Privacy policy
Last updated 13 October 2026.
Yeply lets shops that sell with Stripe email offers to their buyers, who buy by replying “Yes”. This page says what data Yeply handles, for whom, where it is kept, and how to reach us. Yeply is run by Nexio: write to hello@yeply.app.
For whom Yeply handles data
If you bought from a shop that uses Yeply, that shop decides what is done with your data: it is the controller. Yeply processes your data for the shop, on its instructions, under a data processing agreement. Write to the shop first about your data; we help it answer. You can also write to us, and we pass your request on.
If you run a shop on Yeply, Nexio is the controller of your account’s data, which Yeply uses to provide the service you signed up for.
What Yeply processes for shops
About each of a shop’s buyers:
- their email address and name, from the shop’s Stripe account;
- from Stripe, their successful payments, what they bought, and the brand and last four digits of their saved cards. Full card numbers stay with Stripe: Yeply never sees or stores them;
- whether they agreed to the shop’s marketing emails, and whether they unsubscribed;
- the emails Yeply sends them for the shop, their replies, and what each reply did (a payment, an answer);
- when they opened an email, only if the shop turned open tracking on. Each of those emails has a link that stops it.
Yeply uses this to send the shop’s offers and newsletters, to read replies and charge the card when a buyer replies “Yes”, to answer them, to deliver what they bought, and to stop emailing anyone who unsubscribes. Payments are made on the shop’s own Stripe account.
What Yeply keeps about shops
- the account’s email address and password (stored hashed), the shop’s name, domain and settings;
- the shop’s Stripe account id and the access it granted Yeply (stored encrypted).
Where the data is
- Yeply’s server and database are in Canada. The European Union recognises Canada’s protection of personal data as adequate.
- Emails are sent and received through PostShiba, which keeps the replies it receives for 7 days, for Yeply to collect. Where PostShiba stores data, and how long it keeps the emails it sends, are still to be confirmed with PostShiba. This policy will say once they are.
- Encrypted backups of the database are kept at Backblaze, in its EU Central region, in Amsterdam. Each backup is deleted 31 days after it is made.
- Every visit to yeply.app and to shops’ order pages goes through Cloudflare, which protects the site and serves it over HTTPS.
- Payments stay in the shop’s Stripe account.
How long it is kept
A buyer’s data is kept while the shop uses Yeply. When the shop asks, or closes its account, it is deleted from the database, and it leaves the backups as they expire, within 31 days. A shop’s own account data is kept while the account is open.
Cookies
yeply.app only sets the cookies it needs to keep shops signed in. It has no advertising or analytics cookies, and serves its own fonts, so a visit sends nothing to Google.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, or to get a copy of it. If you’re a buyer, ask the shop, or write to us and we pass it on. The unsubscribe link in every email works at once. You can also complain to your data protection authority.
Changes
When what Yeply does with data changes, this page changes, and so does the date at the top. Questions: hello@yeply.app.