The following notes provide a simple overview of what happens to your personal data when you visit this website or use our app USELY. Personal data is any data by which you can be personally identified. Sections 3 to 7 concern this website, sections 8 to 14 the use of USELY. In the app and its web interface we use no advertising or analytics services and no tracking.
The controller responsible for data processing on this website and in the app USELY is:
YG MEDIA, Yasin Gündogdu
Rottendorferstraße 99, 97074 Würzburg, Germany
Email: info@yg-media.de
This website is hosted by an external service provider. The personal data collected on this website is stored on the host's servers. Host: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (GitHub Pages). The collection is based on Art. 6 (1) lit. f GDPR. A data processing agreement (DPA) is in place with the host.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources.
If you send me inquiries via the contact form or by email, your details including the contact data you provide will be stored for the purpose of processing the inquiry and in case of follow-up questions. Processing is based on Art. 6 (1) lit. b GDPR (initiation of a contract) or lit. f GDPR (legitimate interest in processing). The contact form is processed via the service Formspree.
I use the service Calendly for booking intro calls. When booking, the data you enter (e.g. name, email, preferred date) is transmitted to Calendly and processed there. The legal basis is Art. 6 (1) lit. b GDPR.
This website uses cookies. Essential cookies are required for the operation of the site. Analytics cookies (e.g. Google Analytics) are only set if you have actively consented in the cookie banner. The legal basis is your consent according to Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can revoke your consent at any time with effect for the future.
Where Google Analytics is activated, it is used with IP anonymization enabled. The provider is Google Ireland Limited. Further information can be found in Google's privacy policy.
Sections 8 to 14 concern the use of USELY, our accounting app for freelancers and small businesses (iOS app from the App Store and web app). For sign-in, data storage and server services, USELY uses the Supabase platform (Supabase, Inc.). Our project's data is stored on servers in the European Union (Ireland region). Processed are the data you create in USELY (company, customer, document, expense and project data, receipt images and file attachments) as well as the account data required for sign-in (email address, encrypted password, sign-in timestamps). The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract). A data processing agreement (DPA) is in place with Supabase.
For sending documents and for the receipt inbox, USELY uses the email service Resend. The provider is Plus Five Five, Inc. ("Resend"), 2261 Market Street #5039, San Francisco, CA 94114, USA.
Outgoing documents: When you send a document from USELY, the service delivers the email to the recipient you specified. Processed are the recipient address, subject and body of the message as well as the attachments (document PDF and, if you choose, the e-invoice as XRechnung or ZUGFeRD) including your customer's data contained in them. Delivery time and delivery status are additionally recorded in your account so that you can prove dispatch.
Receipt inbox (incoming documents): On request, your company receives a secret email address under the domain in.usely.yg-media.de. Messages forwarded to that address are received by Resend on our behalf; we take the file attachments from them (for example incoming invoices, receipts, e-invoices) into your inbox and store them in the backend described in section 8. Processed are the sender address, subject, time of receipt and the attachments; we do not store the body of the message. Anyone who knows the address can submit receipts, which is why you can replace it with a new one at any time. Discarded entries are permanently deleted after 30 days.
The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract), as sending and receiving are part of the agreed document functions. A data processing agreement (DPA) is in place with the provider. The receiving servers for the receipt inbox are located in the European Union (Ireland region); processing by the provider also takes place in the USA. According to the provider, this transfer is based on the EU-U.S. Data Privacy Framework and on the European Commission's standard contractual clauses. The provider publishes the sub-processors it uses at resend.com/legal/subprocessors.
If you photograph an expense receipt or attach an invoice as a PDF, the file is transmitted to Anthropic's application programming interface for automatic text recognition and evaluated there in order to suggest amount, date, tax rate and supplier. For customers in the European Economic Area, the contracting entity is Anthropic Ireland, Limited. Receipts may contain personal data such as names and addresses. According to the provider's terms, content submitted through the interface may not be used to train models. The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract), and a data processing agreement (DPA) is in place with the provider. Recognition is optional: you can enter amount, date and category yourself at any time, in which case the receipt is not transmitted to the service.
USELY Pro is a subscription. If you purchase it in the iOS app, the contract runs through Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland). Payment processing lies entirely with Apple; we receive no payment data, only the information from your device whether a subscription is active. If you purchase Pro through the web app, payment runs through Stripe (Stripe Payments Europe, Limited, Dublin, Ireland). Your card details are processed exclusively by Stripe and do not reach us; we store the identifier and status of the subscription. If you issue payment links to your customers, Stripe processes your customer's payment; this function is currently not generally enabled. The legal basis in each case is Art. 6 (1) lit. b GDPR. A data processing agreement (DPA) is in place with Stripe; for purchases through the App Store, Apple is the seller of the purchase and processes the payment data under its own responsibility.
If you connect your business bank account in order to match incoming payments to open invoices automatically, we use the account information service finAPI (finAPI GmbH, Munich, Germany) for this purpose. Sign-in takes place exclusively with your bank or in the provider's environment; your banking credentials do not reach us, and we cannot initiate payments. Transmitted and stored are the retrieved transactions (amount, date, payment reference, name of the payer) in order to match them to your documents. The legal basis is Art. 6 (1) lit. b GDPR. This function is currently not generally enabled.
USELY users can share documents, for example quotes, with their customers via a protected link. If such a link is opened or a quote is accepted or rejected through it, we store the time, IP address, browser identifier (user agent) as well as the name entered when replying and an optional message. The legal basis is Art. 6 (1) lit. f GDPR, the legitimate interest of the document issuer and of us in being able to prove delivery as well as acceptance or rejection. The document page points out this logging before you reply. The log data is deleted when the associated document or the user account is deleted.
You can delete your account at any time inside the app (Profile, Delete account). Deleted are your access and your personal data as well as customer, project and expense data. If you have sent invoices or received online payments through USELY, the associated document and payment records are not deleted but anonymised and blocked: they are subject to statutory retention periods (Section 147 of the German Fiscal Code, up to ten years) and are permanently removed once those periods expire. Before deletion you can export your data (Profile, Export my data).
You have the right at any time to receive free information about your stored personal data, its origin and recipients and the purpose of the data processing (Art. 15 GDPR) and, where applicable, a right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a supervisory authority.
For security reasons, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address bar (https://) and the lock symbol.
As of: September 2026.
This English translation is provided for convenience only. The German version is the legally binding one.