Legal

app0 Cookie Policy

Last updated 21 October 2026

This Cookie Policy explains how Yori AI Limited (“Yori AI”, “we”, “us”) uses cookies and similar technologies on app0.si and in the app0 app. It should be read with the Privacy Policy.

1. What cookies are

Cookies are small text files that a website stores on your device. They let the site remember things about your visit, such as whether you are signed in. Similar technologies include local storage and session storage, which let a site keep information in your browser. In this Policy, “cookies” includes those technologies.

2. How app0 uses cookies

app0 uses only cookies that are strictly necessary to provide the service you ask for. They keep you signed in, protect your account and our systems while you sign in, and remember a handful of interface choices you make, such as light or dark mode.

We do not use analytics, advertising, retargeting or social media cookies, on the website or in the app, and we do not load third-party tracking scripts. Because every cookie we use is strictly necessary, we do not show a cookie banner and there is nothing to opt out of. If we ever add optional cookies, we will ask for your consent first.

3. The cookies and storage we use

Name	Set by	Purpose	Category	Duration
__Secure-crm.session_token	Set byapp0	PurposeHolds the token that proves you are signed in.	CategoryStrictly necessary	Duration7 days, extended each day you use app0. Removed when you sign out.
__Secure-crm.session_data	Set byapp0	PurposeA short-lived, signed copy of your session details so pages can load without checking the database every time.	CategoryStrictly necessary	Duration5 minutes, then refreshed while you are signed in.
__Secure-crm.state	Set byapp0	PurposeProtects sign-in with Microsoft, Google, your company’s single sign-on and the authorisation of Outside Agents against forgery.	CategoryStrictly necessary	DurationOnly while a sign-in or authorisation completes, at most a few minutes.
__Secure-crm.pkce_code_verifier	Set byapp0	PurposeProtects the same sign-in and authorisation flows against interception.	CategoryStrictly necessary	DurationOnly while a sign-in or authorisation completes, at most a few minutes.
theme (local storage)	Set byapp0	PurposeRemembers whether you chose light or dark mode.	CategoryStrictly necessary to keep your choice	DurationUntil you clear your browser’s site data.
Interface choices (local storage)	Set byapp0	PurposeRemembers whether you collapsed the Tasks sidebar, which export format you last chose for deals, drafts of GEO questions you have not saved, and which assistant runs and new teammates you have already seen, so we do not show them as new again.	CategoryStrictly necessary to keep your choice	DurationUntil you clear your browser’s site data.
In-progress operations (session storage)	Set byapp0	PurposeRemembers an operation you have started in this tab so that a reload does not run it twice, keeps navigation state within the tab, and records when the app last reloaded itself to pick up a new version.	CategoryStrictly necessary	DurationUntil you close the tab.

On an installation that is not served over HTTPS, such as a local developer copy, the sign-in cookies have the same names without the __Secure- prefix.

4. Third-party pages and content

Some parts of app0 take you to pages run by other companies, or load content from them. They set their own cookies under their own policies:

Stripe. Checkout, the billing portal, invoices and receipts are Stripe pages at stripe.com. Stripe uses cookies there for fraud prevention and to run its pages. See Stripe’s cookie policy.
Microsoft and Google. Signing in with Microsoft or Google, connecting a mailbox or calendar, and approving Teams access happen on Microsoft and Google pages.
Composio. Connecting a third-party application opens Composio’s hosted connect page.
Connector logos. The Connectors and outside data pages load application logos from logos.composio.dev, which receives your IP address and browser information when they load.

Fonts, icons and all other assets are served from our own site. We do not load fonts from Google at page load.

5. Managing cookies

You can block or delete cookies in your browser settings. If you block the sign-in cookies, you will not be able to sign in to app0. Clearing your browser’s site data for app0.si signs you out and resets the interface choices listed above. Your choices apply only to the browser and device you make them on.

7. Contact

If you have questions about this Cookie Policy or our use of cookies, email legal@askyori.ai.