AI Feature Privacy Notice

Scope and availability

This notice supplements the Website and YSUITS ID Privacy Notice and the Product Privacy Addendum. It explains document recognition, extraction, summarization and other AI assistance only to the extent the relevant function is enabled for your service. YERP is the currently listed product. YTransform and a general-purpose assistant are not made available by this notice, and YTAX and YNOTE remain Coming Soon.

Availability depends on your service and plan. We identify any external processing provider and its purpose before you use the relevant function. The Service Providers and Subprocessors notice distinguishes operating providers, limited evaluations and optional customer connections.

Information involved

A requested document operation can involve the file or selected pages, image pixels, visible handwriting or printed text, document metadata, extracted text and fields, page locations, your instructions, and the resulting suggestions. A receipt or payroll document can contain names, contact details, financial information or information about other people even when those details are incidental to the task.

The service also needs limited operational information, such as the organization and request identifier, permission and subscription checks, usage counts, processing status and errors. These records serve access control, metering, support and abuse prevention. A usage record is different from permission to use the document for an unrelated purpose.

Camera permission lets your device capture the image you choose. It does not authorize continuing surveillance or access to all device photographs. Review the image and remove unrelated pages or unnecessary sensitive details before submitting it.

Purpose and authority

Customer content is processed to perform the operation requested by an authorized user, present its result, support permitted review and preserve the records the organization directs us to retain. You must have authority to submit other people's information. An administrator's permission within the software does not replace a lawful basis, a required notice or a person's separate consent.

Do not submit passwords, authentication secrets or unnecessary government identifiers. Taxpayer, student, child, health, biometric and other restricted information requires the applicable additional safeguards and authority. An ordinary AI upload or account acknowledgement is not separate tax-disclosure, parental or biometric consent.

External providers and model training

An external recognition or model provider receives the content needed for the particular requested operation, together with necessary processing metadata. A customer-selected integration may be governed by the customer's own provider agreement. Review the disclosed provider, purpose and any relevant transfer terms before using that connection.

We do not use customer workspace content to train general-purpose AI models, and do not instruct or authorize providers acting on our behalf to use it for that purpose. Submission for a requested operation does not give permission to publish the content or reuse it as a training dataset. Enabling an external service requires provider terms and settings appropriate to the data and purpose. Provider retention and processing locations depend on the applicable service arrangement; an independently selected provider's own terms also apply.

Support troubleshooting involving document content must use an authorized, access-controlled handling route and be limited to the records needed.

Results and human review

Recognition and generated suggestions can omit information, misunderstand context or produce incorrect amounts, dates, classifications and explanations. Review the source and the result before approving a record, filing a return, paying someone or relying on a report. Correct OCR text does not establish that an accounting treatment or legal conclusion is correct.

AI output is assistance to an authorized person. This notice does not authorize solely automated decisions that produce legal or similarly significant effects, such as decisions about employment, credit, education, insurance or access to benefits. Such a use needs its own lawful assessment, notices, safeguards and any required consent before introduction.

Storage, access and deletion

An uploaded original, extracted content, saved report, processing queue and operational log can have different retention purposes. Review the Retention and Deletion Notice and any expiry shown for a trial item. A failed request, a dismissed suggestion or closing your browser does not establish that every submitted copy has been deleted.

Authorized organization members may review the originals and results within their permissions. Access for support or incident investigation must be limited to the relevant task. Do not send complete confidential documents in an initial support email; describe the issue so an appropriate handling route can be arranged.

To request access, correction, restriction or deletion, contact your organization's administrator or support@ysuits.com. Include the relevant service and request reference if available. We review authority, other people's information, record-preservation duties and provider handling before confirming an outcome.

Changes and contact

A materially different AI purpose, new provider use or new disclosure requires the relevant notice and any legally required authorization before it starts. This document is not a blanket consent for future AI features. Contact support@ysuits.com with a question about an operation or provider.