1. Who processes your data
The data controller is Pro Business S.r.l., Via Siegmund Freud 4, 09126 Cagliari, Italy, VAT number IT04009250921. For any request, write to privacy@yumafly.com.
2. What data we collect
- Your account: email address, name and, if you sign in with Google, the profile picture Google passes on to us. We do not receive your Google password.
- The photographs you upload and the three-dimensional models we derive from them. They contain images of buildings and places, and may contain the coordinates of the point where each shot was taken.
- Flight data: route, altitude, duration, number of shots. They help us understand why a reconstruction succeeds or fails.
- Your purchases: which packages you bought and when. We neither see nor keep your card details: Stripe handles them directly.
- Technical logs: IP address, device type, errors. They are kept only briefly and serve to keep the service secure.
We do not collect special categories of data and we do not carry out profiling. We do not sell your data to anyone, and we do not use it for advertising.
3. Why we process it
- To make the service work for you — creating your account, processing your photographs, keeping count of your credits. Legal basis: the contract between you and us.
- For the accounting and tax obligations that come with your purchases. Legal basis: a legal obligation.
- For security — noticing unusual sign-ins and misuse. Legal basis: our legitimate interest in protecting the service and the people who use it.
- To improve the service, using only aggregated and anonymous figures: how many photographs, how many minutes of processing, how many reconstructions succeeded. Never your images, never your models.
4. Where your data is kept
The service runs on Google Cloud and Firebase infrastructure. Your photographs, your models and your account data are stored and processed in the United States (region us-west1); some intermediate processing happens in Europe (Belgium).
The transfer goes to Google LLC, which adheres to the EU-US data protection framework (EU-U.S. Data Privacy Framework) and is bound by the standard contractual clauses approved by the European Commission. These are the safeguards provided for by articles 45 and 46 of Regulation (EU) 2016/679, the GDPR.
We tell you this openly so that you can decide it together with us: if the photographs of your building sites cannot leave the European Union, this service is not for you.
5. Who we pass it on to
Only to those we need in order to make it work, and only for that:
- Google Ireland Limited and Google LLC — infrastructure, storage, authentication and processing;
- Stripe Payments Europe Ltd — payments and invoicing;
- our accountants and lawyers, when needed, and the authorities in the cases laid down by law.
Each of them processes the data as a data processor, under a contract that requires it of them.
6. For how long
- Photographs and models stay for as long as you keep them: you can delete them whenever you like.
- If you close your account, your content is removed within thirty days.
- Accounting records are kept for ten years, because the law requires it.
- Technical logs are kept for twelve months at most.
7. Your rights
You may ask us at any time to give you access to your data, to correct it, delete it, restrict its processing, hand it to you in a machine-readable format so you can take it elsewhere, and you may object to processing based on our legitimate interest. Write to privacy@yumafly.com: we answer within a month.
If you believe your data is being handled badly you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority of the country where you live.
8. Cookies and similar tools
The site uses only your browser's own memory, to remember the language you chose and to keep you signed in. We use no profiling cookies and we have no third-party analytics tools following you around.
9. Children
The service is meant for people aged at least 18 and is not designed for minors.
10. Changes
If we change this notice in any significant way we will tell you by email or on sign-in, before the change takes effect.