Yours is operated by Shenzhen Lexmount Technology Co., Ltd. (“we,” “us,” or “our”). We provide file hosting, work display, link sharing, comment-based collaboration, and AI agent integrations. This policy explains how we handle your personal data.

The information we process depends on the features you use:

• Account information: When you sign in to Yours using email, Google, GitHub, WeChat, or your organization’s single sign-on (SSO) service, we collect the account and authentication information needed from you or the relevant authentication provider. Depending on your sign-in method, this may include your email address, display name, profile picture, and account identifier. We use this information to verify your identity, sign you in, and manage your account.
• Content and comments: We process the files you upload, information about your content, comments, and related activity records to host, display, and update your content and support collaboration.
• Sharing and authorization information: We process access permissions, designated email addresses, access verification information, and agent authorization records to control access to content and carry out authorized actions.
• Usage and support information: We collect IP addresses, access times, browser types, and error logs generated when you access and use Yours, along with contact details, descriptions of issues, and supporting materials you choose to provide when contacting us for help. We use this information to operate the service, troubleshoot problems, maintain security, and respond to your inquiries.

We process personal data only where we have a lawful basis, such as where it is necessary to provide the service or comply with a legal obligation, or where we have your valid consent. If you do not provide information required for a particular feature, that feature may not work. Declining optional processing will not affect your use of other features.

We provide access according to your sharing settings. “Anyone with the link” allows link recipients to view, save or forward your work; it does not by itself list the work in Discover. A work appears in Discover when its effective settings enable public listing, including settings inherited from a folder or account. Changing or revoking one link does not revoke other active links or direct memberships.

Comment visibility depends on access to the work and its discussion settings. Independent share links have separate discussions. View-only links do not grant access to a discussion; comment and edit links grant the configured discussion access. Authorized owners and administrators can manage discussions within their permissions.

You can revoke an agent's authorization in the account menu → Connection management. Revocation stops subsequent authorized access; it cannot retrieve information a third-party agent has already received. Independently chosen agent providers apply their own privacy policies.

We do not use your uploaded work to train general-purpose AI models, and require model providers processing work on our behalf to meet this condition. Where enabled, content moderation may process the material needed to check safety; inference for moderation does not authorize training. Any configured moderation provider and processing location must be disclosed before that processing begins.

Necessary cookies and local storage support sign-in, authorization and access checks, language preferences, browser-created work credentials, recent work, optional comment drafts, legal acknowledgements and privacy choices. You can manage browser storage in your browser settings; clearing it may sign you out or remove locally held credentials, preferences or drafts.

Google Analytics 4 loads only after you choose Allow analytics. Choosing not to allow analytics leaves core features available and blocks Google Analytics, including cookieless measurement pings. You can withdraw consent in Privacy settings in the footer; this stops future analytics and removes accessible analytics cookies. Withdrawal does not retrospectively delete data already sent; contact us to request deletion.

With consent, analytics measures page categories, visits, referral origins, allowlisted campaign tags, uploads, sharing, downloads, sign-in and updates. It can associate events with your internal account identifier when you sign in. This is pseudonymous, not anonymous. Our event fields exclude work and comment text, email addresses, credentials and specific work/share addresses. Google also processes browser/device information and client/session identifiers. Advertising personalization and Google Signals are disabled. User/event data is retained for 14 months without reset on new activity; this does not set the lifespan of every aggregated report or browser cookie.

Service providers and their processing locations are listed below. Replacing Google Analytics with a self-hosted system does not automatically expand the purposes or categories of data collected. We will update the notice and seek renewed consent where required.

Hosting location: Mainland China (Tencent Cloud). Account information, work, files, comments and history are kept while needed to provide the requested service. Deleted work files have a 30-day recovery period before cleanup. Closing an account follows a verified request: credentials are revoked and affected work is restricted; data due for deletion is removed from active systems or irreversibly anonymized as soon as practicable and within 30 calendar days of closure taking effect. Shared work owned by other people is reviewed separately to protect their rights.

Backups rotate within 30 days after active-system cleanup, with a maximum of 60 days from effective account closure. Restricted backups are used only for recovery and security. Deletion records are reapplied before restored data is made available. A legally required retention or hold is limited to the necessary data and purpose; we explain applicable exceptions when handling your request.

Access and audit records are retained only while needed for security, troubleshooting, disputes and legal obligations. The current deployment has no automatic age-based deletion of these records; necessity is reviewed and rights requests remain available. Notifications normally expire after 90 days. Google Analytics user/event retention is separately set to 14 months without reset on new activity.

We use safeguards appropriate to the risks and meet applicable incident-notification and cross-border processing requirements.

Use the work's management and sharing controls to edit or delete your work and manage access. Revoke agent access through the account menu → Connection management. Change optional analytics in Privacy settings. For access, copies, correction, deletion, account closure, transfer where legally available, or explanations that are not available through a self-service control, contact yours.support@lexmount.com.

After necessary identity verification, we will handle and respond to your request within 15 working days. This response period is distinct from the account-cleanup and backup deadlines above. We will explain any lawful refusal or restriction. Withdrawing consent does not affect earlier lawful processing, and you may complain to the relevant authority or seek judicial remedies.

The service is intended for users aged 14 and over. Users under 18 should use it with the consent and guidance of a parent or guardian. If we discover that we have collected personal data from a child under 14 without parental or guardian consent, we will promptly investigate and delete the data or take other necessary action as required by law. Parents and guardians can contact us using the details below.

We will post updates to this policy on this page and prominently notify you of material changes. Where the law requires renewed consent, we will ask for it separately.

Service operator: Shenzhen Lexmount Technology Co., Ltd.

Email: yours.support@lexmount.com

Tencent Cloud provides hosting, database, storage, backup and necessary infrastructure services. Hosting data is processed in the product deployment region: mainland China for the mainland deployment and Hong Kong, China for the Hong Kong deployment. The current site's hosting region is Mainland China (Tencent Cloud). The contracting Tencent Cloud entity is identified by the applicable service order or agreement. Region-specific and enterprise arrangements, including provider support or remote access, may differ and are available from yours.support@lexmount.com. Tencent Cloud privacy information: https://cloud.tencent.com/document/product/301/11470.

Google Analytics (Google LLC) provides optional website usage analytics only after consent. It receives the limited event and identifier categories described in the Privacy Policy, not uploaded work or comment text. It uses Google's global infrastructure and may process data outside your country or hosting region. User/event retention is 14 months without reset on new activity. Provider policy: https://policies.google.com/privacy. Analytics for our own website is separate from entrusted processing of personal data in your work.

Identity providers and AI assistants you choose operate under their own policies. When we add a provider to process your work on our behalf, we disclose the provider, purpose, data and processing location and obtain the required authorization before processing. We require appropriate contractual protection and do not authorize general-purpose model training.