Privacy Policy
Who we are
Yes No Capital LLC is a limited liability company registered in the State of Minnesota, with a mailing address at 202 N Cedar Ave, Ste 1, Owatonna, MN 55060. We publish Full Digital Twin at fulldigitaltwin.com. Yes No Capital LLC is the data controller for the personal information described here. Questions go to [email protected].
The core commitment
Full Digital Twin is local-first. Raw data (your documents, sensor streams, recordings, images and personal information) is processed on your device. Only derived, anonymized or summarized outputs are synchronized to our cloud. That is the foundation of the architecture, not a setting.
- Your device holds raw documents, sensor streams, recordings, images, conversations and every source you connect. We never receive them.
- On-device processing parses, analyzes, anonymizes and derives every output, on your machine.
- Our cloud holds derived outputs only (anonymized summaries, categories, twin state metadata) plus your account and, when paid plans open, billing records. You and anyone you explicitly authorize can reach them.
- Never stored by us: raw documents, full sensor streams, unredacted recordings, identifying images or source content.
The short version
- We collect what the service needs to run and bill you, and nothing we cannot explain here.
- We do not sell your personal information.
- We email you about your account. We market to you by email only if you opt in, and by text message only if you opt in separately. You can turn either off at any time.
- If we ever want to use your information for a materially new purpose, we tell you first and, where the law requires it, we ask.
- We keep a record of which version of this policy you accepted and which channels you turned on, so neither of us has to guess later.
What we collect
Account information. Your email address, your name, and a mobile number only if you choose to receive text messages. You sign in with a one-time code sent to your email or with a passkey; we never collect or store passwords. If you register a passkey we store its public key, never your fingerprint or face data.
Derived twin outputs. The anonymized, summarized or categorized outputs your device produces, and the encrypted messages and files you send to other twins through our relay. Messages and files are encrypted on your device; the relay and our storage see only ciphertext, and shared files are deleted from our storage once every recipient has collected them, or after seven days.
Setup and health reports. The installer and the twin send short status reports so a stalled setup can be helped: step names, exit codes, platform, error categories, an anonymous install id and, once you sign in, your account. They never carry message content or the contents of your files. Set FDT_TELEMETRY=0 to turn them off. If you run the diagnostic script, it uploads the environment and configuration state it collects, under your account.
Vehicle trips. If you connect a vehicle and push its trips, we store the vehicle's VIN and per-trip summaries (start time, distance, speed, fuel use, engine readings and similar figures) for your own dashboard. No GPS track and no second-by-second readings leave your device.
Payment information. Nothing is charged today. When paid plans open, payments are processed by a payment processor. We see the card brand, the last four digits, the billing country and the payment status. We never see or store your full card number.
Usage information. Pages you visit, actions you take inside the service, your IP address, browser type, device type and time zone, and server logs that record requests and errors.
Content you give us. Settings you choose, messages you send to support, and anything you choose to send to the cloud side of the service. Source content you connect to your local twin stays on your device.
What we do not collect. Raw source documents or sensor streams, full images, audio or video, biometric templates, and identifying numbers such as Social Security numbers unless you put one in a field built to hold it.
Information from others. Delivery status from our email and text message providers (for example, that a message bounced), and fraud signals from our payment processor.
Why we use it
- To provide the service you signed up for and keep your account working.
- To bill you, send receipts, and handle refunds.
- To keep the service secure and to detect fraud and abuse.
- To answer your support requests.
- To understand how the service is used and to improve it. We use analytics on aggregated usage for product improvement and research.
- To meet legal obligations, including tax record keeping.
- To send you marketing, only through the channels you have opted in to.
How we contact you
Account email. We send email about your account, billing, security and changes to the service or to these policies. You cannot opt out of these while you hold an account, because they are how we run it.
Marketing email. Only if you opt in. Every marketing email carries an unsubscribe link and we honor it within ten business days, usually at once.
Text messages (SMS). Only if you opt in separately by giving us a mobile number and checking the text message box. Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out and HELP for help. Consent to receive text messages is not a condition of any purchase. Carriers are not liable for delayed or undelivered messages. We keep the exact wording you agreed to, the time, and the number you gave.
Push and in-app notices. Only if you enable them on your device or in your settings, and you can disable them there.
New channels. If we add a new way to reach you, we will ask you before we use it with you. We will not move your consent from one channel to another.
