Unreleased posts stay private.
Your calendar holds launches, prices and campaigns nobody should see early. Here is how Yesmora keeps them that way.
Unguessable client links
Each approval link uses a long random token. Add a password or an expiry date, and turn any link off in one click. Links never show other brands.
Files are never public
Images and videos are stored outside the public web folder and served through short-lived signed addresses, only to your team or to people holding a valid link.
Separate workspaces
Every agency has its own workspace and every request is checked against membership and role: owner, admin, editor or viewer.
Account protection
Passwords are hashed with modern algorithms, sign-in is rate limited, sessions are signed, and every form is protected against cross-site requests.
A full audit trail
Every decision and comment is recorded with the person, time, version, IP address and browser. Export it as CSV or PDF.
AI only when you use it
AI helpers run only when someone clicks them. The caption text is sent to the AI provider you choose. Images are not sent. With no AI key set up, AI is simply off.
You own your data
Export posts, media and audit trails at any time. Owners can delete a brand or the whole workspace, and it is removed for good.
Where your data lives
Data is stored on the servers of our hosting provider, WP Engine. We do not sell data and we do not use your posts to train AI.
Quebec Law 25, in plain words
We are based in Montreal, so Quebec's privacy law (Law 25) applies to us, along with Canada's PIPEDA.
- A person in charge of privacyOur founder is responsible for the protection of personal information. Reach him through the contact page.
- Only what we needFor client reviewers, a name and an email typed once, plus the decision, time, IP address and browser for the audit trail.
- Outside Quebec, said out loudSome providers (hosting, email, payments, AI) may process data outside Quebec. We list them in the privacy policy and check they protect it properly.
- Access, correction, deletionAsk for a copy of your data, a correction or a deletion, and we answer within 30 days.
- IncidentsIf a breach could cause serious harm, we tell the people affected and the Commission d'accès à l'information, and keep a register.
Questions about security?
Need a security questionnaire filled in or a data processing agreement? We are happy to help.