Legal
Privacy Policy
Last updated: 6 November 2026
Who we are
Yakiba (“Yakiba”, “we” or “us”) provides AI code security audits at yakiba.ai. This policy explains how we handle personal information. We handle it in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
What we collect
When you request an audit
- Your work email and where your code is hosted.
- If you choose to give them: your name, company, team size and organisation type.
- Which button you used to open the form, your browser type and the time of the request.
When you buy an audit
- Your name, email, billing country and payment status, from our payment processor, Stripe. We never receive your full card number.
Your code and reports
- Read-only access to the repository you choose. Code can contain personal information, such as names in commit history. We process it only to perform your audit, and we do not keep a copy after the scan finishes.
- The report we generate for you.
Technical information
- Our hosting provider keeps standard server logs, such as IP address, browser and pages requested, for security and reliability.
- Emails you send us.
How we use it
- To respond to your request, set up and deliver your audit and any retest, and take payment.
- To send service emails, such as order confirmations, sign-in codes and report delivery.
- To keep the service secure and prevent fraud and abuse.
- To meet our legal and tax obligations.
We only send marketing emails if you agree to receive them, and you can unsubscribe at any time.
AI processing
Your code is analysed by three third-party AI models. We only use providers whose terms do not allow them to train their models on your code. We never use your code to train AI models.
Who we share it with
We do not sell personal information. We share it only with the service providers we use to run Yakiba:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting and server logs |
| Neon | Database for requests and orders |
| Stripe | Payment processing |
| Resend | Sending service emails |
| AI model providers | Analysing code during an audit |
| GitHub, GitLab, Bitbucket | Repository access you authorise |
We may also disclose information if the law requires it.
Overseas disclosure
Some of these providers store or process information outside Australia, including in the United States. We use providers whose terms require them to protect it.
Cookies
The website does not use advertising or tracking cookies. When you sign in or buy an audit, we set a cookie to keep you signed in to your dashboard for up to 30 days, or until you sign out. Our staff admin area uses a cookie to keep authorised staff signed in.
Security
All traffic to yakiba.ai is encrypted. Repository access is read-only, code is not kept after the scan, and only authorised staff can sign in to see requests.
How long we keep it
- Audit requests: until you ask us to delete them, or 12 months after our last contact.
- Reports: 30 days after delivery, unless you choose to keep them.
- Payment records: for as long as Australian tax law requires.
Access, correction and deletion
You can ask to see, correct or delete the personal information we hold about you by emailing hello@yakiba.ai. We respond within 30 days.
Complaints
If you have a privacy concern, email us first and we will work to resolve it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
We may update this policy and will publish the new version here.