Legal and privacy

Who runs yoru

yoru is operated by PlimaFlow B.V., the Netherlands.

Chamber of Commerce (KvK) number 99453088.

Not advice

yoru shows chances from public market data. It does not know your plan and is not financial advice. A fair market can still go against you.

Privacy

Forms on this site keep your email address, the date and which form you used, for example a request for a sample risk sheet. We use it to answer you. Nobody else gets it. Ask us and we delete it; otherwise it is deleted after 12 months.

Wallet checks on this site run in your browser against public data from the exchanges. We do not keep the addresses you paste. Your browser loads fonts from Google Fonts and market data from Hyperliquid’s public API, so those services see your IP address. Visits are counted with Cloudflare Web Analytics, which sets no cookies. The whale board shows public Hyperliquid positions of 500k USD or more with shortened addresses; write to us to have an address left off it.

In the bot, we count which link brought you (the campaign code in a start link) and your Telegram language setting, stored against a one-way hash of your chat id, never the id itself. Exchange keys are read-only (a key that can trade, transfer or withdraw is refused), stored encrypted and tied to your chat; /disconnect deletes them.

Your yoru account (yoru.trade/app): you sign in with email, a social account (Google, Apple, X, Discord, Telegram) or a wallet. Sign-in is run by Privy, which sends the email codes and checks the social logins; we receive your Privy id and the accounts you choose to link. A wallet sign-in signs one message, which moves nothing, and Privy never creates or holds a wallet for you. We keep your wallet addresses, when you signed in, the Telegram and Discord accounts you link, your plan and payments (plan, amount, date, the payment's id and, for USDC, the address it came from) and, if you pay by card, the email address for your receipts. One cookie of ours keeps you signed in, and we set no tracking cookies. The account page loads Privy’s sign-in script, which sets its own cookies and a device id for sign-in to work. Card payments are taken by Revolut on its own page, so we never see your card. USDC payments are public on Hyperliquid, Arbitrum and Base, as every transfer there is. Paying with Coinbase opens Coinbase's own window, where Coinbase's privacy policy applies; we see only the transfer. Payment records are kept as long as the law asks for bookkeeping (seven years in the Netherlands); ask us and we delete the rest.