Privacy Policy

Last updated : 18/10/2026

1. Data collected

We collect the data strictly necessary for the operation of the service: identifiers, establishment information, educational data (classes, teachers, timetables), technical data (logs, IP address, user agent).

2. Purposes

• Provide the timetable generation service
• Authenticate users and secure their accounts
• Improve the service through anonymized statistical analysis
• Contact you for support and service communications
• Comply with our legal obligations

3. Legal basis

Processing is based on performance of the contract (Terms of use), your consent, and our legal obligations (GDPR article 6).

4. Retention

Account data kept for the duration of the contractual relationship. Security logs kept for 12 months. After account deletion, anonymization within 90 days.

5. Security

TLS encryption of all communications, passwords hashed with BCrypt, strict multi-tenant isolation, full audit log, encrypted backups.

6. Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection. To exercise them: dpo@yaplanning.com

7. Cookies

We use only technical cookies necessary for the operation of the service (authentication). No advertising or third-party tracking cookies.

8. Subprocessors

Postgres and application hosting with providers located in the EU. Detailed list available on request.

Non-contractual document — provisional version to be validated with a DPO before going into production.