Privacy Policy

1. Who we are

Yolodex, Inc. is a Delaware corporation with its registered office at 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808, USA. For the personal information described in this policy, Yolodex is the data controller, except as described in Section 13 (Customer Data), where Yolodex acts as a processor on behalf of its business customers.

2. Information we collect

We collect the following categories of personal information:

Account information. When you create a Yolodex account, we collect your name, business email address, company name, role, and login credentials.

Billing information. When you subscribe to a paid plan, we collect billing contact details and payment information. Payment card details are processed and stored by our payment processor, Stripe; we do not store full card numbers.

Usage data. We collect information about how you use the Service, including pages and features accessed, actions taken, IP address, device and browser type, operating system, referring URLs, and timestamps.

Communications. When you contact us by email, fill in a form, or interact with our support team, we collect the contents of your messages and any attachments.

Marketing data. If you sign up to our newsletter or interact with our marketing, we collect your email address and engagement information (opens, clicks).

Cookies and similar technologies. See Section 10.

We do not knowingly collect special-category data (such as health, biometric, or political opinion data) and ask that you do not submit it.

3. How we use information

We use personal information to:

• Provide, maintain, and improve the Service.
• Create and manage your account and authenticate users.
• Process payments and manage subscriptions.
• Communicate with you about the Service, including updates, security notices, and support.
• Send marketing communications, where permitted by law and subject to your right to opt out.
• Monitor and analyse usage to improve performance, security, and reliability.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

We do not use Customer Data (as defined in our Terms) to train, fine-tune, or otherwise create foundation or large language models, except where such fine-tuning is performed exclusively for a customer's own benefit on that customer's documented instruction.

4. Legal bases (EU/UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases to process personal information:

• Contract — to provide the Service and perform our obligations to you.
• Legitimate interests — to operate, secure, and improve the Service, prevent fraud, and conduct ordinary business activities, balanced against your rights.
• Consent — for optional marketing communications and certain cookies, which you can withdraw at any time.
• Legal obligation — to comply with applicable laws and regulatory requirements.

5. How we share information

We share personal information with:

• Service providers and sub-processors that help us operate the Service, including hosting, language model providers, payment processing, analytics, and customer support tools. They process information on our behalf under written agreements that require appropriate protections.
• Professional advisors such as lawyers, accountants, and auditors, where necessary.
• Authorities and other third parties where required by law, in response to lawful requests, or to protect the rights, property, or safety of Yolodex, our users, or others.
• Successors in connection with a merger, acquisition, financing, or sale of all or part of our business, with appropriate confidentiality protections.

We do not sell personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

A current list of sub-processors is available on request.

6. International transfers

Yolodex is based in the United States, and our service providers may be located in other countries. Where personal information is transferred outside the EU/EEA, UK, or Switzerland, we rely on appropriate safeguards, including the EU Standard Contractual Clauses (Commission Decision 2021/914) and the UK International Data Transfer Addendum (or UK IDTA, as applicable), together with supplementary measures where appropriate.

7. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. Where required by law or for legitimate business purposes (such as resolving disputes, complying with tax obligations, or maintaining security records), we may retain certain information for longer.

On termination of your account, we delete or anonymise account information within a reasonable period, except for information stored in routine backups, which is overwritten on our standard backup cycle, or as otherwise required by law.

8. Security

We implement industry-standard technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, or disclosure. These include encryption in transit and at rest, access controls, MFA for administrative access, network safeguards, vulnerability management, and incident response procedures. No system is completely secure, and we cannot guarantee absolute security.

If we become aware of a security breach affecting personal information, we will notify affected users and authorities without undue delay and in accordance with applicable law.

9. Your rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — ask us to delete personal information, subject to legal exceptions.
• Restriction or objection — restrict or object to certain processing.
• Portability — receive your information in a structured, commonly used format.
• Withdraw consent — where we rely on consent, withdraw it at any time.
• Lodge a complaint — with your local data protection authority (in the UK, the ICO; in Ireland, the Data Protection Commission).

If you are a California resident, you also have the right to know what personal information we collect, request deletion, correct inaccurate information, opt out of "sale" or "sharing" of personal information (we do neither), and not be discriminated against for exercising your rights.

To exercise any of these rights, email support@yolodex.ai. We may need to verify your identity before responding. We will respond within the time required by applicable law.

10. Cookies and tracking

We use cookies and similar technologies to operate the Service, remember your preferences, analyse usage, and improve performance. Categories include:

• Strictly necessary cookies — required for the Service to function and cannot be disabled.
• Analytics cookies — help us understand how the Service is used.
• Marketing cookies — used on our public website to measure marketing effectiveness, where you have consented.

You can control cookies through your browser settings or, where required, our cookie banner.

11. Children

The Service is intended for business use by adults. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us at support@yolodex.ai and we will delete it.

12. Third-party links and integrations

The Service and our website may contain links to or integrations with third-party platforms. Their practices are governed by their own privacy policies. We are not responsible for those practices.

13. Customer Data (processed on behalf of business customers)

When a business customer uses the Service, Yolodex processes personal information contained in Customer Data (such as customer reviews, survey responses, and ad performance data) as a processor on behalf of that customer. The customer determines the purposes and means of that processing, and the customer's own privacy notices govern how that personal information is collected and used.

If you are an end-user or data subject of one of our business customers and want to exercise your rights, please contact that business directly. We will assist them in responding under our Data Processing Agreement.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on our website and update the "Effective Date" above. Material changes will be communicated through the Service or by email where appropriate.

15. Contact us

For any questions, requests, or complaints about this Privacy Policy or our handling of personal information, contact us at:

Yolodex, Inc.
251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808, USA
support@yolodex.ai