Privacy Policy

Version 1.0 · Effective date: 18 December 2025

This Privacy Policy explains how ZANTEMARK LIMITED ("we", "us", "Company") processes personal data when you use YOLOCO at https://app.trends.yoloco.io (the "Service").

1. Who we are

1.1. Controller: ZANTEMARK LIMITED, company number HE 426044, registered address: Themistokli Dervi, 5 Elenion Building, 1066, Nicosia, Cyprus.

1.2. Contact: support@yoloco.io (privacy requests), info@yoloco.io (legal/general).

2. What personal data we collect

We may collect the following categories depending on how you use the Service:

2.1. Account and profile data

  • name (if provided), email address, account settings, authentication data (stored in a protected form).

2.2. Billing and payment data

  • billing contact details, invoices/receipts, payment status, transaction identifiers.

We do not store full payment card numbers; card payments are handled by payment providers.

2.3. Usage and technical data

  • IP address, device/browser identifiers, logs of actions within the Service, timestamps, cookie identifiers, approximate location derived from IP.

2.4. Support and communications

  • messages you send to support and our correspondence.

2.5. Business customer data uploaded by Business Clients (where applicable)

  • personal data contained in data uploaded by Business Clients and processed under their instructions (see Section 9, DPA).

3. Purposes and legal bases

We process personal data for:

3.1. Providing the Service and performing the contract (account creation, authentication, features, support).

3.2. Security and fraud prevention (protect accounts, prevent abuse, maintain logs).

3.3. Compliance with legal obligations (accounting/tax/VAT, responding to lawful requests).

3.4. Service improvement and analytics (understanding usage, diagnosing issues, improving performance).

3.5. Marketing communications (where permitted), as described in Section 7.

3.6. Cookies and similar technologies (see Section 6 and Cookie Policy).

4. Sharing of personal data

We may share personal data with:

4.1. Service providers (processors/sub-processors) assisting with hosting, email delivery, support tools, analytics, and payment processing.

4.2. Authorities where required by law or to protect rights and safety.

4.3. Parties to a business transaction (e.g., merger/acquisition), subject to appropriate safeguards.

5. International transfers

We may transfer personal data outside the EEA depending on our vendors. Where required, we use appropriate safeguards (e.g., contractual protections) and supplementary measures.

6. Cookies

We use strictly necessary cookies to run the Service. Optional cookies (preferences/analytics/marketing) are used only where required opt-in consent has been obtained. For details, see Cookie Policy.

7. Marketing communications and your choices

7.1. Service messages (non-marketing): we may send essential communications about security, billing, and important service changes.

7.2. Marketing messages (optional): we may send product updates, newsletters, and offers where we have a lawful basis (e.g., consent where required, or legitimate interest where permitted).

7.3. Opt-out: you can unsubscribe at any time using the link in emails or by contacting support@yoloco.io. We do not rely on pre-ticked boxes for marketing consent.

8. Data retention

We keep personal data only as long as necessary for the purposes described:

8.1. Account data: for the life of the account and then for a limited period for security, backups, and legal claims.

8.2. Billing/tax records: for the period required by applicable accounting/tax/VAT rules.

8.3. Logs/security records: retained for a limited period to ensure security and investigate incidents.

Some data may persist in backups until overwritten; access is restricted and backups are not used for unrelated purposes.

9. Business Clients (Controller/Processor) and DPA

9.1. If a Business Client uploads personal data of third parties into the Service, that Business Client typically acts as controller and we act as processor.

9.2. In such cases, processing is governed by a Data Processing Addendum (DPA) and the Business Client's documented instructions.

10. Influencer / Public Profiles Data (notice)

10.1. YOLOCO may process personal data relating to creators/influencers and other individuals whose public profiles or public content are analyzed in the Service ("Public Profile Data").

10.2. Data may include:

  • public profile identifiers (username/handle, profile URL)
  • public profile information (display name, bio)
  • public content and metadata
  • public metrics
  • derived analytics (e.g., engagement rates, growth trends)

10.3. Sources: publicly accessible sources (e.g., public profiles/pages) and/or business customers who upload lawful lists/links.

10.4. Purposes: provide analytics and reporting features, help customers discover/evaluate creators, improve service quality, prevent abuse, and maintain security.

10.5. Requests and objections: if you want to make a request (access, deletion, objection where applicable), contact support@yoloco.io and include your profile URL/username and platform name. We may request verification to locate the data and prevent fraud.

11. Your rights

Depending on your location and applicable law, you may have rights to access, rectify, delete, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent.

To exercise rights, contact support@yoloco.io. We may need to verify identity.

You may also lodge a complaint with your local supervisory authority.

12. Security

We implement organizational and technical measures designed to protect personal data (access controls, logging, security monitoring). No system is 100% secure, but we work to prevent unauthorized access and respond to incidents.

13. Children

The Service is not intended for children.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted with an updated effective date.