Privacy

Privacy policy

Last updated: 18 August 2026

Emerald is a Ynai product. We collect the information needed to run accounts, bill customers, secure the service and measure API usage. We do not sell personal data.

What we collect

When you create an Emerald account we may collect your name, email address and account settings. API keys are stored in hashed form; the full key is shown when it is created and is not stored in readable form.

For usage metering we record the API key or account responsible for a request, the time of the request, the endpoint used and usage totals. Emerald does not need to keep the words you search for in order to meter your account, and we do not intentionally use legal search text for advertising or profiling.

When payments are enabled, Paystack will process payment details. Emerald will keep the payment reference, plan, amount, status and other billing information needed to manage your subscription. We do not store full card numbers.

Why we use this information

We use account data to provide the service, authenticate API requests, show usage, prevent abuse, handle support and maintain billing records. We may also use aggregate, non-identifying usage information to understand service load and improve reliability.

Service providers

Emerald uses infrastructure and payment providers to operate the service, including Neon for database hosting, Cloudflare for object storage, Railway for application hosting and Paystack for payments. Some providers may process data outside Kenya. Where personal data is transferred outside Kenya, we will use the safeguards required by Kenyan data-protection law.

Retention

Account information is kept while your account is active and for as long as reasonably needed afterwards for security, billing, disputes and legal obligations. Routine operational logs are kept for the shortest practical period. Billing records may be retained for longer where accounting or other law requires it.

Your rights

Kenyan data-protection law gives you rights over your personal data, including the right to be informed, access your data, object to processing, ask for inaccurate data to be corrected and request deletion where applicable. Data portability may also apply.

To exercise a privacy right, email legal@ynai.co.ke. We may need to verify that the request relates to your account before acting on it.

Cookies

Emerald does not use advertising cookies. Essential cookies may be used for signed-in account sessions once the customer account area is enabled.

Security

We use access controls, hashed API keys, encrypted connections and restricted infrastructure credentials. No online service can guarantee absolute security, so customers should revoke an API key immediately if they believe it has been exposed.

Changes

We may update this policy as Emerald changes. The date at the top of the page will show the latest revision. Material changes affecting customer data will be communicated through the service or by email where appropriate.

Contact

Privacy questions can be sent to legal@ynai.co.ke.