PRIVACY POLICY

1. Who we are

1.1. Controller: ZANTEMARK LIMITED, company number HE 426044, registered address: Themistokli Dervi, 5 Elenion Building, 1066, Nicosia, Cyprus.

1.2. Contact: [email protected] (privacy requests), [email protected] (legal/general).

2. What personal data we collect

We may collect the following categories depending on how you use the Service:

2.1. Account and profile data

2.2. Billing and payment data

2.3. Usage and technical data

2.4. Support and communications

3. Purposes and legal bases

We process personal data for:

4. Sharing of personal data

We may share personal data with:

5. International transfers

We may transfer personal data outside the EEA depending on our vendors. Where required, we use appropriate safeguards (e.g., contractual protections) and supplementary measures.

6. Cookies

We use strictly necessary cookies to run the Service. Optional cookies (preferences/analytics/marketing) are used only where required opt-in consent has been obtained. For details, see Cookie Policy at /cookies.

7. Marketing communications and your choices

7.1. Service messages (non-marketing): we may send essential communications about security, billing, and important service changes.

7.2. Marketing messages (optional): we may send product updates, newsletters, and offers where we have a lawful basis (e.g., consent where required, or legitimate interest where permitted).

7.3. Opt-out: you can unsubscribe at any time using the link in emails or by contacting [email protected]. We do not rely on pre-ticked boxes for marketing consent.

8. Data retention

We keep personal data only as long as necessary for the purposes described:

9. Business Clients (Controller/Processor) and DPA

9.1. If a Business Client uploads personal data of third parties into the Service, that Business Client typically acts as controller and we act as processor.

9.2. In such cases, processing is governed by a Data Processing Addendum (DPA) and the Business Client's documented instructions.

10. Influencer / Public Profiles Data (notice)

10.1. YOLOCO may process personal data relating to creators/influencers and other individuals whose public profiles or public content are analyzed in the Service ("Public Profile Data").

10.2. Data may include: public profile identifiers (username/handle, profile URL), public profile information (display name, bio), public content and metadata, public metrics, and derived analytics (e.g., engagement rates, growth trends).

10.3. Sources: publicly accessible sources (e.g., public profiles/pages) and/or business customers who upload lawful lists/links.

10.4. Purposes: provide analytics and reporting features, help customers discover/evaluate creators, improve service quality, prevent abuse, and maintain security.

10.5. Requests and objections: if you want to make a request (access, deletion, objection where applicable), contact [email protected] and include your profile URL/username and platform name. We may request verification to locate the data and prevent fraud.

11. Your rights

Depending on your location and applicable law, you may have rights to access, rectify, delete, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent.

To exercise rights, contact [email protected]. We may need to verify identity.

You may also lodge a complaint with your local supervisory authority.

12. Security

We implement organizational and technical measures designed to protect personal data (access controls, logging, security monitoring). No system is 100% secure, but we work to prevent unauthorized access and respond to incidents.

13. Children

The Service is not intended for children.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted with an updated effective date.

Legal Notice / Imprint (Company details)