so that we can operate the tool, serve repeat results without re-processing, study website design trends, and improve our own products and services.
Where a submitted website is a business website, it typically displays that business’s own publicly available contact details (for example a business name, a public business phone number, a public business email address, or links to public social-media profiles). We may collect, store and review these publicly available business contact details together with our design analysis, and we may use them to contact the business about its website and about our design services (business-to-business direct marketing). We do this only for business/organisation contact points, using the channels the business itself has made public — which may include email, telephone, WhatsApp or other messaging apps, SMS, and public social-media accounts — and we carry out any such outreach only during normal local business hours and in accordance with applicable law and the terms of the platform used.
Legal basis. For operating the tool and for business-to-business outreach we rely on our legitimate interests (Art. 6.1.f GDPR; see Recital 47, which recognises direct marketing as a possible legitimate interest), balanced against the rights and interests of the people concerned. Where a particular channel legally requires prior consent — for example automated or AI/prerecorded calls, marketing SMS, or marketing email in jurisdictions that require it — we will not use that channel without the consent required by law. We do not knowingly target the private, personal contact details of individuals, and we do not submit or profile special categories of data.
Your choices and right to object. A business (or person) may object to this processing and to any direct marketing at any time, with no need to give a reason (Art. 21 GDPR). To stop all outreach, be removed from our contact list and, if you wish, have the related record deleted, email info@yele.design; you may also reply STOP to any text message or tell us during any call. We honour these requests promptly and add the contact to a suppression list so we do not reach out again. We also honour applicable do-not-contact registries (such as Spain’s Lista Robinson).
The design analysis produced by Web Police is subjective satire and opinion generated automatically; it is not a professional audit or a statement of fact about the business or its work.
Legal Basis (GDPR)
We process personal data based on your consent (Art. 6.1.a GDPR), the performance of our service agreement with you (Art. 6.1.b GDPR), and our legitimate interest in operating and improving our service (Art. 6.1.f GDPR).
Analytics and Session Recording
We use Microsoft Clarity to understand how visitors use our site and to improve it. Clarity collects usage data — including pages viewed, clicks, scrolling, and session recordings — and sets cookies. This data is processed by Microsoft Corporation (United States). See Microsoft’s privacy statement for details. If you are in a region that requires consent for such tracking, we ask for it through our cookie banner.
Service Providers (Data Processors)
We share data only with trusted providers who process it on our behalf under data-protection agreements, and only as needed to run our service:
- Stripe, Inc. — payment processing for one-time website payments and Yele Care subscriptions (PCI-DSS Level 1 certified; card data is handled by Stripe and never stored by Yele).
- Supabase, Inc. — database, storage and authentication.
- Vercel, Inc. — website hosting and delivery.
- Microsoft Corporation — Clarity analytics and session recording.
- Groq, Inc. — powers our AI chat assistant; messages you send to the assistant are processed by Groq to generate responses.
- Anthropic, PBC — the AI model that generates the Web Police design analysis from a screenshot of the site you submit.
- Resend — transactional and notification emails.
- Cal.com, Inc. — scheduling and booking of calls.
We do not sell your personal information.
International Data Transfers
Because we and our providers operate internationally, your data may be processed in the European Union, the United States and other countries. Where data is transferred outside the EU, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
Data Retention
We keep personal data for as long as needed to provide the service and, after our relationship ends, for the periods required by law.
Your Rights
You may request to access, correct, delete, restrict or object to the processing of your data, or request a copy for portability, by emailing info@yele.design. If you are in the EU/UK and believe we have not handled your data properly, you may lodge a complaint with your local data-protection authority, or with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction of your information, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information. You will not be discriminated against for exercising these rights. To exercise them, email info@yele.design.
Cookies
Our use of cookies and similar technologies — including those set by Microsoft Clarity — is described in our Cookie Policy.
Children’s Privacy
Our service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.
Data Security
We apply reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version.