Yahyou
Contact Us

Privacy Policy for Yahyou

Last Updated: 9th Jan 2026

1. Introduction

Yahyou ("we," "us," or "our") is a pioneering AI Governance and Risk Management consultancy based in Pakistan, with global operations in the USA and UAE. We are committed to protecting the privacy and security of the data we handle while providing specialized AI services, including AI Audits, Data Labeling, and Risk Mitigation.

2. Information We Collect

We may collect and process the following types of information:

  • Client Information: Contact details (name, email, phone number) and business information provided during consultations or service agreements.
  • Technical Data for AI Audits: Information regarding your AI models, system blueprints, and operational contexts provided to us for compliance and risk assessment.
  • Data for Annotation/Cleansing: Datasets provided to us for high-precision labeling or cleansing services.
  • Website Usage Data: Standard cookies and tracking data to improve our digital experience.

3. How We Use Your Data

Yahyou processes data strictly for the following purposes:

  • Service Delivery: Conducting independent AI compliance audits and building governance frameworks.
  • Data Strategy: Performing high-precision data labeling and eliminating algorithmic bias from training sets.
  • Regulatory Compliance: Ensuring your AI systems meet the requirements of the Pakistan National AI Policy 2025 and the EU AI Act.
  • Communication: Sending technical updates, audit reports, and organizational training materials.

4. Data Governance & Security

As a firm specializing in AI safety, we implement rigorous "Governance-by-Design" principles:

  • Data Integrity: We use objective scrubbing to remove inconsistencies and ensure the high-integrity of training data.
  • Bias Mitigation: Our labeling processes include specific steps to identify and neutralize algorithmic bias.
  • Technical Safeguards: We employ encryption, access controls, and secure data flow paths (following our CORE framework) to prevent unauthorized access.

5. Global Compliance & Data Sovereignty

We align our data practices with international mandates, including:

  • EU AI Act & GDPR: For clients operating in or interacting with the European Union
  • Pakistan National AI Policy 2025: For our primary operations and local clients.
  • NIST RMF: Following established risk management frameworks for global reliability.

6. Data Sharing & Disclosure

We do not sell your data. We only share information with third-party partners (such as our technology partner, Model Monster) when necessary to provide automated AI due diligence and only under strict confidentiality agreements.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. For inquiries regarding your data or our AI governance practices, please contact our Data Protection Officer.

8. Contact Us

Yahyou Digital Ltd