Privacy notice

Last updated 2026-07-27.

Who we are

Yuh Gettin' Tru? is operated by Dharach Pte. Ltd., a Singapore-incorporated company. Dharach is the data controller for personal information collected through this Site.

Our privacy contact is listed on the contact page.

What we collect

• Account data. When you create an advertiser account we collect your name, business name, email and password hash.
• Campaign data. Campaign names, business descriptions, uploaded reference images, generated banners and destination URLs.
• Source images. Files you upload for AI generation are stored privately and processed by OpenAI's image API. They are not published at guessable URLs.
• Billing data. Stripe customer and subscription identifiers, billing period, plan quantity, invoice metadata. We never store full card numbers.
• Usage data. Searches, impressions, clicks, device metadata, session identifier, IP address (truncated in analytics) and support correspondence.

Why we use it

We use this data to operate the product, bill advertisers fairly, prevent abuse, comply with legal obligations and improve matching quality.

Processors

We rely on carefully selected processors. The current list is: Stripe (billing), the configured transactional email provider, OpenAI (creative generation and image understanding), Google Cloud Storage (creative hosting), our hosting provider, Google Analytics (only with consent) and Meta Pixel (only with consent).

International transfers

Our processors may store or process data outside of Barbados, including in the United States and the European Economic Area. We rely on standard contractual clauses or equivalent safeguards for those transfers.

Retention

Raw impression and click records are retained for 180 days. Account data and revision history are retained for the lifetime of the account plus 7 years for tax and audit purposes. Verification and reset tokens expire automatically.

Your rights

You may request access to, correction of, or deletion of your personal data. Email our privacy contact to make a request. We respond within 30 days.

Security

We encrypt connections with TLS, hash passwords with bcrypt, scope advertiser sessions, version them so password changes invalidate old sessions, and store only SHA-256 hashes of single-use tokens.

Children

The Site is not directed at children under 16. We do not knowingly collect their data.

Changes

We will post the updated effective date at the top of this page when we make material changes.