AI and automated processing
Your twin runs on your device. If you turn on reply drafting, you choose the model: a cloud AI model you already use, which then receives the message and the draft it works on, or a local model that runs on your own machine so the content never leaves it. If the local model is not running, nothing is drafted; we never fall back to the cloud. We do not use your personal information or your twin's data to train AI models and we do not sell it to anyone who does. If that ever changes we tell you first and ask.
Who sees your information
We share personal information only with service providers who process it on our instructions, in these categories: hosting and content delivery, payment processing (card payments today, and bitcoin or stablecoin payments if we ever offer them), email delivery, text message delivery, analytics, customer support tools and AI model providers used to run features of the service. Each is bound by contract to use the information only to provide its service to us. A current list of providers is available on request at [email protected], and we can swap a provider in a category without changing this policy. Today those providers are Cloudflare (hosting, content delivery, database and storage) and Resend (email delivery). Enterprise deployments may add integrations under the enterprise agreement.
We disclose information when the law requires it, to protect our rights or safety or yours, or as part of a merger, acquisition, financing or sale of all or substantially all of our assets. In a business transfer the successor takes the information under this policy or one at least as protective, and we will tell you before any materially less protective policy applies.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
New purposes
We will not use information we already hold for a materially new purpose that this policy does not describe without telling you first and, where the law requires it, asking for your consent. A new purpose applies going forward, not to the past.
How long we keep it
Account information for as long as your account is open and for thirty days after it closes, so you can come back and so we can resolve disputes. Billing records for seven years, as tax law requires. Server logs for ninety days. Consent records for as long as we might need to show what you agreed to, which is at least four years after the consent ends. When you ask us to delete your account we delete or anonymize what the law lets us delete and keep only what it requires us to keep.
Your choices and rights
You can ask us to show you the personal information we hold about you, correct it, give you a copy in a portable format, or delete it. You can withdraw marketing consent at any time without affecting the service. You can object to a use you think is unfair. Email [email protected] from the address on your account. We respond within thirty days and we will never treat you differently for exercising a right. Where a state privacy law gives you more than this, you have it, and if we deny a request you may appeal by replying to our answer.
Security
Information moves over encrypted connections and sits in systems that only named people and services can reach. Sign-in sessions use HttpOnly, Secure cookies, and a sign-in code expires ten minutes after it is sent. Because raw data stays on your device, a breach of our cloud would expose derived outputs, not your source documents. No system is perfect. If a breach affects your personal information we will tell you without undue delay and within the time the law sets, and we will say what happened and what we are doing about it.
Cookies
We set the cookies the service needs to keep you signed in and secure. We do not use analytics cookies, advertising cookies, tracking pixels or third-party tracking scripts. Our host counts page requests on its own servers without setting any cookie.
Health and sensitive data
If you use Full Digital Twin with health data, the raw records stay on your device and are not sent to us. We are not a HIPAA-covered entity by default and sign Business Associate Agreements only under enterprise deployments with healthcare customers. If you process health data yourself, the health privacy laws that apply to you are yours to follow.
Children
Full Digital Twin is for adults. We do not knowingly collect information from anyone under eighteen. If you believe a minor has given us information, email us and we will delete it.
Where the information lives
We operate from the United States and our providers store information there and in other countries where they run. If you use the service from elsewhere you send your information to the United States.
Changes to this policy
This policy carries a version number and an effective date at the top. A change is material if it reduces what you can do or what we owe you, adds a new way we use your personal information, or adds a new way we contact you. Adding a feature, fixing an error, rewording for clarity, updating a name or address, adding or swapping a service provider in a category this policy already lists, and changes that are better for you are not material. For a material change we email every account holder at least thirty days before the new version takes effect, and the change applies going forward only. If the law or a court requires a change sooner, or an urgent security problem leaves no time, we make only that change, tell you by email on the day it takes effect, and say why. If a change is better for you, it can take effect when posted. For a non-material change we update the version and date here. Past versions are available on request. If you do not agree with a change you can close your account before it takes effect.
The record we keep
When you accept this policy, turn a channel on or off, or accept a new version, we record the version, the time, the IP address, and the exact words you were shown. This is how we can prove to you, and to anyone else, what you agreed to.
Contact
Yes No Capital LLC, 202 N Cedar Ave, Ste 1, Owatonna, MN 55060. Email [email protected].